Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/445ed0-48b3-408e-a1bc-9979df52b018/1/0nuHf4mTQSab7GfG46CoiLp66Y0.mft
File: 0nuHf4mTQSab7GfG46CoiLp66Y0.mft (raw, json)
Hash identifier: k1vhN+t4K1tW9P6aRPEnzvhpjfbYyLtZV+FW8PSqRhs=
Subject key identifier: 28:0D:0A:81:C2:70:F9:11:23:5C:ED:95:88:AD:97:F6:42:EA:E9:9F
Authority key identifier: D2:7B:87:7F:89:93:41:26:9B:EC:67:C6:E3:A0:A8:88:BA:7A:E9:8D
Certificate issuer: /CN=d27b877f899341269bec67c6e3a0a888ba7ae98d
Certificate serial: 0199FAD7EF69DF5EE28B9D3B518357440578
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0nuHf4mTQSab7GfG46CoiLp66Y0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/445ed0-48b3-408e-a1bc-9979df52b018/1/0nuHf4mTQSab7GfG46CoiLp66Y0.mft
Manifest number: 0AE6
Signing time: Sun 19 Oct 2025 05:01:19 +0000
Manifest this update: Sun 19 Oct 2025 05:01:19 +0000
Manifest next update: Mon 20 Oct 2025 05:01:19 +0000
Files and hashes: 1: 0nuHf4mTQSab7GfG46CoiLp66Y0.crl (hash: /B/Yy3rsi4/+hFACMagtK9AIN3FijAiAEi9fYz13E7Y=)
2: PdXLVimBA8zILWLashg1LUqBqm8.roa (hash: IrtzMysR6KSQR0SZiM1b2jUK5M57dKBFlK4qFH4B+Mo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/445ed0-48b3-408e-a1bc-9979df52b018/1/0nuHf4mTQSab7GfG46CoiLp66Y0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/445ed0-48b3-408e-a1bc-9979df52b018/1/0nuHf4mTQSab7GfG46CoiLp66Y0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0nuHf4mTQSab7GfG46CoiLp66Y0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d7:ef:69:df:5e:e2:8b:9d:3b:51:83:57:44:05:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d27b877f899341269bec67c6e3a0a888ba7ae98d
Validity
Not Before: Oct 19 05:01:19 2025 GMT
Not After : Oct 20 05:01:19 2025 GMT
Subject: CN=280d0a81c270f911235ced9588ad97f642eae99f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ec:4b:28:b4:06:ab:d1:2a:ef:c1:6a:04:b0:
50:8c:e7:b3:d1:14:ff:66:c1:49:33:45:ca:16:95:
3d:32:ef:7d:54:fd:35:ea:23:48:b7:cc:2f:01:92:
d6:36:f0:c8:bf:86:9d:e5:a9:a6:d3:03:ca:ef:6b:
df:fa:2d:e9:15:98:fa:cf:65:bb:aa:79:45:20:39:
e5:72:22:c9:00:24:5e:49:50:2e:a4:2c:85:14:c8:
f7:9d:41:50:49:49:cb:71:24:bd:ba:09:88:61:32:
9c:a7:83:a5:12:6e:78:eb:60:c0:0e:05:20:1f:78:
77:88:20:53:bc:db:bf:09:f3:6d:2c:a2:c9:18:00:
07:42:d9:91:be:75:aa:b0:04:cb:e2:fc:2c:48:a5:
be:7a:18:79:04:98:3d:69:f5:86:75:4f:5d:50:3b:
d8:f1:3c:0b:1e:43:d2:d8:f9:de:07:36:79:85:e0:
30:f3:d7:0d:02:04:9a:fa:72:64:85:1d:6c:31:37:
d2:c2:ff:f9:12:d3:f5:df:d7:ab:e2:59:c0:81:4a:
8e:a3:e5:4c:50:f0:2f:94:f0:44:4b:c7:15:e1:4d:
40:b1:79:5a:99:97:0f:e8:72:94:f9:e6:fc:0a:0b:
3f:8c:2f:ab:c3:b8:2d:02:d9:49:f8:26:7d:a0:ce:
91:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:0D:0A:81:C2:70:F9:11:23:5C:ED:95:88:AD:97:F6:42:EA:E9:9F
X509v3 Authority Key Identifier:
keyid:D2:7B:87:7F:89:93:41:26:9B:EC:67:C6:E3:A0:A8:88:BA:7A:E9:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0nuHf4mTQSab7GfG46CoiLp66Y0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/445ed0-48b3-408e-a1bc-9979df52b018/1/0nuHf4mTQSab7GfG46CoiLp66Y0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/445ed0-48b3-408e-a1bc-9979df52b018/1/0nuHf4mTQSab7GfG46CoiLp66Y0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:45:e9:fc:ad:4b:d3:ec:bd:b6:2f:d5:56:8b:33:54:9a:90:
07:90:f3:05:e3:3a:0e:da:ac:f0:67:c7:5b:63:2f:20:96:ca:
42:de:d2:3b:7a:18:f3:e0:b4:ce:b3:54:16:66:ab:55:3f:e0:
0d:16:41:3f:4b:7c:b9:73:8c:f2:b7:6f:e4:26:a8:d5:be:33:
d7:b3:f7:3a:1c:c8:86:eb:08:dc:c9:7f:2d:71:e0:65:cf:a0:
99:6a:f1:1e:13:64:02:5c:07:60:ed:ae:16:f1:79:7e:14:42:
09:81:18:0c:7d:63:84:e0:b0:ca:4f:3f:b8:bc:66:5d:20:17:
c5:12:89:9b:3b:55:f0:7f:27:88:a3:79:14:74:11:ef:fb:07:
43:24:33:2b:b9:f4:42:8b:bf:63:26:74:04:c9:9d:c2:86:39:
17:cb:ec:d6:70:2a:ab:c6:db:10:8d:6d:94:18:c8:29:6a:1f:
04:fc:46:64:a0:6d:11:e0:65:67:3d:22:69:c4:29:98:07:66:
e4:13:b7:5b:73:2b:6e:54:af:06:3f:1b:7e:ef:35:4d:4f:ae:
05:59:70:9f:96:84:a5:65:d9:b6:05:99:8b:bf:d2:c1:2f:7e:
b4:ef:47:d8:ac:54:1c:e5:ef:77:d5:d8:cc:6a:f2:1e:61:f6:
ee:d8:0f:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:10:03 2025 by rpki-client