Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/0KFr9-DjuTMLVEg-GfYTsCtie-8.mft
File: 0KFr9-DjuTMLVEg-GfYTsCtie-8.mft (raw, json)
Hash identifier: wAth+AFomLBfgM4/P5Rtq4Mz3Gb+5z5lNCwl+zbzuPQ=
Subject key identifier: F8:5D:A6:10:DE:63:9D:65:63:69:5F:2C:66:A4:E9:74:E3:A6:AD:37
Authority key identifier: D0:A1:6B:F7:E0:E3:B9:33:0B:54:48:3E:19:F6:13:B0:2B:62:7B:EF
Certificate issuer: /CN=d0a16bf7e0e3b9330b54483e19f613b02b627bef
Certificate serial: 0199FC58535184AECDBDD8EFC2EC58DE543F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0KFr9-DjuTMLVEg-GfYTsCtie-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/0KFr9-DjuTMLVEg-GfYTsCtie-8.mft
Manifest number: 111D
Signing time: Sun 19 Oct 2025 12:01:10 +0000
Manifest this update: Sun 19 Oct 2025 12:01:10 +0000
Manifest next update: Mon 20 Oct 2025 12:01:10 +0000
Files and hashes: 1: 0KFr9-DjuTMLVEg-GfYTsCtie-8.crl (hash: i1iG1xJ0zIGaQ+EP82gG/0lmaxES31QAswS1uyp/KSg=)
2: s0kyiXR6V1bkt2ciUZ2EpXqYq0U.roa (hash: BMvoEX7a6X6vFfIWsQqEPuUPXNmqfef7qS8aBYQEmho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/0KFr9-DjuTMLVEg-GfYTsCtie-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/0KFr9-DjuTMLVEg-GfYTsCtie-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0KFr9-DjuTMLVEg-GfYTsCtie-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:53:51:84:ae:cd:bd:d8:ef:c2:ec:58:de:54:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0a16bf7e0e3b9330b54483e19f613b02b627bef
Validity
Not Before: Oct 19 12:01:10 2025 GMT
Not After : Oct 20 12:01:10 2025 GMT
Subject: CN=f85da610de639d6563695f2c66a4e974e3a6ad37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:3e:51:aa:3e:80:32:03:dc:53:dd:3e:6f:e9:
18:a6:69:1d:06:d0:37:78:6a:ab:7c:23:ed:a1:b0:
b6:32:06:58:e2:35:1f:17:8b:8b:f0:dc:0f:28:59:
d9:be:46:94:4b:d9:07:86:0b:6c:30:e1:63:fa:d1:
49:52:bf:1c:84:2d:2d:db:8d:d1:64:20:ba:64:e8:
7c:fd:7b:64:f8:59:c8:22:7a:1b:ee:48:60:3e:44:
8e:98:ff:23:62:58:3c:04:5a:74:b5:45:2a:9f:2b:
b4:a1:7c:55:e5:df:ae:20:1e:99:d1:0d:26:fd:b2:
4a:83:5c:90:05:89:8f:8f:4a:9d:74:f5:72:34:1d:
dc:5b:03:eb:2c:d2:6c:19:f9:47:b8:a2:e2:f5:b8:
f5:ff:bc:1f:8d:be:71:de:a1:97:ca:e5:d3:2b:f1:
1a:47:b1:ba:e9:91:4f:6d:3d:4e:34:62:d8:00:4f:
27:d7:de:84:b7:63:a8:60:45:4c:90:62:30:9c:23:
27:2e:4b:73:0a:60:7b:4c:b5:91:a0:bc:29:f0:46:
68:35:9d:48:76:4e:c7:5e:8e:6f:72:07:fc:92:83:
4b:86:46:d7:76:f5:c2:bf:fe:54:85:6b:6f:a8:2b:
36:f3:41:48:0a:99:d4:7f:97:40:c7:ee:89:51:9e:
74:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:5D:A6:10:DE:63:9D:65:63:69:5F:2C:66:A4:E9:74:E3:A6:AD:37
X509v3 Authority Key Identifier:
keyid:D0:A1:6B:F7:E0:E3:B9:33:0B:54:48:3E:19:F6:13:B0:2B:62:7B:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KFr9-DjuTMLVEg-GfYTsCtie-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/0KFr9-DjuTMLVEg-GfYTsCtie-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/0KFr9-DjuTMLVEg-GfYTsCtie-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:bc:f1:5f:2d:08:14:2d:aa:68:e0:d4:02:3b:7b:9e:90:9d:
9b:c6:22:18:33:3b:4d:4e:6a:5d:f5:d3:3f:30:98:a6:e8:e1:
e9:51:7e:b0:68:9e:43:7e:91:4b:d6:19:7c:69:3a:84:d3:d1:
d1:83:be:0e:a4:45:b7:fe:e9:63:94:d5:80:97:9c:5f:97:49:
a7:36:05:b3:d5:f9:ba:a7:dc:80:09:b3:53:a7:0e:39:a4:0d:
78:3e:c4:f8:77:8e:1b:7d:31:91:d0:55:de:f1:3c:82:94:98:
b5:79:5b:24:31:5d:79:4e:cc:9b:e8:08:e1:0c:8d:f2:b4:79:
21:89:ec:cc:4e:08:fc:c6:5b:42:13:a3:1c:0d:5f:18:7a:0a:
2c:76:32:bc:bd:65:3e:91:0f:ca:ef:89:25:9e:d8:79:52:d0:
f2:e1:7f:f7:a7:91:06:72:6e:f7:27:8c:0d:a3:22:55:9b:cb:
a5:6a:36:bb:c8:49:ed:6d:02:6b:0f:00:d7:9b:c0:de:0e:df:
b7:d7:e7:ed:a5:0b:1b:b3:66:6b:9e:9a:4a:7f:49:db:a8:c9:
66:2c:85:37:46:e7:cd:21:07:a1:09:e5:e3:f6:91:3e:72:2a:
6f:77:9d:08:dc:8d:59:89:53:5e:39:0c:d3:38:b5:33:6c:c2:
72:50:18:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:51:20 2025 by rpki-client