Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7a1a62-e481-4a14-ad6e-35bff96da4c5/1/0cpnYQKGq3OPhs6TX99e1iDwLZY.mft
File: 0cpnYQKGq3OPhs6TX99e1iDwLZY.mft (raw, json)
Hash identifier: kw1FFhVyBMkWEytEfY9llQH84djquRJ25obsay8UrDo=
Subject key identifier: D1:7C:7B:2B:1C:A2:4A:38:3E:13:20:B9:DE:02:41:C9:65:FD:7E:A9
Authority key identifier: D1:CA:67:61:02:86:AB:73:8F:86:CE:93:5F:DF:5E:D6:20:F0:2D:96
Certificate issuer: /CN=d1ca67610286ab738f86ce935fdf5ed620f02d96
Certificate serial: 019A4E18F44157709E87052F4505EB64D936
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0cpnYQKGq3OPhs6TX99e1iDwLZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7a1a62-e481-4a14-ad6e-35bff96da4c5/1/0cpnYQKGq3OPhs6TX99e1iDwLZY.mft
Manifest number: 0605
Signing time: Tue 04 Nov 2025 09:00:49 +0000
Manifest this update: Tue 04 Nov 2025 09:00:49 +0000
Manifest next update: Wed 05 Nov 2025 09:00:49 +0000
Files and hashes: 1: 0cpnYQKGq3OPhs6TX99e1iDwLZY.crl (hash: CEmpp/cCzUffZbaItFxJSbXd4NYpOxtGWZIAJ+1mBwU=)
2: oFJn2DbPMhZS_Tmm-DmxNkpMyhE.roa (hash: Y5qFxScEcaicbV90jLVdvKg9QlaEEdGk/0uix/Osd6k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/7a1a62-e481-4a14-ad6e-35bff96da4c5/1/0cpnYQKGq3OPhs6TX99e1iDwLZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/7a1a62-e481-4a14-ad6e-35bff96da4c5/1/0cpnYQKGq3OPhs6TX99e1iDwLZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0cpnYQKGq3OPhs6TX99e1iDwLZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:f4:41:57:70:9e:87:05:2f:45:05:eb:64:d9:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1ca67610286ab738f86ce935fdf5ed620f02d96
Validity
Not Before: Nov 4 09:00:49 2025 GMT
Not After : Nov 5 09:00:49 2025 GMT
Subject: CN=d17c7b2b1ca24a383e1320b9de0241c965fd7ea9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d1:8e:bd:4c:c6:67:61:29:d9:1b:92:61:76:
f6:f2:69:ae:0d:3e:91:07:b0:a5:41:1a:b9:cc:85:
8c:24:be:a3:0e:c2:40:3c:b4:80:ea:dd:0d:92:6a:
83:cb:67:94:0e:dc:2e:3a:2b:70:58:8a:0a:f0:8a:
bd:f8:56:d5:5c:07:ee:82:1b:6b:f4:15:04:e3:ae:
36:bb:32:f4:75:a1:ee:97:65:87:bb:66:ae:70:7e:
f1:1e:f9:c4:8f:be:7a:0e:d5:1a:50:a7:55:23:58:
e6:18:cc:18:9b:84:17:17:75:2d:c9:3b:68:7a:80:
bf:0d:a6:ba:e2:bc:d1:f0:ec:17:91:c0:73:98:aa:
73:fc:b4:a3:ed:1f:b0:ec:08:9b:9d:f3:fb:2a:9b:
05:bf:da:8d:87:81:c8:71:d9:ca:71:59:f1:f5:7b:
c3:b8:5f:b3:91:aa:63:78:6f:71:c4:ad:ee:8d:be:
bc:cf:b2:a8:ac:84:d0:c8:05:e3:b9:be:13:2b:37:
a1:fb:1b:fa:6b:26:8d:dd:57:8f:02:ae:76:65:7b:
32:32:44:a9:78:5f:d7:2e:79:35:f2:2e:93:62:94:
6f:d2:31:59:67:cf:8e:8c:06:da:11:bb:ce:a3:6a:
b5:ad:ba:ee:5f:2c:cc:ef:fd:de:a5:75:63:99:3f:
f1:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:7C:7B:2B:1C:A2:4A:38:3E:13:20:B9:DE:02:41:C9:65:FD:7E:A9
X509v3 Authority Key Identifier:
keyid:D1:CA:67:61:02:86:AB:73:8F:86:CE:93:5F:DF:5E:D6:20:F0:2D:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0cpnYQKGq3OPhs6TX99e1iDwLZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7a1a62-e481-4a14-ad6e-35bff96da4c5/1/0cpnYQKGq3OPhs6TX99e1iDwLZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7a1a62-e481-4a14-ad6e-35bff96da4c5/1/0cpnYQKGq3OPhs6TX99e1iDwLZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:36:50:90:c4:43:36:55:fd:27:45:87:f5:51:15:c9:18:ec:
4e:fb:56:f2:9c:dc:d3:9d:45:05:bd:76:c3:74:dc:0b:4d:fe:
56:91:2d:1b:2c:53:b1:e2:38:2f:dd:5e:54:3c:c8:78:4e:ed:
3b:95:21:77:d1:41:63:8d:c2:b6:66:73:6c:e0:f2:ce:83:f4:
f5:4f:74:4a:ca:08:8a:41:d3:df:62:46:af:86:01:1d:38:a9:
c8:9b:d9:65:08:ab:7c:3d:01:09:a3:eb:62:0c:e6:2a:6b:d0:
01:d5:c3:c8:f1:bc:e5:11:79:de:97:9a:2d:a9:52:5b:73:b0:
0b:a5:c2:9f:dc:e8:8a:a5:e7:72:d2:c0:31:d5:5c:a6:8d:dc:
80:a7:37:80:ef:d2:22:1a:3d:4c:fb:33:76:9e:c3:f1:01:4c:
53:b9:20:a1:69:ae:81:1f:2b:7c:9e:1b:f5:b9:89:1c:6e:44:
78:58:52:23:94:17:2f:be:6d:48:de:cb:3b:ed:7a:b6:cf:c3:
0e:25:c2:4d:8e:dc:c4:06:9b:cf:39:9d:87:f0:6f:ec:b4:a0:
6d:13:be:9f:d6:b3:0f:4c:9d:9b:e5:99:17:48:be:e0:0b:b2:
ae:1f:e4:2e:9d:1c:78:18:39:d8:0e:10:0d:e7:e2:48:b0:52:
b2:95:b6:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:16:27 2025 by rpki-client