Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/12eadf-53b7-428a-81ed-9da2cf4e6065/1/0dXq4THDsQiP-wI3mA1u4YiWaMY.mft
File: 0dXq4THDsQiP-wI3mA1u4YiWaMY.mft (raw, json)
Hash identifier: OLAHKccweWZ30wavQQiHMWtrMPEm5LvRPa6mwuQmqtQ=
Subject key identifier: EC:0D:DF:70:34:EC:A2:24:92:DA:81:1C:95:C1:36:A8:F4:0F:06:AF
Authority key identifier: D1:D5:EA:E1:31:C3:B1:08:8F:FB:02:37:98:0D:6E:E1:88:96:68:C6
Certificate issuer: /CN=d1d5eae131c3b1088ffb0237980d6ee1889668c6
Certificate serial: 0199FB7CD63093F313B52D9C198712BA0E99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0dXq4THDsQiP-wI3mA1u4YiWaMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/12eadf-53b7-428a-81ed-9da2cf4e6065/1/0dXq4THDsQiP-wI3mA1u4YiWaMY.mft
Manifest number: 5C
Signing time: Sun 19 Oct 2025 08:01:26 +0000
Manifest this update: Sun 19 Oct 2025 08:01:26 +0000
Manifest next update: Mon 20 Oct 2025 08:01:26 +0000
Files and hashes: 1: 0dXq4THDsQiP-wI3mA1u4YiWaMY.crl (hash: CVWl5puKEtBajappD57RrUXf7zvq/ROtOSf/tEpyfTk=)
2: 6W2f7odCRZasTES13-ea8vAK_m8.roa (hash: okmw3ktsRXXv4R0y2S6qFif1SfGCGqe5Hb5ZPwgIWm0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/12eadf-53b7-428a-81ed-9da2cf4e6065/1/0dXq4THDsQiP-wI3mA1u4YiWaMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/12eadf-53b7-428a-81ed-9da2cf4e6065/1/0dXq4THDsQiP-wI3mA1u4YiWaMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0dXq4THDsQiP-wI3mA1u4YiWaMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:d6:30:93:f3:13:b5:2d:9c:19:87:12:ba:0e:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1d5eae131c3b1088ffb0237980d6ee1889668c6
Validity
Not Before: Oct 19 08:01:26 2025 GMT
Not After : Oct 20 08:01:26 2025 GMT
Subject: CN=ec0ddf7034eca22492da811c95c136a8f40f06af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:9a:a2:c0:a9:89:49:d4:4a:47:46:f1:96:99:
1a:2b:8b:ff:d7:b8:0a:5e:e2:ed:86:01:95:e8:73:
3d:ae:a8:a6:0e:86:68:c6:3d:6f:d3:f4:ff:45:e1:
a3:3b:96:31:8b:c4:a3:10:f7:e5:41:1a:36:be:f6:
d1:4c:a1:25:5c:6c:d1:db:b4:d6:0b:7a:9e:ce:3c:
7d:0b:c6:f1:60:5c:1e:63:47:25:f3:6c:bb:48:f8:
85:89:37:80:75:d0:6b:58:a3:3a:a5:4c:f8:1c:3c:
4a:40:62:0e:f5:b7:ca:25:b3:b4:97:39:22:7e:ff:
de:e4:24:e6:fd:a3:c8:3c:19:51:7c:2d:19:ba:40:
ca:bd:7c:e1:ef:23:2d:64:b2:6b:a3:90:f4:3c:44:
b3:25:ca:e2:0b:74:eb:b7:63:9c:c7:0a:8b:e6:3c:
43:c4:03:76:b6:e9:1a:47:1d:32:4c:8a:a9:d5:35:
88:5f:56:25:59:eb:f2:11:6d:c5:19:f6:9a:59:f8:
1f:a6:76:db:85:3f:2d:cd:c3:3e:d5:63:44:dc:af:
bb:33:3a:77:27:65:65:5a:28:7e:01:51:a3:e3:8b:
cd:39:81:21:66:f8:eb:b8:a4:ff:59:f7:32:3e:66:
ab:27:e2:af:dc:57:b6:2e:22:62:f9:83:1b:92:c5:
58:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:0D:DF:70:34:EC:A2:24:92:DA:81:1C:95:C1:36:A8:F4:0F:06:AF
X509v3 Authority Key Identifier:
keyid:D1:D5:EA:E1:31:C3:B1:08:8F:FB:02:37:98:0D:6E:E1:88:96:68:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0dXq4THDsQiP-wI3mA1u4YiWaMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/12eadf-53b7-428a-81ed-9da2cf4e6065/1/0dXq4THDsQiP-wI3mA1u4YiWaMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/12eadf-53b7-428a-81ed-9da2cf4e6065/1/0dXq4THDsQiP-wI3mA1u4YiWaMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:5b:a6:f7:2a:76:55:18:d0:66:f8:60:96:04:57:56:06:26:
83:9e:32:b9:61:68:67:b1:f8:47:64:6a:e4:f4:4c:ee:c0:13:
b4:7b:ee:9e:c5:40:11:60:8d:ce:9b:f6:4e:3e:22:08:44:d1:
c9:c9:5c:0d:f1:83:0b:c5:4e:7b:ca:d1:9b:74:43:7b:c2:ca:
d3:f2:e4:c2:4b:20:46:61:d0:10:3d:4e:ba:f2:97:2f:b9:c6:
47:d5:5d:d2:ac:bb:72:8c:c0:53:65:24:50:6a:0f:f8:7b:30:
73:0e:2d:b6:6e:f3:98:0e:81:8b:99:e3:f7:b8:d5:ac:b1:bf:
49:79:61:8c:3d:b8:7c:dc:03:e0:f5:3d:a7:47:43:be:e4:45:
8d:00:00:b3:5c:93:9c:bb:60:66:3f:59:e1:a7:91:8c:03:9a:
6a:de:1a:f8:b9:30:7f:83:ae:a1:b0:30:e6:4e:11:95:1f:2e:
9f:fd:6b:92:33:f0:e8:34:95:5f:d1:0d:c2:aa:73:84:99:6a:
de:98:ad:8d:b1:50:8a:96:c6:69:a1:37:67:38:c8:f7:ba:cd:
d8:ca:0e:94:46:e6:f6:e1:7a:ab:b2:2d:8d:0a:d7:b7:92:75:
0f:60:35:52:20:cd:86:d6:cd:32:8c:bc:93:8b:4b:7b:e5:2c:
1e:aa:17:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:30 2025 by rpki-client