Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/eca01c-5232-47c5-b014-5b132f7d3b49/1/0t1N3VNvGKhyy6wV5YlUKu3NBzc.mft
File: 0t1N3VNvGKhyy6wV5YlUKu3NBzc.mft (raw, json)
Hash identifier: 1aSP6t3JkUJzjXuBixndrch23090qafkOnPzBf89FhQ=
Subject key identifier: 32:B2:58:71:B0:8C:F3:B9:BF:B5:47:D4:D1:12:67:99:1B:0B:17:D9
Authority key identifier: D2:DD:4D:DD:53:6F:18:A8:72:CB:AC:15:E5:89:54:2A:ED:CD:07:37
Certificate issuer: /CN=d2dd4ddd536f18a872cbac15e589542aedcd0737
Certificate serial: 0199FCFD77AE9F9D44C9092D643E11007441
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0t1N3VNvGKhyy6wV5YlUKu3NBzc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/eca01c-5232-47c5-b014-5b132f7d3b49/1/0t1N3VNvGKhyy6wV5YlUKu3NBzc.mft
Manifest number: 08CC
Signing time: Sun 19 Oct 2025 15:01:33 +0000
Manifest this update: Sun 19 Oct 2025 15:01:33 +0000
Manifest next update: Mon 20 Oct 2025 15:01:33 +0000
Files and hashes: 1: 0t1N3VNvGKhyy6wV5YlUKu3NBzc.crl (hash: OmNpydCAxQ+/mYC+Ji0BHw7R6C0G+xW6MbCsmZ+SNg4=)
2: VjYlerEh7qVTQBqqPATO88eK6NQ.roa (hash: 5FRpnrVjan0/lQPhlwWwVDFcy2JjA8zi7jlobrQ41Zw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/eca01c-5232-47c5-b014-5b132f7d3b49/1/0t1N3VNvGKhyy6wV5YlUKu3NBzc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/eca01c-5232-47c5-b014-5b132f7d3b49/1/0t1N3VNvGKhyy6wV5YlUKu3NBzc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0t1N3VNvGKhyy6wV5YlUKu3NBzc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:77:ae:9f:9d:44:c9:09:2d:64:3e:11:00:74:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2dd4ddd536f18a872cbac15e589542aedcd0737
Validity
Not Before: Oct 19 15:01:33 2025 GMT
Not After : Oct 20 15:01:33 2025 GMT
Subject: CN=32b25871b08cf3b9bfb547d4d11267991b0b17d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a4:45:f2:5f:4c:a4:61:fa:4e:94:3e:44:16:
8e:69:6f:89:de:88:95:51:e8:d8:e7:dc:ac:88:5b:
de:dd:25:8f:77:3f:1c:71:c5:93:3f:bf:65:f0:d5:
82:a4:f1:9d:ac:e2:c2:3d:62:31:8f:45:79:fc:fa:
07:df:32:9d:c9:4b:b7:59:b1:fa:7e:69:63:f2:4a:
36:96:26:03:6f:1a:72:fb:ef:99:01:62:91:1c:cc:
e4:a7:f2:47:e0:69:0d:12:ee:6b:7b:a6:5c:1a:bc:
09:1b:74:a1:ef:51:7f:c9:38:b0:db:eb:70:eb:11:
1e:49:87:fd:0c:9a:94:6a:21:b0:dd:c6:28:63:00:
d3:a9:e2:4c:a2:6a:f7:1d:06:df:bd:7b:2a:29:dd:
21:ca:91:a1:23:72:a6:c7:bf:dd:77:83:38:28:af:
95:2e:c1:29:1b:06:d4:d5:46:5b:da:d9:08:db:f8:
3c:58:28:87:85:cf:ab:f8:98:f3:27:e4:94:60:c9:
80:32:3c:9d:43:35:e2:af:32:68:d4:8b:04:22:ef:
d4:21:6b:92:00:be:01:9b:ec:31:e6:1a:c5:ef:a6:
b8:c2:ba:fe:9f:6c:7a:f0:38:a9:c1:12:b0:a9:df:
ea:07:61:cd:fb:79:c1:8b:df:53:2d:94:10:a7:a5:
97:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:B2:58:71:B0:8C:F3:B9:BF:B5:47:D4:D1:12:67:99:1B:0B:17:D9
X509v3 Authority Key Identifier:
keyid:D2:DD:4D:DD:53:6F:18:A8:72:CB:AC:15:E5:89:54:2A:ED:CD:07:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0t1N3VNvGKhyy6wV5YlUKu3NBzc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/eca01c-5232-47c5-b014-5b132f7d3b49/1/0t1N3VNvGKhyy6wV5YlUKu3NBzc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/eca01c-5232-47c5-b014-5b132f7d3b49/1/0t1N3VNvGKhyy6wV5YlUKu3NBzc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:a8:31:77:42:9c:be:b0:89:48:44:86:f6:fe:74:ba:20:91:
78:80:eb:fb:8a:9a:a7:bf:eb:cc:22:d6:b0:72:22:e4:1a:03:
2b:6e:93:90:38:f5:63:40:8b:bc:02:aa:01:50:6f:77:93:a7:
7d:3d:2c:6f:4f:45:00:ba:5c:df:07:8b:21:0b:79:83:a7:8d:
76:79:20:12:98:4e:88:84:65:78:69:ed:4b:08:f8:04:94:5d:
73:d0:f6:0e:1f:9d:a1:86:26:32:9c:1f:b7:4b:57:5d:db:a3:
8c:e2:60:42:37:65:62:e8:92:01:bf:40:2d:c9:a3:9c:38:88:
a9:e9:6e:e0:40:d2:b6:2a:d4:db:f7:34:45:35:e3:99:ea:63:
7b:df:65:01:f5:1a:92:c7:10:df:ea:88:ff:3d:ca:50:2c:ca:
69:1b:cc:eb:cf:2e:c9:80:c7:37:b3:17:53:4a:90:26:be:b7:
b4:d7:0e:a2:15:4c:84:68:b5:05:8e:69:97:6d:90:25:7a:06:
b2:62:2f:fc:9b:47:96:ef:73:9e:59:47:ac:4c:1a:5b:40:02:
c6:27:49:3b:de:d1:f3:40:c8:d8:d0:b1:06:0a:ec:05:f8:ff:
8e:23:28:d4:bf:36:b4:b9:10:2f:e2:ea:8a:38:e0:5c:06:45:
31:29:e7:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:27:33 2025 by rpki-client