Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/15fb8a-9261-462d-a5ac-d5a1ea9edb08/1/0IpNevM5v1JVcjk3VdHPszzdta0.mft
File: 0IpNevM5v1JVcjk3VdHPszzdta0.mft (raw, json)
Hash identifier: 7ZvJlVmXr5tjmui80xBPuogPlV6QLmyyd7q79HfE6eE=
Subject key identifier: E7:96:55:A4:16:33:67:32:17:B4:9B:E4:5C:B0:57:89:40:42:A9:2D
Authority key identifier: D0:8A:4D:7A:F3:39:BF:52:55:72:39:37:55:D1:CF:B3:3C:DD:B5:AD
Certificate issuer: /CN=d08a4d7af339bf525572393755d1cfb33cddb5ad
Certificate serial: 0199FD34773514188849683961DE330EBA5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0IpNevM5v1JVcjk3VdHPszzdta0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/15fb8a-9261-462d-a5ac-d5a1ea9edb08/1/0IpNevM5v1JVcjk3VdHPszzdta0.mft
Manifest number: 16DF
Signing time: Sun 19 Oct 2025 16:01:37 +0000
Manifest this update: Sun 19 Oct 2025 16:01:37 +0000
Manifest next update: Mon 20 Oct 2025 16:01:37 +0000
Files and hashes: 1: 0IpNevM5v1JVcjk3VdHPszzdta0.crl (hash: TiHxufxMVQglvaDpmxDdkGlOFrjZfKvUa0fnSQSt37c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/15fb8a-9261-462d-a5ac-d5a1ea9edb08/1/0IpNevM5v1JVcjk3VdHPszzdta0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/15fb8a-9261-462d-a5ac-d5a1ea9edb08/1/0IpNevM5v1JVcjk3VdHPszzdta0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0IpNevM5v1JVcjk3VdHPszzdta0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:77:35:14:18:88:49:68:39:61:de:33:0e:ba:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d08a4d7af339bf525572393755d1cfb33cddb5ad
Validity
Not Before: Oct 19 16:01:37 2025 GMT
Not After : Oct 20 16:01:37 2025 GMT
Subject: CN=e79655a41633673217b49be45cb057894042a92d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:38:9e:7d:13:cd:15:f2:81:55:ee:73:52:d1:
46:3b:b1:8e:5b:cb:db:df:cc:c5:b7:f8:09:11:fd:
84:6c:16:0a:dd:65:91:d9:a6:ab:0d:ad:f9:b5:a1:
93:3a:8d:5d:72:1e:26:4f:c5:d4:6f:c1:8d:03:26:
44:fd:17:f0:d9:67:23:c3:38:dd:b6:a2:5c:bb:f9:
6b:5d:fc:96:5c:8d:ec:6c:5a:32:79:ed:30:79:19:
92:da:40:30:73:ef:96:6c:20:e6:44:bf:72:e6:ab:
df:08:55:75:12:22:24:44:5f:a4:d9:29:9f:36:ad:
20:e5:1f:c9:c1:13:22:ee:2f:50:d7:af:ae:ab:f7:
5b:c2:1a:37:1c:36:a4:8a:4f:bc:d5:dc:d9:f2:68:
65:60:bd:43:85:ce:2c:6a:90:09:3f:b4:49:bb:89:
13:50:84:ef:b8:e9:fe:88:36:1e:9f:9e:16:dc:7e:
a6:c1:db:89:69:29:61:2e:6e:b1:75:e7:a5:25:fb:
1a:31:3b:fa:a9:3d:e7:6a:7e:ca:1f:e5:d2:7b:5e:
ad:90:d2:25:b7:12:85:18:88:b4:70:4b:50:c5:de:
19:8d:6b:db:0a:90:75:fe:e7:2c:b8:10:08:d0:a5:
a4:db:31:18:09:05:f5:77:83:d6:b1:10:20:3b:bc:
bd:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:96:55:A4:16:33:67:32:17:B4:9B:E4:5C:B0:57:89:40:42:A9:2D
X509v3 Authority Key Identifier:
keyid:D0:8A:4D:7A:F3:39:BF:52:55:72:39:37:55:D1:CF:B3:3C:DD:B5:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0IpNevM5v1JVcjk3VdHPszzdta0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/15fb8a-9261-462d-a5ac-d5a1ea9edb08/1/0IpNevM5v1JVcjk3VdHPszzdta0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/15fb8a-9261-462d-a5ac-d5a1ea9edb08/1/0IpNevM5v1JVcjk3VdHPszzdta0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:e5:55:a9:4a:8f:d9:0b:79:cc:3e:15:e6:81:1e:1b:e4:15:
36:c7:63:26:96:55:a8:27:e6:3e:f0:56:c1:5c:45:f9:05:2d:
c9:9c:e5:75:2e:63:77:63:6a:d6:9d:ba:3f:24:9a:45:c4:eb:
cc:8a:fc:a7:0e:ec:93:0c:40:8a:5a:8b:82:aa:ec:f0:03:7b:
0d:c1:69:b4:f1:30:cf:d3:c7:56:7c:84:ef:b9:2b:a0:99:ab:
5a:fa:c7:00:4e:42:c2:5b:b7:b9:eb:0b:66:23:b3:30:28:55:
19:ec:64:b4:ad:5b:cd:d1:91:b9:28:54:87:75:42:0c:eb:71:
73:9d:1f:46:ca:72:05:b2:21:c1:7c:fd:52:97:65:ad:ea:51:
dd:40:03:4d:3a:4d:60:b3:55:9e:0d:23:76:20:0c:1e:7e:6e:
58:e1:a8:c1:6b:b4:51:02:32:9d:c6:0f:52:7d:f5:8f:fe:aa:
73:da:1f:59:34:10:62:4b:5d:0f:a9:9d:20:55:5d:91:40:03:
95:f4:d7:7e:d0:50:48:13:3d:00:57:97:06:40:eb:70:b5:54:
01:37:21:e4:3f:31:eb:91:36:1c:53:88:df:bc:e5:48:8f:3c:
f3:9d:78:21:6c:a7:19:11:bc:d6:04:00:52:4e:02:6d:2c:4f:
2f:f3:ba:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:27:27 2025 by rpki-client