Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/9e1e78-df24-4fc6-b077-39fe723ef730/1/0j94Nzy5ZlTQMGBkaS78SudxXxc.mft
File: 0j94Nzy5ZlTQMGBkaS78SudxXxc.mft (raw, json)
Hash identifier: DUPVDPqUk0qB6XThB74GvAIfj4G/Hti6hi+kkelt6M8=
Subject key identifier: E0:91:D5:2E:B2:2D:93:5F:5D:80:9A:BD:F8:43:BA:00:5B:94:28:D6
Authority key identifier: D2:3F:78:37:3C:B9:66:54:D0:30:60:64:69:2E:FC:4A:E7:71:5F:17
Certificate issuer: /CN=d23f78373cb96654d0306064692efc4ae7715f17
Certificate serial: 0199FBEAE00E33F507704BFA4ADF687AD444
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0j94Nzy5ZlTQMGBkaS78SudxXxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/9e1e78-df24-4fc6-b077-39fe723ef730/1/0j94Nzy5ZlTQMGBkaS78SudxXxc.mft
Manifest number: 0B72
Signing time: Sun 19 Oct 2025 10:01:37 +0000
Manifest this update: Sun 19 Oct 2025 10:01:37 +0000
Manifest next update: Mon 20 Oct 2025 10:01:37 +0000
Files and hashes: 1: 0j94Nzy5ZlTQMGBkaS78SudxXxc.crl (hash: PXzuxFXLzdV7AA0SXlIzC7yHZ6L7aIf8H8I+xNA25A4=)
2: qFkl9TmjJ7JQHzPlKEWAsMr-VIk.roa (hash: bNPdsQRy04HtNn/c+rfGq3WnL/GPuEnpubOXCkWKru8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/9e1e78-df24-4fc6-b077-39fe723ef730/1/0j94Nzy5ZlTQMGBkaS78SudxXxc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/9e1e78-df24-4fc6-b077-39fe723ef730/1/0j94Nzy5ZlTQMGBkaS78SudxXxc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0j94Nzy5ZlTQMGBkaS78SudxXxc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:e0:0e:33:f5:07:70:4b:fa:4a:df:68:7a:d4:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d23f78373cb96654d0306064692efc4ae7715f17
Validity
Not Before: Oct 19 10:01:37 2025 GMT
Not After : Oct 20 10:01:37 2025 GMT
Subject: CN=e091d52eb22d935f5d809abdf843ba005b9428d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:a1:b2:7e:84:03:78:33:fc:aa:3b:2c:94:cd:
6c:39:81:3c:75:16:08:af:57:16:d5:3b:d7:e9:ea:
d2:73:d8:82:62:32:73:a6:a2:8a:15:bf:5a:19:a4:
60:10:f5:cd:6c:aa:9b:09:2b:b9:07:bc:f0:09:29:
7d:25:45:06:60:b7:6d:88:df:fe:56:36:06:7b:a8:
dc:bc:02:a1:0e:65:10:4a:0b:c1:1a:c9:0f:1a:89:
22:45:f7:7b:81:67:79:11:8a:8e:2f:bc:70:bf:17:
3e:06:01:b5:28:3d:13:ae:67:72:fd:f3:cc:7f:83:
c5:0e:89:c2:2f:9e:52:8d:b0:11:19:f4:fd:c6:87:
18:ee:90:92:88:e8:04:96:10:8f:d4:6e:f5:6d:f7:
66:2f:a1:b8:95:a4:06:8d:8e:b6:67:5a:b3:0b:0d:
5e:9d:ed:fa:32:51:2c:4c:ae:ee:e3:fc:99:78:65:
90:d1:92:47:23:c3:33:f8:46:1a:eb:be:7e:94:8f:
82:08:13:ec:f3:7b:a7:18:4c:20:b8:9f:eb:bf:9a:
ac:fe:0e:bf:26:2f:ea:18:16:7d:ca:80:8d:c8:18:
19:2f:2f:5e:18:3d:fa:ee:db:8d:47:94:e6:62:a8:
de:dd:11:8a:d4:be:7c:36:81:23:d2:29:f7:c6:7a:
0a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:91:D5:2E:B2:2D:93:5F:5D:80:9A:BD:F8:43:BA:00:5B:94:28:D6
X509v3 Authority Key Identifier:
keyid:D2:3F:78:37:3C:B9:66:54:D0:30:60:64:69:2E:FC:4A:E7:71:5F:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0j94Nzy5ZlTQMGBkaS78SudxXxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9e1e78-df24-4fc6-b077-39fe723ef730/1/0j94Nzy5ZlTQMGBkaS78SudxXxc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9e1e78-df24-4fc6-b077-39fe723ef730/1/0j94Nzy5ZlTQMGBkaS78SudxXxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:63:81:25:2e:e8:1f:76:d7:38:d1:2e:18:03:9a:30:9a:21:
a5:22:0f:9d:9f:24:bd:58:39:46:dd:b4:11:ed:12:ba:8b:a6:
6c:3c:bc:0e:64:85:f7:c8:f0:a0:57:1a:07:8f:fb:4d:42:ee:
ef:9c:cd:7d:0f:8f:e7:1d:67:eb:b0:1d:9e:1b:5b:62:2a:34:
9e:a9:c4:63:c9:bc:29:ba:cf:c0:2a:ce:95:4a:ff:d0:03:7e:
50:b4:a4:e7:83:c4:f4:e2:67:76:33:cc:87:da:51:a4:ce:a8:
d8:74:48:f1:95:28:34:38:42:63:03:24:d2:eb:cb:c7:b5:b1:
a8:f3:d9:35:81:67:2d:07:65:0f:35:02:97:11:4e:d3:6e:f5:
70:0f:17:b6:1a:cb:5c:96:3b:dd:59:c7:e6:c5:0b:02:71:6f:
96:0c:3e:85:2f:61:a6:93:55:e5:75:29:ea:4d:6f:b0:98:7d:
53:51:c4:9e:37:3d:60:a5:81:48:03:42:e9:fb:14:5a:9d:c7:
13:69:c7:70:ee:15:5b:cf:ed:3d:7d:ca:af:1b:4d:30:00:34:
12:59:d8:d9:02:a0:8b:25:24:3e:23:d5:3e:a1:6d:1a:b6:4d:
fc:0f:36:84:11:ac:41:26:98:ca:f5:a2:8f:70:b6:c3:df:b6:
99:6a:f0:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:39:58 2025 by rpki-client