Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.mft
File: 0PbNMLTPoZPiJrupKC42aiKjEQ8.mft (raw, json)
Hash identifier: MThCFS+ugqA/nQgni7P5OaIf7YZwW4ZGWQ0WiM/Ve+c=
Subject key identifier: C0:D8:A3:59:26:38:5E:0D:33:6A:FA:9A:06:BA:5D:B8:DE:17:A2:42
Authority key identifier: D0:F6:CD:30:B4:CF:A1:93:E2:26:BB:A9:28:2E:36:6A:22:A3:11:0F
Certificate issuer: /CN=d0f6cd30b4cfa193e226bba9282e366a22a3110f
Certificate serial: 0199FE7DF793761E11B8A5CB09B32944F57F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0PbNMLTPoZPiJrupKC42aiKjEQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 22:01:32 +0000
Manifest this update: Sun 19 Oct 2025 22:01:32 +0000
Manifest next update: Mon 20 Oct 2025 22:01:32 +0000
Files and hashes: 1: 0PbNMLTPoZPiJrupKC42aiKjEQ8.crl (hash: Sen7n6FsIGsZvXCTmkfG3L6j3fw3UjM5aULnr2yPEDI=)
2: rcxI4e2J8wRM11pjAJVw2X1CP4Q.roa (hash: dOutEmsom2VI++bJk5JwwVxqjGBRuIpfu9it/0+MYW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0PbNMLTPoZPiJrupKC42aiKjEQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7d:f7:93:76:1e:11:b8:a5:cb:09:b3:29:44:f5:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0f6cd30b4cfa193e226bba9282e366a22a3110f
Validity
Not Before: Oct 19 22:01:32 2025 GMT
Not After : Oct 20 22:01:32 2025 GMT
Subject: CN=c0d8a35926385e0d336afa9a06ba5db8de17a242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3f:d6:68:0b:16:2a:21:4d:d1:19:cd:cd:1a:
96:a9:ca:38:b3:d4:90:bd:1f:5e:22:be:3a:9b:f6:
0e:7b:30:e2:f9:00:d0:bb:73:4d:57:8e:dc:4e:5d:
ce:3f:5e:1a:0b:5b:ee:bd:a8:f7:dd:f4:e2:84:2e:
b2:02:d4:b4:95:5f:56:ff:ee:aa:16:af:52:46:e5:
c2:ac:dd:e4:eb:90:f3:dc:f1:69:52:d1:e6:2b:fc:
5e:d9:7c:73:28:56:74:b6:97:66:98:8f:dd:f0:64:
61:ee:4e:84:34:2b:77:93:84:fe:0a:9f:9c:0e:cc:
25:46:dd:7b:69:9d:7e:aa:a1:c5:33:8a:8e:7c:54:
ee:cd:d2:dc:90:a1:50:55:32:8d:25:1e:80:75:61:
09:4e:e0:44:cd:73:ed:a0:fd:3c:4e:77:0b:49:87:
33:87:37:80:c8:bd:f6:d7:72:28:16:de:de:29:23:
09:72:d9:51:60:37:a4:e7:96:f7:6c:76:2e:9c:d7:
97:63:ec:82:02:5c:2d:ca:e0:e3:72:34:72:85:c3:
b4:55:95:41:8e:80:28:81:83:93:03:34:2f:c9:97:
51:e6:3d:bf:a8:1a:50:f5:ff:07:cd:ba:73:9e:1e:
ee:70:ea:6d:1e:c5:6a:e4:7c:ca:dc:69:1b:0a:95:
3b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:D8:A3:59:26:38:5E:0D:33:6A:FA:9A:06:BA:5D:B8:DE:17:A2:42
X509v3 Authority Key Identifier:
keyid:D0:F6:CD:30:B4:CF:A1:93:E2:26:BB:A9:28:2E:36:6A:22:A3:11:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0PbNMLTPoZPiJrupKC42aiKjEQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:ae:48:bf:7b:96:a9:01:ff:fd:0a:63:ee:ac:ec:9f:e4:75:
57:ba:a3:da:5b:34:b5:1c:e1:19:3f:db:70:b5:33:59:b0:ae:
ae:53:79:0d:2c:58:7b:c6:6d:de:6d:3c:78:77:a1:ae:2e:3b:
18:ec:46:4c:eb:47:31:92:f4:df:35:dd:7e:8b:6c:8d:b5:bf:
29:4e:a8:9c:30:39:eb:fe:5e:4e:8d:53:00:2e:be:79:5e:0f:
e0:c5:7a:c7:36:1c:93:22:0f:f3:12:b8:54:50:f4:8e:17:bf:
fe:f7:c5:5f:cf:ec:06:18:5e:9b:0e:0d:36:99:45:7f:0d:a0:
5e:53:65:73:53:54:b4:9d:42:58:c7:22:f8:ed:2e:c7:86:1d:
23:c4:f3:05:23:9e:6c:fb:fc:1f:43:f8:be:d8:7c:70:a8:cd:
54:9d:a5:21:c5:f4:46:02:e9:d2:5a:73:aa:4a:21:e5:51:1a:
97:ba:65:b8:bc:48:94:d1:cc:42:1e:6b:b0:21:e3:4b:0f:ad:
50:82:05:30:ad:49:ca:d8:b8:4d:20:8a:68:18:15:cd:a4:df:
73:cc:16:10:fa:a1:7d:42:b5:c9:db:4f:43:4d:a4:82:27:b0:
f5:41:7e:fd:cf:f4:41:8e:9e:6c:46:39:28:39:55:ac:38:74:
e1:41:db:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:55:38 2025 by rpki-client