Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/cbca0b-6453-494c-8727-57e08f61f2ec/1/0mF9FdtY_jBi0brb4E0wwZSd1f8.mft
File: 0mF9FdtY_jBi0brb4E0wwZSd1f8.mft (raw, json)
Hash identifier: JNyhrPYL54UUkriPhjPqNDgAnZvtcTxiG8vzcFr8YZY=
Subject key identifier: F7:07:BC:22:63:43:94:67:1B:D5:30:F5:6C:4C:7E:2F:31:56:5A:F5
Authority key identifier: D2:61:7D:15:DB:58:FE:30:62:D1:BA:DB:E0:4D:30:C1:94:9D:D5:FF
Certificate issuer: /CN=d2617d15db58fe3062d1badbe04d30c1949dd5ff
Certificate serial: 0199FBEAA38AC76ADEFBAC88063E29E8AE42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0mF9FdtY_jBi0brb4E0wwZSd1f8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/cbca0b-6453-494c-8727-57e08f61f2ec/1/0mF9FdtY_jBi0brb4E0wwZSd1f8.mft
Manifest number: 16DD
Signing time: Sun 19 Oct 2025 10:01:22 +0000
Manifest this update: Sun 19 Oct 2025 10:01:22 +0000
Manifest next update: Mon 20 Oct 2025 10:01:22 +0000
Files and hashes: 1: 0mF9FdtY_jBi0brb4E0wwZSd1f8.crl (hash: 3+FLpoE72BluGUGCUK+W/KsrOv+jykKouezTg7YFHRw=)
2: j-Iupp3EcWQfbMD2aDvdXh5buVM.roa (hash: vNF4TPFh0oVURLAenwqLDdq2RvvuTpEILFtX5lE+Y4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/cbca0b-6453-494c-8727-57e08f61f2ec/1/0mF9FdtY_jBi0brb4E0wwZSd1f8.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/cbca0b-6453-494c-8727-57e08f61f2ec/1/0mF9FdtY_jBi0brb4E0wwZSd1f8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0mF9FdtY_jBi0brb4E0wwZSd1f8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:a3:8a:c7:6a:de:fb:ac:88:06:3e:29:e8:ae:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2617d15db58fe3062d1badbe04d30c1949dd5ff
Validity
Not Before: Oct 19 10:01:22 2025 GMT
Not After : Oct 20 10:01:22 2025 GMT
Subject: CN=f707bc22634394671bd530f56c4c7e2f31565af5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b1:af:ef:80:a6:e6:aa:65:43:1b:80:de:f5:
e8:41:82:5b:41:6b:8c:d3:c3:eb:2b:7e:1b:9f:60:
1f:ad:4c:39:67:79:c1:2d:70:e9:64:53:8d:a0:00:
89:9e:8d:07:e6:c6:17:46:46:a7:12:fd:61:a7:e6:
1c:7f:b7:ad:dc:3c:3e:b3:ff:a9:62:11:88:da:00:
e3:3c:81:6b:23:7b:bb:0c:28:7d:0f:5d:c9:e1:a5:
3e:9c:e6:8a:f2:9f:b5:69:b7:88:32:70:20:7e:18:
d9:bb:f1:30:5d:82:36:5c:1a:39:f2:00:58:59:d8:
64:6a:7c:15:76:c0:35:8b:21:b0:36:38:36:5b:f0:
4a:ff:ef:c8:a6:94:e6:2c:26:d8:7f:09:f1:e9:81:
1d:c6:b4:38:e6:97:5a:96:1b:4c:25:65:07:60:8a:
0a:7e:ef:db:77:be:13:bf:31:71:6d:9b:e4:15:46:
19:69:d1:8a:44:5e:57:48:13:68:53:62:24:87:12:
5c:62:6d:2b:90:f2:65:df:0f:9d:97:95:76:cd:74:
1b:87:ae:07:a9:7a:b5:33:69:b1:7a:15:e5:bf:f9:
f3:87:e2:e1:22:cc:f9:78:82:74:0f:98:d7:f4:4c:
bf:c9:b7:94:7f:20:cc:ff:44:b4:51:50:50:96:f6:
d1:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:07:BC:22:63:43:94:67:1B:D5:30:F5:6C:4C:7E:2F:31:56:5A:F5
X509v3 Authority Key Identifier:
keyid:D2:61:7D:15:DB:58:FE:30:62:D1:BA:DB:E0:4D:30:C1:94:9D:D5:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mF9FdtY_jBi0brb4E0wwZSd1f8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/cbca0b-6453-494c-8727-57e08f61f2ec/1/0mF9FdtY_jBi0brb4E0wwZSd1f8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/cbca0b-6453-494c-8727-57e08f61f2ec/1/0mF9FdtY_jBi0brb4E0wwZSd1f8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:5a:9c:fc:37:87:85:0c:db:64:00:f3:b5:fd:40:1a:39:7e:
e6:cd:8f:6b:e8:10:ba:10:5e:8e:78:68:89:d1:7b:25:ed:40:
3a:3e:81:d9:3b:4d:98:ac:e5:64:fb:75:9b:09:c6:85:7f:34:
b6:39:1b:98:d9:af:0d:dc:7c:51:46:b3:f5:32:04:db:28:bd:
6e:cb:f5:1a:a9:2b:40:fa:ea:7c:15:88:e1:a0:19:d8:2f:0e:
ed:36:69:b0:9b:02:70:2e:e1:3e:46:60:40:ff:28:af:60:55:
07:a6:a6:fa:63:ef:ab:0f:9b:cd:16:7d:d2:de:e3:06:7e:f2:
70:4a:4c:3b:20:15:2b:32:f0:41:f9:02:64:3e:1a:35:ad:ce:
67:32:b8:34:b8:c8:71:11:6c:73:bf:b5:8b:f1:1b:2c:a0:ac:
e6:ec:aa:1a:6c:d4:9d:ad:1e:cc:5d:54:e9:bd:bb:91:13:2d:
dd:4c:e3:6b:98:08:d1:1d:7b:43:9d:0a:a9:31:33:0f:e1:80:
7f:39:09:96:a1:63:c5:38:5d:45:62:3e:b5:0a:7a:de:19:63:
c6:05:37:d2:19:d9:58:77:3f:79:0a:f2:6e:2f:bb:73:d0:a0:
98:8f:87:49:33:bb:e4:25:13:62:b8:2f:5d:c0:7b:a8:ff:ca:
4e:cf:6a:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:53 2025 by rpki-client