Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/52476d-a794-47d5-8f50-aeda824678d4/1/cr0ONuHCAjBKNRM7EWZmJeXW5e8.mft
File: cr0ONuHCAjBKNRM7EWZmJeXW5e8.mft (raw, json)
Hash identifier: LaTp4gnjdmmbD+bxyA4dirdCSVpJGu9xU5G/wxgj/d8=
Subject key identifier: 78:96:14:4F:39:14:09:FE:08:37:63:CF:B3:81:AA:82:31:42:F0:9A
Authority key identifier: 72:BD:0E:36:E1:C2:02:30:4A:35:13:3B:11:66:66:25:E5:D6:E5:EF
Certificate issuer: /CN=72bd0e36e1c202304a35133b11666625e5d6e5ef
Certificate serial: 0199FDDA0226AA6D108E5C2328163291B0DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cr0ONuHCAjBKNRM7EWZmJeXW5e8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/52476d-a794-47d5-8f50-aeda824678d4/1/cr0ONuHCAjBKNRM7EWZmJeXW5e8.mft
Manifest number: 0A84
Signing time: Sun 19 Oct 2025 19:02:26 +0000
Manifest this update: Sun 19 Oct 2025 19:02:26 +0000
Manifest next update: Mon 20 Oct 2025 19:02:26 +0000
Files and hashes: 1: YJ__Jpr1denKLIU4A4wwpaBEGuM.roa (hash: HQMvWJSgBySt+TDaIiCe+VSZte2lW30WZtz1IJWSvxM=)
2: cr0ONuHCAjBKNRM7EWZmJeXW5e8.crl (hash: D4wnox2kYlSGGWyJ6XKXjUidN7czASKfW95U/LkwJmo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/52476d-a794-47d5-8f50-aeda824678d4/1/cr0ONuHCAjBKNRM7EWZmJeXW5e8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/52476d-a794-47d5-8f50-aeda824678d4/1/cr0ONuHCAjBKNRM7EWZmJeXW5e8.mft
rsync://rpki.ripe.net/repository/DEFAULT/cr0ONuHCAjBKNRM7EWZmJeXW5e8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:02:26:aa:6d:10:8e:5c:23:28:16:32:91:b0:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72bd0e36e1c202304a35133b11666625e5d6e5ef
Validity
Not Before: Oct 19 19:02:26 2025 GMT
Not After : Oct 20 19:02:26 2025 GMT
Subject: CN=7896144f391409fe083763cfb381aa823142f09a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:a4:68:c8:89:a0:19:c8:ea:f1:41:14:9c:2e:
02:c3:b5:ff:2e:63:22:2c:f1:00:7b:20:34:a7:da:
a8:7e:1a:e0:17:ae:61:a8:31:f5:be:9a:60:5f:ba:
31:ae:57:a4:a0:f8:f1:28:c9:4a:4f:c3:eb:73:2b:
26:97:d1:15:a5:e5:38:93:56:d7:7a:88:c9:e2:9e:
ae:a4:fd:ac:34:62:32:3d:a9:52:f3:af:7d:68:29:
50:2d:e8:c1:fe:10:cf:86:ad:ad:ab:0e:66:fb:7f:
7c:41:ff:4b:48:59:20:18:9f:22:47:1e:df:f1:ad:
17:a6:08:41:42:05:d6:50:51:3d:5d:1d:7d:d1:8b:
d2:a1:ff:c0:48:67:06:52:56:97:9c:3c:ae:5b:68:
22:a2:d4:d3:fe:61:84:de:ae:99:fd:76:8c:60:b5:
b1:5d:aa:b3:11:0f:c6:a5:bb:39:73:8b:c2:5f:95:
fc:da:1d:9f:ea:51:f8:58:05:c2:2d:0e:72:ee:d9:
a8:43:43:52:39:f5:62:e3:c0:84:30:c1:31:15:59:
8b:ff:49:c0:11:54:58:13:f6:9a:8b:9b:55:21:ce:
de:26:43:e6:81:57:f0:e6:00:2f:88:c7:e9:f8:0c:
4f:7a:5e:ee:3c:18:c1:a3:82:91:e9:5f:2b:9f:ad:
e4:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:96:14:4F:39:14:09:FE:08:37:63:CF:B3:81:AA:82:31:42:F0:9A
X509v3 Authority Key Identifier:
keyid:72:BD:0E:36:E1:C2:02:30:4A:35:13:3B:11:66:66:25:E5:D6:E5:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cr0ONuHCAjBKNRM7EWZmJeXW5e8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/52476d-a794-47d5-8f50-aeda824678d4/1/cr0ONuHCAjBKNRM7EWZmJeXW5e8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/52476d-a794-47d5-8f50-aeda824678d4/1/cr0ONuHCAjBKNRM7EWZmJeXW5e8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:d7:25:30:52:08:01:ee:76:7b:5e:d5:48:cc:1f:b3:7a:d3:
b1:7a:e8:31:5e:23:44:70:60:45:02:d4:15:83:de:8e:c6:73:
59:ea:6b:51:5b:03:df:45:2e:89:63:bf:94:48:3a:e8:35:1b:
37:29:dc:fb:2b:23:a4:dc:b8:cc:9b:01:f5:d1:74:1d:81:0c:
31:84:b0:52:c5:0f:1c:67:3f:1b:89:ad:63:62:70:d2:da:3e:
d7:5f:09:dd:9c:3b:65:77:00:a4:de:21:de:a3:00:ea:16:ed:
d7:6d:e9:72:44:0c:cf:3a:25:08:9a:1b:6e:3a:97:1e:b7:91:
42:ff:43:c7:16:9a:37:03:32:2b:6a:e4:70:a7:50:7b:8d:02:
48:4c:58:c6:47:56:1e:25:55:55:12:2d:f4:8d:30:85:d3:a7:
32:68:7a:1e:cd:18:f3:97:7a:a7:0f:f8:68:52:c9:93:d9:bd:
7a:6c:34:91:e2:11:92:34:54:50:aa:df:8c:28:65:a2:5c:5a:
c6:2a:de:e5:68:6f:b3:b8:5e:8b:ec:c0:cc:a6:41:1b:ae:d9:
85:db:32:b5:1b:cb:23:bd:5e:53:fa:7b:f0:ee:49:d2:7a:3c:
a2:17:01:11:87:48:a9:04:47:6d:78:06:db:fe:85:42:2c:9a:
29:a2:b4:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92gImqm0QjlwjKBYykbDbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyYmQwZTM2ZTFjMjAyMzA0YTM1MTMzYjExNjY2NjI1ZTVk
NmU1ZWYwHhcNMjUxMDE5MTkwMjI2WhcNMjUxMDIwMTkwMjI2WjAzMTEwLwYDVQQD
Eyg3ODk2MTQ0ZjM5MTQwOWZlMDgzNzYzY2ZiMzgxYWE4MjMxNDJmMDlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2qRoyImgGcjq8UEUnC4Cw7X/LmMi
LPEAeyA0p9qofhrgF65hqDH1vppgX7oxrlekoPjxKMlKT8Prcysml9EVpeU4k1bX
eojJ4p6upP2sNGIyPalS8699aClQLejB/hDPhq2tqw5m+398Qf9LSFkgGJ8iRx7f
8a0XpghBQgXWUFE9XR190YvSof/ASGcGUlaXnDyuW2giotTT/mGE3q6Z/XaMYLWx
XaqzEQ/Gpbs5c4vCX5X82h2f6lH4WAXCLQ5y7tmoQ0NSOfVi48CEMMExFVmL/0nA
EVRYE/aai5tVIc7eJkPmgVfw5gAviMfp+AxPel7uPBjBo4KR6V8rn63keQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHiWFE85FAn+CDdjz7OBqoIxQvCaMB8GA1UdIwQY
MBaAFHK9DjbhwgIwSjUTOxFmZiXl1uXvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3IwT051SENBakJLTlJNN0VXWm1KZVhXNWU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC81MjQ3NmQtYTc5NC00N2Q1LThmNTAt
YWVkYTgyNDY3OGQ0LzEvY3IwT051SENBakJLTlJNN0VXWm1KZVhXNWU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC81MjQ3NmQtYTc5NC00N2Q1LThmNTAtYWVkYTgyNDY3OGQ0
LzEvY3IwT051SENBakJLTlJNN0VXWm1KZVhXNWU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHtclMFII
Ae52e17VSMwfs3rTsXroMV4jRHBgRQLUFYPejsZzWeprUVsD30UuiWO/lEg66DUb
Nync+ysjpNy4zJsB9dF0HYEMMYSwUsUPHGc/G4mtY2Jw0to+118J3Zw7ZXcApN4h
3qMA6hbt123pckQMzzolCJobbjqXHreRQv9DxxaaNwMyK2rkcKdQe40CSExYxkdW
HiVVVRIt9I0whdOnMmh6Hs0Y85d6pw/4aFLJk9m9emw0keIRkjRUUKrfjChlolxa
xire5Whvs7hei+zAzKZBG67ZhdsytRvLI71eU/p78O5J0no8ohcBEYdIqQRHbXgG
2/6FQiyaKaK0hw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 00:06:13 2025 by rpki-client