
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/24fbfc-d902-49db-978a-35a20ff8923e/1/0F7XpYFHqlFMjm2vvMXYdXx9MnI.mft
File: 0F7XpYFHqlFMjm2vvMXYdXx9MnI.mft (raw, json)
Hash identifier: x/fvyPAqHXvJokpD+QADtSBNmM/+EtRtoTCCLBRcM0Y=
Subject key identifier: 3E:FF:C3:6B:E7:E5:87:14:FC:F5:22:11:D3:61:91:9D:CF:36:0A:72
Authority key identifier: D0:5E:D7:A5:81:47:AA:51:4C:8E:6D:AF:BC:C5:D8:75:7C:7D:32:72
Certificate issuer: /CN=d05ed7a58147aa514c8e6dafbcc5d8757c7d3272
Certificate serial: 0199FCFD6272DAF927D336F159E66F686D90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0F7XpYFHqlFMjm2vvMXYdXx9MnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/24fbfc-d902-49db-978a-35a20ff8923e/1/0F7XpYFHqlFMjm2vvMXYdXx9MnI.mft
Manifest number: 01D2
Signing time: Sun 19 Oct 2025 15:01:28 +0000
Manifest this update: Sun 19 Oct 2025 15:01:28 +0000
Manifest next update: Mon 20 Oct 2025 15:01:28 +0000
Files and hashes: 1: 0F7XpYFHqlFMjm2vvMXYdXx9MnI.crl (hash: JeeWNTgjUFQrPM1OC/O6h1gkkKh3DCxHlo6SBoERbvk=)
2: FyqKK2FcK12A9-k5axnFf2sz21k.roa (hash: W5mhlrOLXBrpKomBUnhpTyesgUMLSIHoT9QMJTSp0oA=)
3: rF6Gqj7_srm_DIMIqHN-GdQzygE.roa (hash: 2gAliij8n2m8vHu7/1GlcWyJj1a4KLcr3RlOnjXIB4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/24fbfc-d902-49db-978a-35a20ff8923e/1/0F7XpYFHqlFMjm2vvMXYdXx9MnI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/24fbfc-d902-49db-978a-35a20ff8923e/1/0F7XpYFHqlFMjm2vvMXYdXx9MnI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0F7XpYFHqlFMjm2vvMXYdXx9MnI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:62:72:da:f9:27:d3:36:f1:59:e6:6f:68:6d:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d05ed7a58147aa514c8e6dafbcc5d8757c7d3272
Validity
Not Before: Oct 19 15:01:28 2025 GMT
Not After : Oct 20 15:01:28 2025 GMT
Subject: CN=3effc36be7e58714fcf52211d361919dcf360a72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:10:00:4f:04:a8:98:d1:ee:1f:19:e8:50:77:
5d:37:45:e0:36:e2:26:ef:f4:23:48:7c:d4:c0:4f:
9e:13:1d:0d:ae:08:2a:47:d2:34:41:36:cb:3b:53:
31:89:c3:31:c6:72:16:4b:cd:01:b9:52:e2:c3:f9:
8e:1f:ac:7f:c2:36:03:41:87:62:85:b1:84:79:40:
91:04:e9:8c:46:c3:2e:95:cd:f5:d8:50:4e:80:7e:
32:21:81:17:04:6d:cf:d5:1c:bb:13:21:c1:d0:31:
7d:f9:ad:33:3e:b5:6c:48:e9:27:e8:49:d7:d2:5f:
fc:4a:e3:23:e5:c3:3d:12:a1:9f:60:fb:ff:3c:ba:
c6:a2:13:a5:93:69:3e:9c:ac:55:29:53:62:4d:a8:
9b:a6:1e:9c:2b:10:6e:34:94:ba:eb:e6:03:13:f3:
0f:71:ab:b8:15:02:ca:06:41:74:ee:d1:e1:cc:90:
f8:0c:c1:5b:a2:13:6c:9b:e8:20:cb:9b:ca:50:80:
8c:57:a3:7c:94:50:30:cc:ee:7b:22:71:71:9d:33:
34:ad:92:ed:11:ec:f4:b6:49:11:0e:d3:c6:1c:5e:
7c:04:1b:e0:74:13:fb:2e:c8:fa:09:88:3d:c8:ef:
17:f0:c9:7a:15:ae:2b:e2:6a:8c:93:52:f4:ba:08:
73:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:FF:C3:6B:E7:E5:87:14:FC:F5:22:11:D3:61:91:9D:CF:36:0A:72
X509v3 Authority Key Identifier:
keyid:D0:5E:D7:A5:81:47:AA:51:4C:8E:6D:AF:BC:C5:D8:75:7C:7D:32:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0F7XpYFHqlFMjm2vvMXYdXx9MnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/24fbfc-d902-49db-978a-35a20ff8923e/1/0F7XpYFHqlFMjm2vvMXYdXx9MnI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/24fbfc-d902-49db-978a-35a20ff8923e/1/0F7XpYFHqlFMjm2vvMXYdXx9MnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:0e:6f:5a:70:79:07:63:1c:fd:1c:92:2c:7c:72:90:7c:f4:
94:15:96:40:47:7b:9c:df:5a:ae:c4:96:be:04:ad:d5:51:15:
36:6d:b0:ca:c5:2b:91:da:72:64:3f:b1:78:eb:03:a3:31:bb:
3a:2b:0d:d3:9f:c8:cd:0b:2d:04:c6:9d:ea:e8:f9:51:17:4f:
8c:b2:41:1d:a2:f3:28:b5:c7:3f:7a:00:43:c2:a5:51:05:a0:
a4:b1:39:9e:f6:01:75:fb:5c:6e:fd:2a:bc:98:4c:20:3a:b9:
03:88:ef:8e:3b:72:9b:b8:72:60:90:ad:56:0c:e7:71:1d:30:
f6:b6:f6:57:6c:0f:d6:6a:92:87:85:78:87:3b:df:6b:7e:b1:
0c:d6:eb:91:8c:bd:2f:9b:a1:9d:95:b3:b2:bd:e4:fc:da:2d:
af:0c:20:ed:f5:d6:af:e3:c3:ab:d5:10:f3:d8:b4:00:59:53:
dd:f8:ee:22:00:fe:30:7f:11:b6:7a:c3:e2:40:ab:4e:fe:62:
f3:85:49:8e:a1:5e:56:a7:d5:02:d8:19:dc:b5:06:55:8a:a7:
aa:b0:49:3b:f4:46:38:91:65:f8:1b:d7:24:ab:22:0c:8a:e1:
75:9c:0d:60:1f:cb:b9:b7:12:d8:f8:20:2f:ed:20:7b:c6:37:
7b:1e:11:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:11:47 2025 by rpki-client