Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0c9ddc-3191-44b3-88ba-82f7b99c5467/1/0jR5jgcS8VUpLTIR98RHIjzNSaw.mft
File: 0jR5jgcS8VUpLTIR98RHIjzNSaw.mft (raw, json)
Hash identifier: LvwSmovDH0SsZ40Yu9NbUHXPDyN6S9/pnJwLU7hGxMk=
Subject key identifier: 13:F5:0B:DD:B1:48:47:C9:B8:14:34:64:C6:9F:01:7B:43:BD:DE:83
Authority key identifier: D2:34:79:8E:07:12:F1:55:29:2D:32:11:F7:C4:47:22:3C:CD:49:AC
Certificate issuer: /CN=d234798e0712f155292d3211f7c447223ccd49ac
Certificate serial: 0199FDD970B1FA22F0F5BEA134647EF63FFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0jR5jgcS8VUpLTIR98RHIjzNSaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0c9ddc-3191-44b3-88ba-82f7b99c5467/1/0jR5jgcS8VUpLTIR98RHIjzNSaw.mft
Manifest number: 1403
Signing time: Sun 19 Oct 2025 19:01:49 +0000
Manifest this update: Sun 19 Oct 2025 19:01:49 +0000
Manifest next update: Mon 20 Oct 2025 19:01:49 +0000
Files and hashes: 1: 0jR5jgcS8VUpLTIR98RHIjzNSaw.crl (hash: /znMaqNORslMr/bJ+9jxLqxEpTsI9869Ir4lasPeQY4=)
2: 7i6CkxLW0y4-Eb1zqmEq2DrgTXo.roa (hash: 9coWzyh+KYo6PjWXvZi4r37a7LcyA66ZeCRl9p/oIqU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/0c9ddc-3191-44b3-88ba-82f7b99c5467/1/0jR5jgcS8VUpLTIR98RHIjzNSaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/0c9ddc-3191-44b3-88ba-82f7b99c5467/1/0jR5jgcS8VUpLTIR98RHIjzNSaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0jR5jgcS8VUpLTIR98RHIjzNSaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:70:b1:fa:22:f0:f5:be:a1:34:64:7e:f6:3f:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d234798e0712f155292d3211f7c447223ccd49ac
Validity
Not Before: Oct 19 19:01:49 2025 GMT
Not After : Oct 20 19:01:49 2025 GMT
Subject: CN=13f50bddb14847c9b8143464c69f017b43bdde83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ba:dd:7c:1d:dd:04:55:9a:40:12:ce:34:cd:
8f:fb:44:ce:40:c7:89:b2:7c:7e:a4:d2:4a:ac:91:
b2:78:ef:6e:be:1b:d4:a3:e6:8f:04:db:18:47:e7:
db:ea:60:7c:5f:f6:40:39:b3:c4:58:92:d4:75:07:
4f:83:af:13:d4:a7:23:14:6c:75:a7:e9:a0:e6:32:
25:79:bf:ec:f0:72:6d:e4:97:55:b4:5f:f5:f4:ba:
f2:52:84:16:8c:bc:86:a4:e3:31:90:12:ea:b2:cf:
57:18:5e:71:1a:17:c2:58:9b:3d:68:63:c3:fb:58:
bc:24:db:19:0a:64:d6:1d:9b:e6:e6:36:c3:4d:0a:
b2:ff:8d:3b:84:cb:69:ba:00:20:3c:1b:9d:10:ff:
ca:08:04:d7:9a:01:20:b4:5d:76:e2:44:81:3d:69:
10:6a:bc:53:71:5c:30:db:9c:98:bf:a0:c6:59:02:
9b:7c:84:db:1a:3a:4a:22:46:5b:f1:ba:72:28:60:
34:54:7d:4d:ad:83:15:8f:a7:cf:04:e2:de:c6:ac:
eb:9f:3c:8e:45:42:16:85:fc:36:6e:51:df:07:07:
c7:05:91:18:04:91:ea:34:11:c4:4e:38:fb:d1:83:
f9:39:52:9b:19:5d:c0:37:b4:e3:a3:d2:8e:03:1e:
70:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:F5:0B:DD:B1:48:47:C9:B8:14:34:64:C6:9F:01:7B:43:BD:DE:83
X509v3 Authority Key Identifier:
keyid:D2:34:79:8E:07:12:F1:55:29:2D:32:11:F7:C4:47:22:3C:CD:49:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jR5jgcS8VUpLTIR98RHIjzNSaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0c9ddc-3191-44b3-88ba-82f7b99c5467/1/0jR5jgcS8VUpLTIR98RHIjzNSaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0c9ddc-3191-44b3-88ba-82f7b99c5467/1/0jR5jgcS8VUpLTIR98RHIjzNSaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:92:94:be:6d:40:d1:6c:08:0e:5a:e0:58:db:2b:53:06:b6:
e8:57:0b:6e:49:aa:72:82:58:3c:d5:d6:ce:24:a9:d3:7e:b0:
86:ca:e7:e1:38:57:4c:f9:fc:1d:6a:fb:90:c0:0d:04:8b:e0:
16:92:95:15:c0:8a:57:26:a4:30:c6:5e:d1:5d:d2:92:91:34:
c1:c3:55:61:d5:b7:50:2f:41:47:e1:09:89:da:26:4e:96:5c:
be:53:b3:96:f8:ce:b5:46:58:89:73:b8:a2:20:c6:86:03:c8:
37:f1:2d:25:40:b3:0f:51:75:12:fb:a5:27:d0:d5:1e:6a:d0:
6e:07:08:22:b6:89:01:b6:5e:ee:73:d7:fa:38:f1:eb:37:94:
9a:90:91:97:92:86:2b:84:7e:90:97:38:4e:f1:7e:9b:df:13:
d4:73:0d:52:e7:cd:c8:f9:2e:33:4d:15:70:e1:92:38:96:2f:
7c:4f:00:cb:74:da:bc:4d:97:0f:08:c7:d2:53:7a:44:39:e8:
7b:74:78:6d:ee:d1:a9:aa:ab:51:37:b3:02:3c:f6:d0:aa:80:
ea:dc:f9:4e:91:a9:7a:20:a1:e1:01:ac:61:cc:d2:c2:25:f2:
8a:0d:76:c8:e9:44:5f:db:03:85:35:78:a6:bb:47:38:6e:07:
29:95:e3:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:40:28 2025 by rpki-client