Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/d679f2-414e-4538-9c60-295611aa7e92/1/C155jbbo9XxfSkRRUJAd7oqW1eU.mft
File: C155jbbo9XxfSkRRUJAd7oqW1eU.mft (raw, json)
Hash identifier: XqVQtvN/FjQU9R7ll8gbe/GwPPw0C5eSipCTeZxhDIA=
Subject key identifier: 9F:88:D1:C1:ED:39:5A:8B:C8:46:A5:69:02:7D:C9:65:E8:0D:37:EA
Authority key identifier: 0B:5E:79:8D:B6:E8:F5:7C:5F:4A:44:51:50:90:1D:EE:8A:96:D5:E5
Certificate issuer: /CN=0b5e798db6e8f57c5f4a445150901dee8a96d5e5
Certificate serial: 0199FE47044EEE108F87B2F46C5E35A03909
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C155jbbo9XxfSkRRUJAd7oqW1eU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/d679f2-414e-4538-9c60-295611aa7e92/1/C155jbbo9XxfSkRRUJAd7oqW1eU.mft
Manifest number: 0CD1
Signing time: Sun 19 Oct 2025 21:01:30 +0000
Manifest this update: Sun 19 Oct 2025 21:01:30 +0000
Manifest next update: Mon 20 Oct 2025 21:01:30 +0000
Files and hashes: 1: C155jbbo9XxfSkRRUJAd7oqW1eU.crl (hash: ni/QnQkNzaj5vzgSiUXUxtj9k3knFBCyfSusxL+a9Qs=)
2: c7WoeWfnIdPF1gkZ7r90pN58Y2c.roa (hash: wpEquj9Ig8LsCQE7Y+MbSVtYeoDlqqJ8cepm+207hA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/d679f2-414e-4538-9c60-295611aa7e92/1/C155jbbo9XxfSkRRUJAd7oqW1eU.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/d679f2-414e-4538-9c60-295611aa7e92/1/C155jbbo9XxfSkRRUJAd7oqW1eU.mft
rsync://rpki.ripe.net/repository/DEFAULT/C155jbbo9XxfSkRRUJAd7oqW1eU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:47:04:4e:ee:10:8f:87:b2:f4:6c:5e:35:a0:39:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b5e798db6e8f57c5f4a445150901dee8a96d5e5
Validity
Not Before: Oct 19 21:01:30 2025 GMT
Not After : Oct 20 21:01:30 2025 GMT
Subject: CN=9f88d1c1ed395a8bc846a569027dc965e80d37ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:96:cb:f4:a0:e4:aa:c9:c4:bd:f3:89:79:8b:
23:29:53:b9:ac:0f:22:ee:b6:bf:e3:33:6f:0e:3a:
c7:1a:79:63:39:d6:8c:4b:54:ae:2b:b2:8c:af:7b:
af:3b:b1:5b:53:c5:1d:85:17:5c:8f:fc:5a:0f:3a:
d3:e1:7d:ea:b8:56:b5:13:1a:4b:ce:26:55:46:6e:
18:4a:0e:91:98:9d:3f:f1:d1:f3:cb:d1:db:ed:2a:
3f:a6:a9:f1:64:77:e8:74:cc:65:80:11:b1:36:10:
c6:b4:cc:f2:7b:68:d4:d3:ae:e9:ac:98:d4:a4:4c:
bd:17:0a:6b:b7:f7:7b:d4:50:08:1e:5b:7e:4c:06:
d9:e1:cc:0d:57:cb:67:25:d1:cb:27:de:af:8c:3c:
6f:2a:d6:fd:b2:88:91:28:e6:05:69:3f:63:4d:3c:
9c:6f:94:56:a3:45:d6:f4:64:21:c6:85:48:00:29:
6e:c1:17:cf:9a:3e:a6:b3:e8:3f:b2:e1:61:18:e1:
ef:44:86:75:64:36:47:97:3a:56:9a:66:25:cb:8d:
66:28:ef:4c:76:b6:23:70:98:73:dd:c2:bf:23:ac:
8c:5f:5a:47:c5:f2:8f:30:a7:34:df:c4:ce:b4:80:
00:3e:d5:ab:a7:f4:3f:54:ad:e5:3d:75:93:75:44:
da:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:88:D1:C1:ED:39:5A:8B:C8:46:A5:69:02:7D:C9:65:E8:0D:37:EA
X509v3 Authority Key Identifier:
keyid:0B:5E:79:8D:B6:E8:F5:7C:5F:4A:44:51:50:90:1D:EE:8A:96:D5:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C155jbbo9XxfSkRRUJAd7oqW1eU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d679f2-414e-4538-9c60-295611aa7e92/1/C155jbbo9XxfSkRRUJAd7oqW1eU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d679f2-414e-4538-9c60-295611aa7e92/1/C155jbbo9XxfSkRRUJAd7oqW1eU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:53:bb:e7:fe:ef:e7:45:49:c8:8b:9d:61:be:07:73:02:f0:
9a:2e:65:c4:d0:44:77:ea:05:f6:bd:d2:ce:d7:46:a3:ec:a7:
08:8e:6f:db:f6:7a:0e:49:a2:d6:a2:d7:5f:69:84:be:52:92:
79:98:c1:eb:dc:a2:46:14:61:a2:63:d6:d5:b7:65:17:19:64:
bf:98:45:ad:17:1c:85:33:1f:f7:9f:3b:85:2b:1a:64:20:5d:
41:bf:49:a2:ff:f2:7b:fd:11:a2:e9:9e:d2:4c:dc:cb:f4:76:
45:a8:dd:dd:85:ed:ec:65:2c:24:97:fc:5e:c9:2c:98:55:46:
d8:f0:aa:b1:d4:1b:c3:c4:a2:8d:48:89:80:df:ae:7e:33:91:
ec:d8:dc:89:49:cc:05:4e:9b:0b:f2:7b:d1:a9:ff:0e:cf:88:
ea:09:fe:ed:07:ab:3d:3b:ea:89:84:0e:19:20:36:9c:53:3a:
61:97:5a:37:02:f5:6a:60:68:98:20:10:cd:a0:de:90:c1:ae:
91:23:50:8d:61:c8:60:01:6e:e2:c7:64:9c:e4:61:8b:16:bf:
55:60:41:86:49:07:a3:03:b9:ee:d5:23:99:fa:eb:48:e9:cb:
49:e5:15:e4:ac:de:20:d7:c3:f4:dc:84:07:42:f1:b9:2d:a3:
42:86:f2:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:18:02 2025 by rpki-client