Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.mft
File: 0d4HoaH2W9EW4R-fEQhgS26VzP0.mft (raw, json)
Hash identifier: ls3lfChwGrK46XhSIBSbW4G08AJEeUkPizOLKY520eg=
Subject key identifier: 16:3D:B7:0D:6D:8B:14:14:89:48:2A:58:9B:02:5F:3C:F8:09:4F:77
Authority key identifier: D1:DE:07:A1:A1:F6:5B:D1:16:E1:1F:9F:11:08:60:4B:6E:95:CC:FD
Certificate issuer: /CN=d1de07a1a1f65bd116e11f9f1108604b6e95ccfd
Certificate serial: 0199FBEACEE8179A27594F601682524E23C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0d4HoaH2W9EW4R-fEQhgS26VzP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.mft
Manifest number: 1278
Signing time: Sun 19 Oct 2025 10:01:33 +0000
Manifest this update: Sun 19 Oct 2025 10:01:33 +0000
Manifest next update: Mon 20 Oct 2025 10:01:33 +0000
Files and hashes: 1: 0d4HoaH2W9EW4R-fEQhgS26VzP0.crl (hash: bntrRC2kf7DeSOMMhYZwBGcqyWpwXje8M2SgW4rOejU=)
2: QEHZF8Tlk9QKI2YxEH34bnx0Z1c.roa (hash: 8+749rwNuEEuELLtmccQKg/as7h9BdIGWfJq5dqwT3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0d4HoaH2W9EW4R-fEQhgS26VzP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:ce:e8:17:9a:27:59:4f:60:16:82:52:4e:23:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1de07a1a1f65bd116e11f9f1108604b6e95ccfd
Validity
Not Before: Oct 19 10:01:33 2025 GMT
Not After : Oct 20 10:01:33 2025 GMT
Subject: CN=163db70d6d8b141489482a589b025f3cf8094f77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0c:bf:f1:0d:13:55:c1:1b:92:9e:54:14:66:
63:6a:ff:dd:bd:c1:9a:9c:85:53:22:e4:fe:37:b8:
02:ff:10:ec:f1:be:ac:1c:7d:93:65:6d:6e:61:8d:
eb:91:26:9b:c1:4d:cd:3a:a5:d7:be:a4:34:8d:e3:
65:78:8c:fd:00:ed:b0:2d:26:bc:4d:e6:3e:b0:c9:
a4:53:b1:f1:4a:1d:7e:c0:c1:f4:83:8c:96:ef:b9:
b0:f0:eb:eb:e5:78:bd:70:ff:82:b1:32:07:64:17:
3e:ca:5e:bd:7b:50:0e:1a:4a:d0:c4:eb:75:f3:50:
1c:47:a2:5e:b4:6b:3a:1a:69:29:b4:5d:ca:b8:c1:
b8:3d:d9:b9:c5:55:db:48:1f:03:1e:7f:ad:90:62:
bb:4a:00:a8:23:b3:61:e0:94:c7:48:ef:5c:74:1e:
dd:67:8a:13:03:eb:12:5c:5f:6a:71:21:43:fa:28:
10:76:f7:43:b6:e9:ea:14:86:24:0b:86:1e:0b:1a:
a4:a5:f6:c3:b5:4f:96:38:cb:6b:d2:27:3a:38:b0:
d8:96:ac:29:96:48:96:0a:ef:1d:ef:d2:69:4b:37:
61:ca:67:10:35:91:e1:06:5f:6d:28:6f:12:45:ca:
f4:1e:51:99:13:ff:d3:72:30:99:be:3c:b2:9c:7d:
d8:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:3D:B7:0D:6D:8B:14:14:89:48:2A:58:9B:02:5F:3C:F8:09:4F:77
X509v3 Authority Key Identifier:
keyid:D1:DE:07:A1:A1:F6:5B:D1:16:E1:1F:9F:11:08:60:4B:6E:95:CC:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d4HoaH2W9EW4R-fEQhgS26VzP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:c4:9d:79:26:0f:d8:c7:69:6b:b7:93:71:b8:17:5f:fb:fa:
c2:66:77:72:5c:2c:6a:2b:19:d9:f5:6d:8c:ed:85:12:d7:07:
d5:fb:42:79:1d:87:4e:36:7b:dc:e2:f2:fc:83:ae:f3:f8:ef:
f4:b7:1c:21:b6:5a:c9:70:2d:ff:c6:44:64:b6:82:0a:7c:88:
79:9d:c3:f5:f8:c3:b2:55:1c:96:ca:e4:da:5f:df:6b:3e:7d:
35:a2:a2:7d:b0:34:e5:a7:ce:1a:59:4e:8b:88:df:ec:d7:28:
3b:57:ee:33:b8:86:d2:27:b1:d6:ca:2d:d6:0d:10:26:96:78:
c0:ac:9c:5a:1f:73:aa:26:ea:26:7a:f0:5e:8d:40:7e:f1:92:
2b:6e:b0:22:e1:3f:5e:22:1f:df:68:a9:5f:43:ae:e0:13:64:
54:fb:90:c9:19:09:1d:05:1f:04:90:df:81:57:57:42:f5:7d:
2f:e7:aa:52:b4:e5:66:43:36:ca:06:e9:68:74:43:7d:43:73:
f6:ce:37:9f:e5:c0:5b:c1:b8:8f:f3:20:46:ec:1e:4e:f3:71:
fa:f4:a7:e3:a7:95:81:a7:58:62:16:29:c4:b7:33:da:dd:d0:
3a:92:c4:8d:42:91:77:ed:79:e1:71:d3:02:0c:17:ec:16:19:
89:26:12:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:20 2025 by rpki-client