Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/53c3e2-d335-4a82-a790-0d6bcd0148bf/1/0nbEGiF2JU8jbSPTkf1WCQYZZw0.mft
File: 0nbEGiF2JU8jbSPTkf1WCQYZZw0.mft (raw, json)
Hash identifier: D1K7BFkhgL9S1dYrsNZAWM52K3bIS5/fnM3OO4Vg4Kg=
Subject key identifier: FD:24:8D:CA:0F:6E:64:30:B2:E7:68:82:BD:09:36:B4:5E:5D:D4:97
Authority key identifier: D2:76:C4:1A:21:76:25:4F:23:6D:23:D3:91:FD:56:09:06:19:67:0D
Certificate issuer: /CN=d276c41a2176254f236d23d391fd56090619670d
Certificate serial: 0199FB0F13C2D0FE3D55EEC0F8B9623D8DD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0nbEGiF2JU8jbSPTkf1WCQYZZw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/53c3e2-d335-4a82-a790-0d6bcd0148bf/1/0nbEGiF2JU8jbSPTkf1WCQYZZw0.mft
Manifest number: 01DF
Signing time: Sun 19 Oct 2025 06:01:33 +0000
Manifest this update: Sun 19 Oct 2025 06:01:33 +0000
Manifest next update: Mon 20 Oct 2025 06:01:33 +0000
Files and hashes: 1: 0nbEGiF2JU8jbSPTkf1WCQYZZw0.crl (hash: U+lSEG5qYlTvmDgrJoMPuZEeq8qySihcxqQflfosuCw=)
2: zLfUqXqKYrDSmOI3zuAuH7VW9AQ.roa (hash: ooYWSL91Gfinkq+JOzjVpKfIwzWfTooJXNIHzh0/MJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/53c3e2-d335-4a82-a790-0d6bcd0148bf/1/0nbEGiF2JU8jbSPTkf1WCQYZZw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/53c3e2-d335-4a82-a790-0d6bcd0148bf/1/0nbEGiF2JU8jbSPTkf1WCQYZZw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0nbEGiF2JU8jbSPTkf1WCQYZZw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0f:13:c2:d0:fe:3d:55:ee:c0:f8:b9:62:3d:8d:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d276c41a2176254f236d23d391fd56090619670d
Validity
Not Before: Oct 19 06:01:33 2025 GMT
Not After : Oct 20 06:01:33 2025 GMT
Subject: CN=fd248dca0f6e6430b2e76882bd0936b45e5dd497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f6:a6:66:3e:59:98:3d:54:3c:6f:18:0e:19:
32:03:05:65:0c:3c:50:c1:5b:84:24:0a:c7:8a:a5:
f9:21:ab:f9:8a:5c:27:de:00:24:bd:fb:20:8b:25:
f4:7a:61:65:22:6a:fd:96:a5:11:40:4e:e3:42:dc:
99:9f:41:75:8c:e5:80:dc:68:d5:d7:64:5b:ab:56:
c2:a9:25:d7:0f:b6:98:35:ca:95:f6:28:24:fd:65:
eb:53:b4:a7:37:6c:84:75:18:b9:d8:76:90:87:6e:
26:b8:74:ed:00:55:34:4b:f7:a3:5b:93:b0:4e:40:
73:58:c4:9b:f6:57:ba:19:28:40:5b:22:ea:5f:70:
a1:cf:a7:73:50:2d:db:2d:9f:2b:21:2e:a6:82:c7:
6e:37:92:bc:7f:6c:34:36:81:48:ba:ce:ea:18:fb:
56:bf:a3:2f:93:67:69:52:33:31:cd:f2:e4:c1:fa:
e5:f6:ea:e7:b7:37:48:c1:5b:b1:bf:5b:ba:25:a4:
de:38:7c:1b:a2:aa:7d:67:7e:7d:3a:14:a2:93:a9:
7d:24:f5:c8:3f:2b:70:b1:d5:c3:76:9e:2b:f5:18:
02:29:bb:1b:b2:41:f0:5a:93:94:aa:8b:28:0d:ab:
1a:c5:15:ad:ad:e9:e1:d1:53:23:08:c7:e8:1f:05:
e5:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:24:8D:CA:0F:6E:64:30:B2:E7:68:82:BD:09:36:B4:5E:5D:D4:97
X509v3 Authority Key Identifier:
keyid:D2:76:C4:1A:21:76:25:4F:23:6D:23:D3:91:FD:56:09:06:19:67:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0nbEGiF2JU8jbSPTkf1WCQYZZw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/53c3e2-d335-4a82-a790-0d6bcd0148bf/1/0nbEGiF2JU8jbSPTkf1WCQYZZw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/53c3e2-d335-4a82-a790-0d6bcd0148bf/1/0nbEGiF2JU8jbSPTkf1WCQYZZw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:2e:b8:0f:48:4d:f5:3b:89:4e:df:bf:af:88:5b:25:71:94:
ec:b1:ae:68:94:59:b9:75:d9:af:7d:11:bd:82:84:b1:88:9f:
21:db:54:25:0f:2a:73:fe:a0:5d:8a:08:6e:91:3d:f5:b7:c9:
39:cc:1e:55:6a:c7:4b:4e:25:46:11:43:e7:6c:15:8f:a8:b5:
30:85:55:0c:a4:5f:06:08:7a:24:cd:60:57:c0:7e:87:65:b0:
3d:b5:28:eb:a5:06:69:7f:86:55:75:0d:f0:9c:82:13:91:dd:
63:78:0f:17:43:01:82:e0:ed:9d:bf:55:66:8d:35:a5:28:fa:
9a:93:3c:12:b6:f8:ad:b7:f2:4b:13:9d:5c:c3:ab:3a:4e:4f:
83:09:04:72:6d:03:49:9c:0f:1b:11:b1:79:16:e3:be:ba:72:
0e:e9:97:8b:f8:cc:71:9f:27:18:9e:4a:cc:6a:4f:ec:86:47:
86:9f:b5:5d:c8:b5:70:b6:40:c5:65:c5:5a:75:e2:1e:3a:4a:
a5:a6:8d:f6:85:6a:a8:c9:9f:c0:47:4b:c5:09:0d:76:c0:41:
86:84:7c:42:88:67:06:f0:ca:ea:01:c2:5f:d8:6d:e9:3a:21:
3f:fe:77:67:1e:11:c7:f1:89:5e:b4:fd:ff:ae:83:1a:f8:0a:
3d:17:d2:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:26 2025 by rpki-client