
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/d63f8e-4b1a-48bf-87eb-29fa47b68093/1/C0U7QQ01hqYjepUe7zsD9MRBGPA.mft
File: C0U7QQ01hqYjepUe7zsD9MRBGPA.mft (raw, json)
Hash identifier: RQvGfSMQ+zsPHhcTZu9wx86dIz+ZImd8tD0Zj8RbUQg=
Subject key identifier: 9D:37:33:5D:02:B9:1A:AE:D5:54:8B:6F:07:6B:FD:96:CE:51:72:EE
Authority key identifier: 0B:45:3B:41:0D:35:86:A6:23:7A:95:1E:EF:3B:03:F4:C4:41:18:F0
Certificate issuer: /CN=0b453b410d3586a6237a951eef3b03f4c44118f0
Certificate serial: 0199FBEBAC130DCB4834CFD3E75F82A4AEFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C0U7QQ01hqYjepUe7zsD9MRBGPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/d63f8e-4b1a-48bf-87eb-29fa47b68093/1/C0U7QQ01hqYjepUe7zsD9MRBGPA.mft
Manifest number: 0A27
Signing time: Sun 19 Oct 2025 10:02:30 +0000
Manifest this update: Sun 19 Oct 2025 10:02:30 +0000
Manifest next update: Mon 20 Oct 2025 10:02:30 +0000
Files and hashes: 1: 9h0IDYCPr58Ccxg81AcMZ_13oWo.roa (hash: l+FTuWjUD+EZ0mXchVkunlX52jPEdy8UaVQG+ZcxDvM=)
2: C0U7QQ01hqYjepUe7zsD9MRBGPA.crl (hash: yQ86Ov85WVULxYolf0hSJcruNV7lHFZzz5q20+c0bmg=)
3: w89P4aOYJSIpjxXH3F1qUwrYwG8.roa (hash: VwwE3O0gcp61cCcoyzXJgH2L9ssH8GuxbE9nzSsokkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/d63f8e-4b1a-48bf-87eb-29fa47b68093/1/C0U7QQ01hqYjepUe7zsD9MRBGPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/d63f8e-4b1a-48bf-87eb-29fa47b68093/1/C0U7QQ01hqYjepUe7zsD9MRBGPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/C0U7QQ01hqYjepUe7zsD9MRBGPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:ac:13:0d:cb:48:34:cf:d3:e7:5f:82:a4:ae:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b453b410d3586a6237a951eef3b03f4c44118f0
Validity
Not Before: Oct 19 10:02:30 2025 GMT
Not After : Oct 20 10:02:30 2025 GMT
Subject: CN=9d37335d02b91aaed5548b6f076bfd96ce5172ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:56:17:2d:b8:3b:ba:a3:e1:8a:dd:83:a5:21:
7c:6d:d8:b8:23:7d:1c:f0:37:ac:ca:1a:0d:29:43:
39:97:8e:a5:55:d0:93:16:7c:5a:e0:bf:4e:35:60:
f2:f2:15:c7:29:a9:12:28:7a:e9:8c:6e:bc:b9:b9:
1d:97:4c:ba:19:d3:fd:0e:42:c7:d5:4a:37:ae:17:
a0:4f:a8:77:ba:a9:cd:aa:3b:25:b6:21:63:73:2f:
26:52:cf:61:ee:b9:d8:fe:d5:e2:58:42:80:36:d0:
90:9d:5d:fd:fa:dc:fb:2d:7b:0b:86:07:c3:64:0d:
13:cd:c7:e4:40:50:ea:85:26:43:79:27:fe:69:78:
37:bd:f7:14:49:a7:b1:13:bb:64:ee:c6:94:aa:5a:
6a:3b:1d:e0:08:6d:61:7e:30:48:6d:80:f9:4f:4e:
4a:d3:e2:2a:6a:e0:8a:9c:8a:6a:98:b9:6a:18:de:
5c:ed:b8:ef:f8:0b:4a:bc:d1:14:a8:1b:d7:1d:32:
8d:39:16:0c:cf:88:9c:52:4b:ba:ec:4d:ab:a4:b0:
c6:86:67:0a:3d:78:36:06:63:f5:6e:9d:9e:9b:f3:
4d:fa:1e:79:37:63:f2:ab:fd:e6:1a:6f:74:1e:32:
db:66:61:32:e0:8f:8a:66:8d:7f:b4:52:87:8f:8c:
47:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:37:33:5D:02:B9:1A:AE:D5:54:8B:6F:07:6B:FD:96:CE:51:72:EE
X509v3 Authority Key Identifier:
keyid:0B:45:3B:41:0D:35:86:A6:23:7A:95:1E:EF:3B:03:F4:C4:41:18:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C0U7QQ01hqYjepUe7zsD9MRBGPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/d63f8e-4b1a-48bf-87eb-29fa47b68093/1/C0U7QQ01hqYjepUe7zsD9MRBGPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/d63f8e-4b1a-48bf-87eb-29fa47b68093/1/C0U7QQ01hqYjepUe7zsD9MRBGPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:0a:dd:c6:5d:60:38:58:8e:b0:9b:22:de:af:b3:82:4b:24:
85:e5:29:4b:55:3c:98:7d:dc:7e:16:93:1f:bb:63:40:53:cb:
70:0b:af:76:0f:68:da:4a:c2:4c:11:25:51:db:8c:e4:3f:8a:
0e:97:0b:53:70:a3:46:a3:2a:0e:82:0d:c8:cd:37:59:06:58:
24:e7:13:d1:db:0b:de:45:1f:23:63:6c:26:26:be:54:01:aa:
5b:f8:bd:08:bd:6a:54:83:35:58:bb:3f:83:2a:f5:ff:84:d0:
9d:47:f5:59:94:26:2f:e5:f8:f2:14:fb:5e:82:df:c0:26:d9:
13:ed:ae:0d:e0:8d:cd:27:17:f6:25:de:43:9b:37:6e:ec:69:
0f:01:e6:7f:d3:da:52:f7:cf:57:c6:cd:a1:b5:b7:bc:d8:82:
cf:a1:40:57:e4:b6:67:23:25:48:16:4d:08:fc:ae:74:59:1a:
5e:f4:cb:68:b4:5d:ce:11:c0:76:1b:8a:f7:37:c2:bf:e8:03:
2d:f7:54:ce:2a:76:4c:d8:88:c6:9a:b2:1b:38:81:a4:9b:9a:
b4:46:29:f7:d6:c4:0c:16:d0:2f:16:e9:2d:a4:40:9a:0c:41:
86:47:3c:76:5b:76:38:67:3a:47:79:95:1f:ab:70:78:66:be:
d6:b0:8a:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:14:59 2025 by rpki-client