Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/410d94-af78-4397-adfe-48d738c5947d/1/mdOi1vrWUWeOltJOJNGdcf44BAk.mft
File: mdOi1vrWUWeOltJOJNGdcf44BAk.mft (raw, json)
Hash identifier: ryEP2zsZQY7AJ4WKAGdbwKlLy/bhNV+YV2f8Jpq0sKY=
Subject key identifier: E0:96:40:1D:3E:09:F3:E0:6C:35:7D:BB:BA:82:27:A5:B1:B7:5E:0A
Authority key identifier: 99:D3:A2:D6:FA:D6:51:67:8E:96:D2:4E:24:D1:9D:71:FE:38:04:09
Certificate issuer: /CN=99d3a2d6fad651678e96d24e24d19d71fe380409
Certificate serial: 019A4DAB262B8ADFF12901FE0A2BDCA1BC63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mdOi1vrWUWeOltJOJNGdcf44BAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/410d94-af78-4397-adfe-48d738c5947d/1/mdOi1vrWUWeOltJOJNGdcf44BAk.mft
Manifest number: 0F47
Signing time: Tue 04 Nov 2025 07:00:53 +0000
Manifest this update: Tue 04 Nov 2025 07:00:53 +0000
Manifest next update: Wed 05 Nov 2025 07:00:53 +0000
Files and hashes: 1: WVEl02tR4FpSWGE0ahJdvTx1Yno.roa (hash: 5NNyoAtIIwqGJh3NNq7YS6x3xdzErX6ICXLZ0eVA/9g=)
2: Z259DsTig8t3A9cd7HAu8mMPpR0.roa (hash: JRmS+LkkqmTVluxufvzadoY4Pc8kUr0Ok9oaH67NvH8=)
3: _ltzxuGkz6znSaa7SgLi6XMBftU.roa (hash: +kNXhyoqNb3mbEFSERmsDLNGdx3dBqclzBGCcZo07A0=)
4: mdOi1vrWUWeOltJOJNGdcf44BAk.crl (hash: dXU6Qyrck898yGDtryP6xpcbwdPRbWjGVvKW55J96oA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/410d94-af78-4397-adfe-48d738c5947d/1/mdOi1vrWUWeOltJOJNGdcf44BAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/410d94-af78-4397-adfe-48d738c5947d/1/mdOi1vrWUWeOltJOJNGdcf44BAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/mdOi1vrWUWeOltJOJNGdcf44BAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:ab:26:2b:8a:df:f1:29:01:fe:0a:2b:dc:a1:bc:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99d3a2d6fad651678e96d24e24d19d71fe380409
Validity
Not Before: Nov 4 07:00:53 2025 GMT
Not After : Nov 5 07:00:53 2025 GMT
Subject: CN=e096401d3e09f3e06c357dbbba8227a5b1b75e0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:81:b4:0f:54:47:a3:13:e6:2a:2e:4d:72:c8:
b4:21:a3:3b:51:a4:22:21:5f:72:ed:2a:7f:40:25:
4d:c4:0e:c7:05:39:55:2b:2f:02:3e:48:67:14:c0:
7f:e5:1f:e2:fb:8d:6e:9a:ca:c3:b0:0a:f4:da:57:
9b:7d:3b:1d:c4:52:df:74:90:5e:b5:7a:48:cd:11:
35:a6:2c:cc:57:25:da:8f:99:a0:f7:f2:14:92:53:
11:5d:ea:2c:75:5d:ff:37:fd:bf:a2:62:db:ca:17:
f0:84:8d:6c:71:f3:0e:31:f7:ec:40:02:24:3b:f7:
e3:32:59:4a:80:bc:57:05:69:e6:c9:9a:94:13:b3:
3b:f9:ba:d1:dc:af:ff:ac:44:ae:24:fb:fc:a1:9d:
8e:42:df:77:bf:c0:69:44:75:56:82:ae:7f:20:48:
47:71:d3:d3:60:31:83:58:e8:ff:ab:1c:32:93:02:
61:75:4f:6b:15:45:6d:60:91:d9:91:fa:1a:ba:6d:
bb:54:c1:47:35:8b:c2:fb:05:23:9f:84:1c:99:f5:
21:76:9b:29:71:c7:7d:1d:81:d1:59:9c:24:e3:1d:
e7:24:0e:6e:e5:80:6e:fd:ef:f7:4e:fb:46:a0:39:
f4:55:c1:46:18:d0:98:93:9c:33:0f:1d:32:c6:63:
e0:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:96:40:1D:3E:09:F3:E0:6C:35:7D:BB:BA:82:27:A5:B1:B7:5E:0A
X509v3 Authority Key Identifier:
keyid:99:D3:A2:D6:FA:D6:51:67:8E:96:D2:4E:24:D1:9D:71:FE:38:04:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdOi1vrWUWeOltJOJNGdcf44BAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/410d94-af78-4397-adfe-48d738c5947d/1/mdOi1vrWUWeOltJOJNGdcf44BAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/410d94-af78-4397-adfe-48d738c5947d/1/mdOi1vrWUWeOltJOJNGdcf44BAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:3c:c1:0b:5a:95:90:fe:15:6d:05:d9:0d:9e:55:68:91:9e:
05:04:62:8c:5c:82:42:97:17:23:f1:9e:a2:ea:e1:50:48:36:
f7:1b:bc:33:7a:de:99:63:05:4e:e9:b8:03:e2:e9:38:22:48:
42:33:d2:3d:b1:6e:a1:d2:20:5f:a3:5a:5e:08:42:d7:0d:f4:
d1:7b:3e:8c:2f:9b:6e:13:23:4b:da:26:20:85:20:f3:2c:54:
be:cd:4c:55:af:13:a0:f8:35:04:06:07:7f:ba:08:cd:7e:74:
4d:27:70:9d:14:df:7b:4b:f5:2b:1c:77:52:48:4f:38:f0:c6:
20:f2:5b:ba:32:fc:6f:06:74:a4:04:15:d3:fc:20:77:ef:5c:
a4:43:c7:a8:35:44:12:bc:06:31:c0:4c:57:c3:ce:3d:dd:f5:
90:f7:04:a1:81:9d:a5:73:5c:3a:91:b4:fe:be:2c:e3:3e:56:
9a:32:d2:ac:97:40:71:87:1b:ca:6d:36:0d:a3:8a:1b:fb:e1:
d0:d9:b0:68:62:ae:97:f0:dc:1d:55:2a:f2:9f:a7:fc:a6:8f:
cb:34:10:53:be:25:dc:6b:5f:46:b8:0e:83:8c:ed:76:65:f5:
50:bb:d4:4b:a4:59:41:fd:c6:64:b1:1b:ae:aa:dc:16:69:1e:
74:18:8d:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:53:38 2025 by rpki-client