Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/1abe8a-45a2-4156-98d7-6806e3d4ce4f/1/C0z6vkfpKF9l8fLWhrqvFbi0F3M.mft
File: C0z6vkfpKF9l8fLWhrqvFbi0F3M.mft (raw, json)
Hash identifier: F/vmmmG2A6cEtmBX0rEQsrqk/eqgd00D0eSjj76eD3U=
Subject key identifier: 07:77:97:D0:91:E3:13:7B:89:A9:9F:1F:1E:70:27:03:9E:F8:BE:E7
Authority key identifier: 0B:4C:FA:BE:47:E9:28:5F:65:F1:F2:D6:86:BA:AF:15:B8:B4:17:73
Certificate issuer: /CN=0b4cfabe47e9285f65f1f2d686baaf15b8b41773
Certificate serial: 0199FBEC2D6DF4D1089ECE08FA40904D402F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C0z6vkfpKF9l8fLWhrqvFbi0F3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/1abe8a-45a2-4156-98d7-6806e3d4ce4f/1/C0z6vkfpKF9l8fLWhrqvFbi0F3M.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 10:03:03 +0000
Manifest this update: Sun 19 Oct 2025 10:03:03 +0000
Manifest next update: Mon 20 Oct 2025 10:03:03 +0000
Files and hashes: 1: C0z6vkfpKF9l8fLWhrqvFbi0F3M.crl (hash: Sw47qg4cdHsLLioSWMSubCRTdd9Yp8E4ylYKszEYj4E=)
2: XITchRD6fktx1wcD-akQf-lrx7Y.roa (hash: n2NJUWPmQKH808gxYEyCrRDNlUi5MnimQGzfm9J+OVg=)
3: gZLT5wUedCmW-PX2sDiQAVKNuT4.roa (hash: Bsg9vymR2URZ/xLntFSerTzkFFeEBNsWgx7gYqyDMPI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/1abe8a-45a2-4156-98d7-6806e3d4ce4f/1/C0z6vkfpKF9l8fLWhrqvFbi0F3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/1abe8a-45a2-4156-98d7-6806e3d4ce4f/1/C0z6vkfpKF9l8fLWhrqvFbi0F3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/C0z6vkfpKF9l8fLWhrqvFbi0F3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:2d:6d:f4:d1:08:9e:ce:08:fa:40:90:4d:40:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b4cfabe47e9285f65f1f2d686baaf15b8b41773
Validity
Not Before: Oct 19 10:03:03 2025 GMT
Not After : Oct 20 10:03:03 2025 GMT
Subject: CN=077797d091e3137b89a99f1f1e7027039ef8bee7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:38:1d:f0:df:c5:92:56:31:e8:eb:80:5b:b2:
9f:a9:c9:79:bf:dd:20:fa:8b:85:db:f7:6f:27:f1:
35:73:68:4d:77:b3:b0:fc:a3:21:63:34:2e:7d:4a:
df:e5:aa:15:a8:6d:cb:72:5e:89:cd:69:d7:3d:24:
88:fc:44:24:62:42:73:dc:da:bd:b2:d8:5c:f3:e7:
c5:2c:b3:44:9e:6d:06:05:a0:c9:3d:ce:12:3e:30:
38:72:eb:3d:8c:6b:15:39:65:65:38:a3:c9:f8:e5:
a8:a2:24:4a:48:14:3e:0d:a1:8c:ed:2f:6e:66:10:
66:9e:8f:fa:9b:82:35:94:02:bf:44:1c:b0:20:c8:
63:b2:f4:b4:b8:c8:55:2f:39:d7:ff:35:ed:7e:a5:
4a:96:61:de:52:56:69:c4:f1:d9:25:b8:be:07:ba:
51:0e:67:21:62:7f:35:ec:40:03:70:56:aa:8a:7c:
62:e4:a3:50:ca:b1:65:ab:b6:56:fa:63:4f:e2:58:
ba:ca:68:7c:93:08:3a:55:43:66:03:cf:db:a5:a0:
42:c2:b0:3f:87:cd:e9:ab:f3:f4:08:43:09:ef:eb:
20:9b:a4:9a:49:5b:80:de:62:b5:ce:56:93:3e:c6:
8b:f8:25:18:db:7b:21:0d:cf:51:18:d2:00:69:19:
4d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:77:97:D0:91:E3:13:7B:89:A9:9F:1F:1E:70:27:03:9E:F8:BE:E7
X509v3 Authority Key Identifier:
keyid:0B:4C:FA:BE:47:E9:28:5F:65:F1:F2:D6:86:BA:AF:15:B8:B4:17:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C0z6vkfpKF9l8fLWhrqvFbi0F3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/1abe8a-45a2-4156-98d7-6806e3d4ce4f/1/C0z6vkfpKF9l8fLWhrqvFbi0F3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/1abe8a-45a2-4156-98d7-6806e3d4ce4f/1/C0z6vkfpKF9l8fLWhrqvFbi0F3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:3e:1b:73:59:ed:68:4d:f5:43:c0:25:ca:20:28:6f:49:d7:
56:f0:0d:cd:b5:fb:98:21:69:92:bb:a4:73:f3:e8:ce:d1:b7:
ce:4a:ae:ff:c1:2a:31:d0:70:1c:e8:f1:01:96:61:35:2d:b3:
b2:17:a1:ff:b5:5b:cc:ea:7a:cf:83:95:c9:74:81:f0:e9:34:
1d:f8:86:54:8c:f5:b7:86:b1:d7:6a:b6:c1:21:fb:be:6a:e6:
ce:28:f5:9b:e3:8c:95:d2:44:c0:47:5f:ed:cf:fb:5d:d5:9c:
ee:9c:53:63:54:ad:82:80:48:da:a3:dc:2d:5a:5a:5c:31:3e:
d0:a0:b5:bd:65:3a:43:37:ee:94:c0:4d:25:08:b2:70:37:a4:
38:b8:07:9b:dd:70:e9:18:78:fe:47:a4:0c:61:f8:55:33:6b:
60:88:82:00:81:b8:53:cf:6e:a1:2b:bb:5e:7a:9c:ed:11:d1:
2f:3c:52:e3:dc:54:7e:1d:45:38:0f:2a:e1:e5:26:9f:84:57:
f5:2c:6f:96:e5:b9:9e:e4:31:cf:e8:71:01:a8:3c:43:b2:f7:
4d:b5:cc:d7:25:fa:1b:d0:2d:7c:4e:66:6d:d5:25:f3:ff:32:
2f:c4:92:18:87:28:c0:cf:fa:24:aa:dd:ec:af:fe:56:61:6a:
7c:2c:eb:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:34:45 2025 by rpki-client