Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/a275fe-86f0-41e9-8263-69db6a8f58d7/1/0sgbHQKPKvYeqbQiZ5pfjekFcuc.mft
File: 0sgbHQKPKvYeqbQiZ5pfjekFcuc.mft (raw, json)
Hash identifier: 6S3RMjHewVEwO9pPV7t6K25f7CeHfuykq8mAYvXzmG8=
Subject key identifier: 7B:C4:5C:F3:AE:BC:B0:1E:3A:60:69:B6:01:42:A0:32:1C:A6:D5:EB
Authority key identifier: D2:C8:1B:1D:02:8F:2A:F6:1E:A9:B4:22:67:9A:5F:8D:E9:05:72:E7
Certificate issuer: /CN=d2c81b1d028f2af61ea9b422679a5f8de90572e7
Certificate serial: 0199FDD9B4FAA4A781C361F39C52A253694C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0sgbHQKPKvYeqbQiZ5pfjekFcuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/a275fe-86f0-41e9-8263-69db6a8f58d7/1/0sgbHQKPKvYeqbQiZ5pfjekFcuc.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 19:02:07 +0000
Manifest this update: Sun 19 Oct 2025 19:02:07 +0000
Manifest next update: Mon 20 Oct 2025 19:02:07 +0000
Files and hashes: 1: 0sgbHQKPKvYeqbQiZ5pfjekFcuc.crl (hash: ZRy4Sokk0l03h3QMC1wGdSv8RWi2f+WGuxc9RgbSBnw=)
2: KzJRm4blhpQ22QWdKYNtwSo9hec.roa (hash: VvdDpNHANgnzHXSd6NFNAPGvygHgdOqLpMuWRNVTc78=)
3: baZe32PKXIeppnY8Yaja4T-a3tY.roa (hash: tWsZkF/TWyoJvpRhiK8XSrqOZGwxm+EMQruE+7kHGHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/a275fe-86f0-41e9-8263-69db6a8f58d7/1/0sgbHQKPKvYeqbQiZ5pfjekFcuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/a275fe-86f0-41e9-8263-69db6a8f58d7/1/0sgbHQKPKvYeqbQiZ5pfjekFcuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0sgbHQKPKvYeqbQiZ5pfjekFcuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:02:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:b4:fa:a4:a7:81:c3:61:f3:9c:52:a2:53:69:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2c81b1d028f2af61ea9b422679a5f8de90572e7
Validity
Not Before: Oct 19 19:02:07 2025 GMT
Not After : Oct 20 19:02:07 2025 GMT
Subject: CN=7bc45cf3aebcb01e3a6069b60142a0321ca6d5eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:46:84:b4:9f:f2:b4:74:8d:88:d0:66:9b:e9:
5e:62:b8:df:c6:86:df:8f:3e:35:82:69:e3:44:18:
71:0a:e8:1d:73:fc:ff:68:4f:b2:80:9d:d2:24:cd:
9d:03:23:84:0d:d3:b5:df:07:1b:be:94:c9:12:0f:
f9:80:7b:5d:4f:bb:07:dc:f7:16:2f:43:d7:b3:a5:
d5:54:89:93:75:c1:d2:26:94:d8:a7:7e:8c:88:7f:
7e:98:62:61:7d:2f:0c:5b:ac:74:f4:a3:2f:6b:e5:
11:46:32:ef:2f:21:91:54:0c:cc:6f:8b:13:4c:99:
47:79:b8:ba:2e:9a:ef:61:c0:a8:13:8e:71:65:0d:
28:72:5a:ba:fa:ef:ef:6e:51:1c:84:e6:d8:d0:b9:
be:28:4e:ca:a2:09:42:96:1e:85:d4:6e:ae:04:b8:
56:95:d9:44:14:13:3d:b7:b2:f9:5b:42:fb:30:e3:
fc:fc:a8:01:6e:de:82:85:00:72:3b:e7:bb:95:22:
a3:46:f5:66:9c:91:c0:6c:de:ab:60:17:c2:46:68:
b0:fe:07:12:26:b9:0c:be:b3:32:d3:c4:ba:d3:5c:
ec:e3:86:ed:35:0f:c5:6f:d3:0e:51:c6:06:4a:23:
60:87:be:06:7a:74:56:ee:c1:48:0d:95:a6:e3:f1:
ae:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:C4:5C:F3:AE:BC:B0:1E:3A:60:69:B6:01:42:A0:32:1C:A6:D5:EB
X509v3 Authority Key Identifier:
keyid:D2:C8:1B:1D:02:8F:2A:F6:1E:A9:B4:22:67:9A:5F:8D:E9:05:72:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0sgbHQKPKvYeqbQiZ5pfjekFcuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a275fe-86f0-41e9-8263-69db6a8f58d7/1/0sgbHQKPKvYeqbQiZ5pfjekFcuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a275fe-86f0-41e9-8263-69db6a8f58d7/1/0sgbHQKPKvYeqbQiZ5pfjekFcuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:e8:05:30:f3:04:bd:bf:d0:be:83:53:39:59:f8:57:94:86:
b8:00:b1:a4:ac:44:2e:26:ef:89:16:30:ec:21:ce:73:31:c3:
3c:84:7f:b1:5e:05:06:2b:a0:f8:7e:a8:86:8e:1a:0e:17:cd:
00:55:e4:27:d6:5a:39:3c:ab:c3:f0:24:e1:7e:bc:41:ed:06:
70:85:64:47:f7:5a:06:fa:02:d7:ac:a3:55:0f:a2:10:19:d5:
ff:78:02:74:20:85:4d:c4:3d:41:25:5a:14:46:a4:3d:97:ab:
3a:37:ab:24:b2:ef:ae:7e:4a:8b:35:29:88:f2:48:b0:c8:37:
e7:3c:e0:77:7a:c4:ea:7a:58:7b:07:d3:17:e4:73:17:60:24:
27:63:3c:3f:97:f9:cd:21:8f:e5:52:39:a7:f6:78:42:22:10:
13:90:44:5b:16:41:a7:e2:c8:47:0e:1c:a8:bc:aa:f1:b3:07:
df:dc:23:92:4c:2f:96:8f:db:40:52:bc:50:1a:a0:f0:b0:f5:
f7:dd:74:60:34:67:1b:55:58:c0:07:4d:a4:5a:fd:66:1b:29:
98:18:2d:39:45:2d:00:87:5d:68:95:f1:31:ae:01:b1:c3:14:
c0:3e:c8:8f:0a:ce:56:a7:c4:b9:df:ba:fd:a6:b2:0a:35:db:
1a:b5:1d:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:31:27 2025 by rpki-client