
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/c309ec-3254-4200-9a5e-ab42b4c93ed9/1/0gVCphNVJBQhlMqnCOfbLMprTmM.mft
File: 0gVCphNVJBQhlMqnCOfbLMprTmM.mft (raw, json)
Hash identifier: swg6+6xm6sulqUMErEzQhw+Xoqp6zl6BtlxUrUlpnE4=
Subject key identifier: 56:46:B7:B2:E6:CA:55:B8:14:86:21:90:3B:5F:62:B0:96:20:23:C4
Authority key identifier: D2:05:42:A6:13:55:24:14:21:94:CA:A7:08:E7:DB:2C:CA:6B:4E:63
Certificate issuer: /CN=d20542a6135524142194caa708e7db2cca6b4e63
Certificate serial: 0199FC583B090F9E54E54664AAD2E0F3AEEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0gVCphNVJBQhlMqnCOfbLMprTmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/c309ec-3254-4200-9a5e-ab42b4c93ed9/1/0gVCphNVJBQhlMqnCOfbLMprTmM.mft
Manifest number: 0FBA
Signing time: Sun 19 Oct 2025 12:01:04 +0000
Manifest this update: Sun 19 Oct 2025 12:01:04 +0000
Manifest next update: Mon 20 Oct 2025 12:01:04 +0000
Files and hashes: 1: 0gVCphNVJBQhlMqnCOfbLMprTmM.crl (hash: /VAI19PUVZPR6ZCZiNQLu44F91GSattTAWATLwobjcM=)
2: H6uSFDtLoI4YQD04FkS4VSFpIhw.roa (hash: hv1JnxHOhWB0hv+54xUCZyY9gAEBPU8rdk2117x7KVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/c309ec-3254-4200-9a5e-ab42b4c93ed9/1/0gVCphNVJBQhlMqnCOfbLMprTmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/c309ec-3254-4200-9a5e-ab42b4c93ed9/1/0gVCphNVJBQhlMqnCOfbLMprTmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0gVCphNVJBQhlMqnCOfbLMprTmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:3b:09:0f:9e:54:e5:46:64:aa:d2:e0:f3:ae:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d20542a6135524142194caa708e7db2cca6b4e63
Validity
Not Before: Oct 19 12:01:04 2025 GMT
Not After : Oct 20 12:01:04 2025 GMT
Subject: CN=5646b7b2e6ca55b8148621903b5f62b0962023c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:2d:63:3f:61:f6:a6:07:bc:2a:96:7e:9f:fa:
4c:f3:1c:0f:7f:19:b8:ed:f6:f2:2c:d7:3b:a7:09:
b4:42:ee:a9:ee:70:1d:bb:0b:c1:ef:e3:a3:35:f1:
a9:54:f7:31:d8:5b:16:5d:f5:35:cb:81:c5:aa:ee:
2e:ca:c5:cc:6a:24:2b:f8:cb:c6:3f:b0:22:a1:78:
ab:9e:7d:64:8b:d3:55:c5:4c:79:d6:f0:c5:42:40:
d0:5f:d9:c5:e0:21:01:45:f5:72:9f:46:69:30:9f:
35:45:40:00:5a:ed:d2:9d:0e:78:60:4d:2c:a2:04:
ba:cb:b5:58:d2:75:7a:6d:e8:99:9a:ec:ea:87:28:
89:69:ea:dd:b8:4c:4f:77:94:cf:7b:04:59:29:75:
97:72:cc:45:d8:2a:24:d6:c6:05:81:bf:9d:2e:c6:
fa:14:c1:57:2b:fd:75:dd:35:65:7f:97:d4:49:e0:
c1:6f:ed:28:f8:e3:96:2b:a2:04:b2:69:84:7f:71:
76:c9:51:70:18:c9:92:7a:9f:16:6d:71:11:f7:61:
70:88:9a:e2:f3:2c:3a:12:a8:6a:84:21:44:b1:cf:
4e:9b:96:73:07:ff:ea:68:5d:20:5f:41:4d:85:f4:
0d:74:25:bf:17:d4:44:00:39:e6:a9:70:a1:01:8c:
31:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:46:B7:B2:E6:CA:55:B8:14:86:21:90:3B:5F:62:B0:96:20:23:C4
X509v3 Authority Key Identifier:
keyid:D2:05:42:A6:13:55:24:14:21:94:CA:A7:08:E7:DB:2C:CA:6B:4E:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0gVCphNVJBQhlMqnCOfbLMprTmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/c309ec-3254-4200-9a5e-ab42b4c93ed9/1/0gVCphNVJBQhlMqnCOfbLMprTmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/c309ec-3254-4200-9a5e-ab42b4c93ed9/1/0gVCphNVJBQhlMqnCOfbLMprTmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:8e:84:80:a8:74:7d:c4:76:a3:46:3d:00:0f:4a:94:26:67:
d1:a6:a9:4a:cc:1f:ac:b1:76:55:e3:16:34:71:eb:77:e5:1a:
0e:4a:1d:7f:fd:64:1d:70:6b:e9:63:f8:3b:99:1f:e9:b0:6f:
c0:70:8f:df:98:e7:57:85:e6:a9:1e:1b:43:10:5d:06:53:61:
dd:18:82:dd:50:3f:74:aa:e4:4b:15:b8:7d:64:10:18:93:bc:
a0:80:39:b4:43:de:bc:fc:19:24:74:ad:43:83:89:c8:03:15:
57:4e:d7:c0:c3:54:73:7d:5d:15:ee:87:ac:11:48:c5:84:3f:
5d:ad:bf:58:4a:bd:f7:96:05:3e:a9:08:d6:4f:07:3a:cf:7b:
57:45:c1:69:d3:37:31:32:07:a8:3e:9d:b3:17:02:7c:04:f3:
57:93:94:ad:c8:fa:84:32:7b:ef:97:33:2c:c8:6f:e3:a0:cc:
38:2d:a9:f8:4d:38:0f:85:e7:fb:18:24:fc:3a:c4:83:e2:81:
ca:16:af:8c:34:31:4f:83:8f:de:4a:e7:9e:c9:90:68:9a:26:
29:e1:0c:4f:57:24:2f:30:31:6f:f3:63:e9:ba:cd:28:f6:6f:
da:4a:3e:4d:c5:25:38:0d:44:a8:ee:23:21:43:8e:59:c6:a8:
6d:65:a7:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:18:59 2025 by rpki-client