Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/51d445-f070-4ca9-a02b-2e1f9be95573/1/0y0esOyO9aIwRXqXAueqOWhYGAw.mft
File: 0y0esOyO9aIwRXqXAueqOWhYGAw.mft (raw, json)
Hash identifier: +TiJtv0sdPNYm/4YQhEesDiwZinL1j2D7eed8OVpmOc=
Subject key identifier: E0:23:41:B4:C2:3A:F0:70:B0:95:6B:05:C9:A3:A3:D1:F5:CE:7C:9D
Authority key identifier: D3:2D:1E:B0:EC:8E:F5:A2:30:45:7A:97:02:E7:AA:39:68:58:18:0C
Certificate issuer: /CN=d32d1eb0ec8ef5a230457a9702e7aa396858180c
Certificate serial: 019A01113B69F6ED6F6DC8E03D3934405DD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0y0esOyO9aIwRXqXAueqOWhYGAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/51d445-f070-4ca9-a02b-2e1f9be95573/1/0y0esOyO9aIwRXqXAueqOWhYGAw.mft
Manifest number: 0AF3
Signing time: Mon 20 Oct 2025 10:01:37 +0000
Manifest this update: Mon 20 Oct 2025 10:01:37 +0000
Manifest next update: Tue 21 Oct 2025 10:01:37 +0000
Files and hashes: 1: 0y0esOyO9aIwRXqXAueqOWhYGAw.crl (hash: cyzHdy+xvtWq0umiE64nBr3wse2hjwLkkxZuAWcecVU=)
2: sK3ZBrWvjwd-LkmXtEXI8mmDAIM.roa (hash: OKskFb0lNjQYUF2WZOv8rV/0FbI0umbg74GYmLaJ8S4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/51d445-f070-4ca9-a02b-2e1f9be95573/1/0y0esOyO9aIwRXqXAueqOWhYGAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/51d445-f070-4ca9-a02b-2e1f9be95573/1/0y0esOyO9aIwRXqXAueqOWhYGAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0y0esOyO9aIwRXqXAueqOWhYGAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 10:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:11:3b:69:f6:ed:6f:6d:c8:e0:3d:39:34:40:5d:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d32d1eb0ec8ef5a230457a9702e7aa396858180c
Validity
Not Before: Oct 20 10:01:37 2025 GMT
Not After : Oct 21 10:01:37 2025 GMT
Subject: CN=e02341b4c23af070b0956b05c9a3a3d1f5ce7c9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a4:42:ee:71:ea:f3:14:f4:f2:75:18:dd:df:
6f:a1:aa:94:b7:cd:86:c8:5d:a9:a7:f6:cd:10:3d:
02:38:4f:6e:e8:57:03:f6:9b:8a:74:9f:35:5a:09:
28:8f:ec:37:34:29:d7:28:1d:37:93:d0:12:2a:c3:
79:a4:15:bf:17:08:d5:07:6a:a8:3c:98:ba:7d:a0:
ff:42:e7:d6:75:2e:63:da:ff:76:11:37:35:c5:d6:
2a:93:53:39:13:99:3b:34:18:d7:35:6f:d6:d5:f7:
e2:4e:bf:14:d0:6f:31:18:44:88:d9:b1:05:ff:ab:
f3:35:4a:6a:a5:8f:d0:35:73:f2:3d:e5:35:50:22:
11:b4:c3:5f:13:03:0f:8f:41:e1:8f:3a:0f:9a:e6:
40:63:c4:b0:aa:5f:23:4d:0c:33:9c:d9:88:ea:00:
84:2b:f4:eb:36:21:fd:5f:c6:ca:f5:77:e7:94:f3:
ca:a0:2b:fb:62:e6:56:0f:17:13:4f:3d:78:ac:88:
05:ec:cb:8d:8c:b5:56:0c:68:76:59:f4:54:e9:e8:
04:55:74:86:d2:5d:ea:96:a7:2b:91:11:cf:58:08:
a5:72:ad:1e:bd:35:b8:71:1b:0d:11:35:6d:44:e5:
b8:a9:71:5f:74:49:88:76:3d:d7:a9:e4:77:ff:c9:
5d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:23:41:B4:C2:3A:F0:70:B0:95:6B:05:C9:A3:A3:D1:F5:CE:7C:9D
X509v3 Authority Key Identifier:
keyid:D3:2D:1E:B0:EC:8E:F5:A2:30:45:7A:97:02:E7:AA:39:68:58:18:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0y0esOyO9aIwRXqXAueqOWhYGAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/51d445-f070-4ca9-a02b-2e1f9be95573/1/0y0esOyO9aIwRXqXAueqOWhYGAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/51d445-f070-4ca9-a02b-2e1f9be95573/1/0y0esOyO9aIwRXqXAueqOWhYGAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:7d:a9:5e:6e:ac:38:ec:13:bd:06:e5:2d:66:ca:e2:d7:29:
8b:ce:88:75:70:a5:5a:76:55:66:df:b5:fd:f4:b3:9b:b1:43:
f1:94:ea:0b:59:1c:5b:8d:bc:f6:cb:a1:fa:ab:32:60:0a:1a:
df:2e:03:c1:f0:cf:68:b6:fc:72:66:79:54:b3:b1:1b:31:2d:
55:f2:c6:2e:17:19:7c:a3:5c:e7:14:e5:13:3e:0f:65:fe:a9:
a2:34:66:77:3d:00:75:42:15:28:a3:81:6e:ae:2d:db:1f:b4:
cb:fa:74:ff:02:73:b2:ef:1c:0c:53:d0:32:58:3f:64:de:8f:
a1:93:70:03:e3:db:c7:8a:eb:c5:4f:68:3d:08:2a:7b:48:a0:
e7:27:6f:ef:fa:b0:62:0d:e2:93:0b:29:f9:03:34:8a:b8:2b:
7d:65:e7:2f:74:07:9b:17:41:e5:09:d8:79:08:a3:bc:23:41:
f9:ba:38:d2:56:fb:c4:b1:d8:3a:f7:d7:c5:c3:fc:09:67:9b:
ef:69:07:54:1e:6c:a9:6c:71:b7:a4:79:69:8c:6a:5a:70:31:
00:95:a0:42:3b:a6:f0:df:51:c8:be:dd:a1:75:0d:01:be:3d:
dc:73:b8:b6:76:09:e7:c0:44:7a:e4:4a:c2:c2:1b:47:a7:08:
96:7f:54:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:00:46 2025 by rpki-client