Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/97c353-0c36-4066-a56b-139a496cd59c/1/0kMistCnlP0Ha4Xo3FeKuw0D7EA.mft
File: 0kMistCnlP0Ha4Xo3FeKuw0D7EA.mft (raw, json)
Hash identifier: CI5+FmwVkPJRRTGYIvh9SKiU2/qug2QVdiUuEM2W/i0=
Subject key identifier: C2:CC:EC:51:1C:6C:DF:5D:E2:3E:93:06:B5:1D:93:A8:62:8C:73:77
Authority key identifier: D2:43:22:B2:D0:A7:94:FD:07:6B:85:E8:DC:57:8A:BB:0D:03:EC:40
Certificate issuer: /CN=d24322b2d0a794fd076b85e8dc578abb0d03ec40
Certificate serial: 0199FEB5165DABD4FF3B6078E5AF6CDAD64C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0kMistCnlP0Ha4Xo3FeKuw0D7EA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/97c353-0c36-4066-a56b-139a496cd59c/1/0kMistCnlP0Ha4Xo3FeKuw0D7EA.mft
Manifest number: 0678
Signing time: Sun 19 Oct 2025 23:01:44 +0000
Manifest this update: Sun 19 Oct 2025 23:01:44 +0000
Manifest next update: Mon 20 Oct 2025 23:01:44 +0000
Files and hashes: 1: 0i_jhQqN2iNg5AEP50J1N6ocU14.roa (hash: dte6GhHBF0dhj/nHMGGQvO/MzVf6vGP1TT8x/x47jYs=)
2: 0kMistCnlP0Ha4Xo3FeKuw0D7EA.crl (hash: tsxoEBTVXMokdGhdwrOsfgOAHhx0Qqg48bdypQM+U3Y=)
3: wH2BXhQbp4RbWEqazf0ETM0OAOI.roa (hash: WPj1rnPevOFK6Wz2Mo2etzdEIyu2IX1IvghxSjU5v1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/97c353-0c36-4066-a56b-139a496cd59c/1/0kMistCnlP0Ha4Xo3FeKuw0D7EA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/97c353-0c36-4066-a56b-139a496cd59c/1/0kMistCnlP0Ha4Xo3FeKuw0D7EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0kMistCnlP0Ha4Xo3FeKuw0D7EA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 23:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b5:16:5d:ab:d4:ff:3b:60:78:e5:af:6c:da:d6:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d24322b2d0a794fd076b85e8dc578abb0d03ec40
Validity
Not Before: Oct 19 23:01:44 2025 GMT
Not After : Oct 20 23:01:44 2025 GMT
Subject: CN=c2ccec511c6cdf5de23e9306b51d93a8628c7377
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e3:7a:04:9d:35:60:0e:3f:4e:f8:11:f3:48:
b6:1a:4e:c6:1c:5a:80:eb:a1:ac:32:ce:87:d6:c8:
1c:99:7e:5c:e8:68:85:e1:d5:ad:0c:4f:09:dc:5a:
fc:c5:38:6f:77:b5:5c:b2:31:82:90:2b:14:a3:6e:
02:21:a0:17:de:e3:28:69:22:fb:f4:d2:38:62:8a:
23:4e:da:cb:b6:c6:50:ad:f2:7f:fb:7c:62:7b:21:
e8:9f:3b:ec:56:9e:b9:67:0a:71:27:3f:50:ae:c2:
95:31:fb:bb:07:00:ba:5f:be:7b:65:ca:fe:d9:c0:
37:e0:d3:4d:15:43:27:b7:ed:77:8f:e6:5d:c3:47:
75:46:9e:32:1e:1d:54:c5:48:9b:4e:f3:e9:a4:09:
0b:f2:34:02:c7:90:4f:46:3a:32:23:85:00:02:97:
9e:a2:8a:cb:c7:c6:88:71:70:69:73:43:3e:80:81:
18:40:52:df:d5:e9:5d:38:ba:92:da:76:bb:c2:64:
5d:27:ed:f1:a3:cf:82:1b:af:7b:9d:af:c9:3e:ea:
df:cb:94:02:6f:7f:4e:81:88:5a:f9:bc:da:f9:62:
60:51:17:86:dc:f4:e6:c9:3d:35:30:7c:21:7f:3d:
e8:5a:25:fc:f9:9e:c4:fb:f3:7d:01:72:bd:7c:52:
ac:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:CC:EC:51:1C:6C:DF:5D:E2:3E:93:06:B5:1D:93:A8:62:8C:73:77
X509v3 Authority Key Identifier:
keyid:D2:43:22:B2:D0:A7:94:FD:07:6B:85:E8:DC:57:8A:BB:0D:03:EC:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0kMistCnlP0Ha4Xo3FeKuw0D7EA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/97c353-0c36-4066-a56b-139a496cd59c/1/0kMistCnlP0Ha4Xo3FeKuw0D7EA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/97c353-0c36-4066-a56b-139a496cd59c/1/0kMistCnlP0Ha4Xo3FeKuw0D7EA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:17:2e:94:8a:f5:97:20:7b:21:2a:5e:2c:a7:bf:95:f5:2f:
b3:8d:2b:85:e3:8d:99:9e:fa:98:fe:d5:89:33:f6:8c:23:52:
79:80:76:06:a4:a5:1d:ba:5c:0b:77:86:5f:6a:61:cc:1f:55:
cc:55:d1:3d:c3:ea:f3:11:1b:9a:ac:b1:06:da:15:98:4a:24:
db:16:6c:05:1b:dc:50:2b:02:70:bc:90:e7:7c:b3:21:06:ef:
93:11:2c:ed:ca:57:aa:68:c2:3d:0c:39:fb:6e:7e:af:73:f8:
9b:51:03:1d:2e:db:7e:c4:b6:c7:66:09:38:6a:c0:41:0b:a1:
3a:d9:54:47:43:67:54:84:a7:ed:44:da:28:d4:17:d3:05:24:
8d:ec:57:84:b4:de:70:08:58:f6:d0:f1:2c:38:9d:db:89:93:
cb:f2:39:15:86:d5:94:33:3a:cb:eb:d3:26:e9:84:12:0d:e9:
13:08:8c:33:7c:c8:4a:88:69:6e:8b:3e:e5:86:3a:fd:b0:41:
96:10:6a:ea:6b:86:7a:55:e1:eb:fc:02:4d:d0:e2:de:93:fe:
d7:d9:ee:52:96:cb:1a:e3:79:dd:91:6a:b6:3e:1c:00:3b:b2:
62:2a:58:6f:72:06:6d:41:a6:4c:98:f9:83:d1:8e:17:98:79:
13:3a:11:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:44:06 2025 by rpki-client