Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/41dd00-b57b-4638-a08b-6853c41ca03e/1/0tS9caQ9jN1GKmHu4NlHAMfmQl8.mft
File: 0tS9caQ9jN1GKmHu4NlHAMfmQl8.mft (raw, json)
Hash identifier: 9BN55MLvrzBhxacXsPadLz3w5zHb7/6L/s2rnnR91Gw=
Subject key identifier: 7D:CC:34:12:19:4D:EF:BA:2B:6E:D5:ED:F2:03:9B:A5:BC:77:8C:F6
Authority key identifier: D2:D4:BD:71:A4:3D:8C:DD:46:2A:61:EE:E0:D9:47:00:C7:E6:42:5F
Certificate issuer: /CN=d2d4bd71a43d8cdd462a61eee0d94700c7e6425f
Certificate serial: 0199FB7C8A6E56A2476AC8D8CE186E890BDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0tS9caQ9jN1GKmHu4NlHAMfmQl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/41dd00-b57b-4638-a08b-6853c41ca03e/1/0tS9caQ9jN1GKmHu4NlHAMfmQl8.mft
Manifest number: 5C
Signing time: Sun 19 Oct 2025 08:01:06 +0000
Manifest this update: Sun 19 Oct 2025 08:01:06 +0000
Manifest next update: Mon 20 Oct 2025 08:01:06 +0000
Files and hashes: 1: 0tS9caQ9jN1GKmHu4NlHAMfmQl8.crl (hash: xyax+fDs+tZ67eBniUIvhw9v2HOWmFLpZlxq20/jM1Y=)
2: KKgMs-wElUJViKwmcf1fvk9lnVM.roa (hash: J4sRQGzBOdgtJ9HehK5V6sdntDrbSLepduIzznR8wJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/41dd00-b57b-4638-a08b-6853c41ca03e/1/0tS9caQ9jN1GKmHu4NlHAMfmQl8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/41dd00-b57b-4638-a08b-6853c41ca03e/1/0tS9caQ9jN1GKmHu4NlHAMfmQl8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0tS9caQ9jN1GKmHu4NlHAMfmQl8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:8a:6e:56:a2:47:6a:c8:d8:ce:18:6e:89:0b:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2d4bd71a43d8cdd462a61eee0d94700c7e6425f
Validity
Not Before: Oct 19 08:01:06 2025 GMT
Not After : Oct 20 08:01:06 2025 GMT
Subject: CN=7dcc3412194defba2b6ed5edf2039ba5bc778cf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c5:59:ca:1f:78:19:54:df:a7:46:1c:c4:f2:
4c:ca:6d:09:9d:62:31:fb:62:55:84:3c:4b:96:e4:
60:70:45:24:c5:c6:e0:ab:d0:c4:12:ea:6c:2d:6d:
dd:cf:cb:45:ce:5c:a7:ef:20:f9:c7:b4:4b:f9:43:
18:14:91:bf:47:51:0a:7a:06:47:5a:64:bd:22:ec:
d3:17:89:09:cc:ac:83:53:24:ee:e1:4a:94:7a:ba:
4a:22:83:b1:c9:a8:94:2a:79:e9:b2:ff:66:68:7b:
1c:cc:22:62:a8:ec:c1:87:20:e3:05:2d:4a:51:27:
41:ae:c2:cf:85:6e:85:80:c0:75:0d:9d:d9:3b:e0:
6a:80:61:3d:53:82:3d:b0:43:24:8a:4a:68:aa:d9:
e5:42:5a:bf:a9:9a:7a:25:48:b5:90:f7:fd:ce:6b:
06:95:66:1c:b8:a9:a0:e3:ee:9a:d1:7f:96:da:13:
e2:32:50:21:bc:0c:b6:f3:80:1c:59:2a:44:cf:1f:
0b:55:46:59:ec:17:bc:dd:d5:ed:41:9e:37:ac:d2:
86:ae:94:03:f7:7b:15:85:29:bf:01:f3:eb:7a:3d:
e8:f9:4c:72:28:eb:c4:fd:c0:cc:c2:3b:c7:61:b0:
0b:90:e6:f4:32:0f:a9:86:f3:99:c2:c3:56:7f:ef:
43:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:CC:34:12:19:4D:EF:BA:2B:6E:D5:ED:F2:03:9B:A5:BC:77:8C:F6
X509v3 Authority Key Identifier:
keyid:D2:D4:BD:71:A4:3D:8C:DD:46:2A:61:EE:E0:D9:47:00:C7:E6:42:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0tS9caQ9jN1GKmHu4NlHAMfmQl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/41dd00-b57b-4638-a08b-6853c41ca03e/1/0tS9caQ9jN1GKmHu4NlHAMfmQl8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/41dd00-b57b-4638-a08b-6853c41ca03e/1/0tS9caQ9jN1GKmHu4NlHAMfmQl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:ea:c8:4c:2c:25:e9:79:7f:98:71:c5:73:66:a2:5f:9b:b2:
6e:0d:9f:99:86:9f:c6:97:f1:40:fe:d3:ad:7a:31:5c:d3:20:
dc:4d:3c:50:4c:9d:33:db:d3:ae:5f:81:de:d5:e0:36:38:07:
df:a7:d2:c9:37:f1:a4:95:37:f8:15:bc:37:ce:6c:19:ec:9c:
00:2e:f8:26:8d:ca:f0:30:66:86:e6:88:62:d2:44:ae:2f:ad:
9c:7e:e8:9d:18:55:f2:ad:5d:5b:89:f1:60:e8:56:59:dc:50:
e6:79:94:f9:46:ab:13:a6:f5:e1:2c:b2:fa:22:1d:2f:21:a0:
d8:6e:a8:58:a1:b0:46:92:fe:cb:eb:1c:e5:f4:80:50:05:3c:
8d:eb:1f:d2:b6:e7:f3:ca:f8:0b:f5:85:e6:55:d7:7e:1d:6c:
56:4b:4a:ad:90:9b:ae:09:e7:a4:70:01:13:e0:58:f3:73:6a:
c0:6f:7d:08:b2:2d:2c:46:45:58:87:ad:b5:ff:03:96:f4:34:
fd:e2:f3:9f:f2:ea:a6:7c:21:ad:f9:6e:f0:f2:d6:cf:a5:ed:
41:31:dc:0e:ee:9a:75:f8:56:2e:88:6d:81:1a:83:85:fe:32:
fd:62:17:fd:d7:01:6c:54:17:7c:7d:db:76:aa:fa:3e:6e:74:
93:83:9d:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:07 2025 by rpki-client