Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/7c8e9c-ec48-4a90-86e5-3e943f97ff31/1/00bl1GKR9rxTuWWGUFG6OZdJ6y0.mft
File: 00bl1GKR9rxTuWWGUFG6OZdJ6y0.mft (raw, json)
Hash identifier: sX8DyOK1mxV8+C9kGohXGruhV7jPQ6lDDRBXm8LcTYQ=
Subject key identifier: 74:00:72:43:55:7D:9D:57:FB:CE:0B:2A:79:7B:A0:42:28:B5:8A:98
Authority key identifier: D3:46:E5:D4:62:91:F6:BC:53:B9:65:86:50:51:BA:39:97:49:EB:2D
Certificate issuer: /CN=d346e5d46291f6bc53b965865051ba399749eb2d
Certificate serial: 0199FFFE7D57262B69A0FDA8DEBD6600CD10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00bl1GKR9rxTuWWGUFG6OZdJ6y0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/7c8e9c-ec48-4a90-86e5-3e943f97ff31/1/00bl1GKR9rxTuWWGUFG6OZdJ6y0.mft
Manifest number: 028C
Signing time: Mon 20 Oct 2025 05:01:32 +0000
Manifest this update: Mon 20 Oct 2025 05:01:32 +0000
Manifest next update: Tue 21 Oct 2025 05:01:32 +0000
Files and hashes: 1: 00bl1GKR9rxTuWWGUFG6OZdJ6y0.crl (hash: DRco+Cvq6Vg5JHValIcS8+eRkpjL9ZqHHL+IH3hRCz0=)
2: gYQl8tX6UzR3RDmi_Q8x7-FjoRo.roa (hash: Ql10T2YHVZxrbMNqGA2K5KVTFR5OZbWrykLTc4F+v5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/7c8e9c-ec48-4a90-86e5-3e943f97ff31/1/00bl1GKR9rxTuWWGUFG6OZdJ6y0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/7c8e9c-ec48-4a90-86e5-3e943f97ff31/1/00bl1GKR9rxTuWWGUFG6OZdJ6y0.mft
rsync://rpki.ripe.net/repository/DEFAULT/00bl1GKR9rxTuWWGUFG6OZdJ6y0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:fe:7d:57:26:2b:69:a0:fd:a8:de:bd:66:00:cd:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d346e5d46291f6bc53b965865051ba399749eb2d
Validity
Not Before: Oct 20 05:01:32 2025 GMT
Not After : Oct 21 05:01:32 2025 GMT
Subject: CN=74007243557d9d57fbce0b2a797ba04228b58a98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b4:69:1f:33:f9:e2:ac:4c:4b:2b:48:23:d7:
95:f2:43:db:11:b8:3a:73:37:07:fd:a1:b1:d6:99:
03:86:64:df:39:4f:65:90:cb:96:e6:e5:0a:90:74:
26:1c:2c:ae:6d:d4:35:d4:70:10:e8:84:06:22:2b:
73:22:fd:b0:0c:2e:d1:28:28:b1:4e:48:1a:7a:50:
0f:18:fa:2a:be:c6:7e:8d:8e:1b:03:6b:6d:d3:6f:
b9:f2:54:5a:2f:cb:d0:5c:4f:d7:e2:39:1a:07:aa:
ff:68:22:7c:7d:d3:6b:17:a1:7a:18:08:c3:d7:b9:
5f:63:04:c6:43:91:50:d5:ec:48:67:26:1e:ab:e3:
08:15:d8:be:72:a2:31:05:c4:a8:cf:04:b2:a4:a5:
59:3f:b2:5a:39:87:91:5c:b2:ef:30:aa:52:74:06:
a7:df:da:bb:bb:81:92:c0:fb:37:4a:1e:e7:69:d2:
18:57:b3:3b:1e:44:da:22:9b:7c:0b:cd:a2:19:12:
c8:a8:ff:9b:c7:a4:cf:7c:29:90:36:f5:3f:ab:40:
41:68:c8:8b:db:fd:5e:71:c7:65:cc:ce:72:6d:e1:
af:c8:8d:ff:2d:6f:58:5a:82:60:7f:75:62:31:a4:
b1:b3:50:3f:6c:d5:32:7f:ab:3e:fe:30:8e:83:76:
97:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:00:72:43:55:7D:9D:57:FB:CE:0B:2A:79:7B:A0:42:28:B5:8A:98
X509v3 Authority Key Identifier:
keyid:D3:46:E5:D4:62:91:F6:BC:53:B9:65:86:50:51:BA:39:97:49:EB:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00bl1GKR9rxTuWWGUFG6OZdJ6y0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/7c8e9c-ec48-4a90-86e5-3e943f97ff31/1/00bl1GKR9rxTuWWGUFG6OZdJ6y0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/7c8e9c-ec48-4a90-86e5-3e943f97ff31/1/00bl1GKR9rxTuWWGUFG6OZdJ6y0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:e6:7d:74:40:3a:3a:31:d9:e1:ca:c8:a7:1b:68:ef:11:4a:
10:53:ac:60:bc:5b:6c:ea:7a:f9:63:ed:3d:ac:63:50:35:19:
57:33:e3:51:d8:49:88:38:5e:6a:62:5a:cd:0b:ba:5b:18:fa:
d1:24:8e:34:9e:16:e7:02:ef:77:64:2e:7f:27:67:f9:d8:08:
ce:32:1f:2d:d8:bf:0f:ce:b1:27:9a:cb:8f:d3:aa:12:e4:6c:
ec:0c:a8:f1:55:29:0f:68:46:a9:08:de:1a:f2:71:9d:5e:39:
7f:92:c0:2d:6a:34:7f:9e:81:6b:5a:8a:0d:97:53:d6:47:43:
bc:49:de:d0:a6:9c:f8:b5:2b:3f:fe:34:16:36:a9:4d:70:f0:
f7:56:b6:ac:b4:de:67:09:dc:90:35:c4:95:c1:3e:ca:15:db:
d4:4f:ef:98:d4:78:96:3a:b7:01:4c:e5:2e:f0:f1:8d:c7:ac:
51:3d:e3:ea:33:1c:1d:b7:6d:8a:f1:36:88:72:8a:60:f0:9e:
31:f4:18:90:3a:a4:40:f5:e1:12:34:19:46:ea:2c:50:d6:cd:
f4:f8:fa:66:6c:fc:f9:1a:c5:ea:48:21:d7:08:ba:3e:e4:6f:
0e:e1:30:b1:79:56:88:c5:0d:f9:88:84:85:94:4d:a5:91:ee:
a1:ce:66:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:02:27 2025 by rpki-client