Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.mft
File: 0jcICZ96IFVktfjgXSF70vrk3og.mft (raw, json)
Hash identifier: lorLjW3LJn9/g4RWO9etZn4n4S3ZJ2YiX2qE0C3KKUg=
Subject key identifier: CB:DD:4F:EF:22:90:F1:8B:F3:77:A0:40:45:3D:1F:47:01:A1:F1:08
Authority key identifier: D2:37:08:09:9F:7A:20:55:64:B5:F8:E0:5D:21:7B:D2:FA:E4:DE:88
Certificate issuer: /CN=d23708099f7a205564b5f8e05d217bd2fae4de88
Certificate serial: 019A4DE1E1E8627E663037E93E48329E4586
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0jcICZ96IFVktfjgXSF70vrk3og.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.mft
Manifest number: 16A0
Signing time: Tue 04 Nov 2025 08:00:40 +0000
Manifest this update: Tue 04 Nov 2025 08:00:40 +0000
Manifest next update: Wed 05 Nov 2025 08:00:40 +0000
Files and hashes: 1: 0jcICZ96IFVktfjgXSF70vrk3og.crl (hash: pvbUnacgsfUksBqG2qj9q7oQU7E1U3T3llTiFnhPmJE=)
2: MdxC1FpXyou6qJ-H7tes_6P5FSc.roa (hash: ZUSlUkca9mxVmO+TnlseEQ+rjBytm8k8h+/zCW79zek=)
3: u73MqPatc0TpxI-ub7E_BjZdR0A.roa (hash: Va28jPu1gwk8ly85dp8PE1WNkUFlIH8BlQN3xkzDe74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.mft
rsync://rpki.ripe.net/repository/DEFAULT/0jcICZ96IFVktfjgXSF70vrk3og.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:e1:e8:62:7e:66:30:37:e9:3e:48:32:9e:45:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d23708099f7a205564b5f8e05d217bd2fae4de88
Validity
Not Before: Nov 4 08:00:40 2025 GMT
Not After : Nov 5 08:00:40 2025 GMT
Subject: CN=cbdd4fef2290f18bf377a040453d1f4701a1f108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e1:b9:49:21:e2:5b:aa:d2:05:cf:cc:38:4e:
e8:e4:1b:6d:dd:f4:c5:f0:87:32:10:5c:d6:4a:1e:
16:eb:a6:61:10:3a:df:fe:ef:1d:3c:67:d4:73:31:
a6:73:a5:e5:88:55:43:e7:75:0f:47:68:b6:49:89:
ed:ff:2a:f0:ac:a5:47:1d:8b:47:8b:82:3b:2d:bc:
21:68:e1:83:99:a1:7e:11:af:ed:78:a7:a3:9a:42:
25:44:31:82:91:b8:3a:43:2f:e8:25:78:e8:30:66:
71:de:a5:c3:83:e6:9e:21:8c:8c:bd:1b:db:22:3b:
f7:3e:6c:85:66:77:d1:95:47:89:c8:eb:33:82:4e:
3f:5a:07:cf:28:40:48:da:9e:0f:6a:e2:94:c9:ce:
96:3b:b3:d8:d4:3c:8c:d1:1e:93:96:1b:65:0b:f5:
08:ef:91:65:9b:56:13:2e:da:45:ee:17:ad:a4:23:
c6:0b:fa:31:17:07:7a:28:30:ef:ce:fd:be:1d:a5:
72:08:80:89:6c:0b:1b:bf:ac:85:82:0f:6c:05:01:
4c:8a:42:69:40:74:1c:db:7a:f3:91:8b:40:8f:6e:
5c:50:80:0d:ee:b3:7d:38:77:88:af:c1:61:a4:f2:
3a:b3:2a:b4:2d:51:d2:80:e8:27:d5:7f:94:36:f7:
89:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:DD:4F:EF:22:90:F1:8B:F3:77:A0:40:45:3D:1F:47:01:A1:F1:08
X509v3 Authority Key Identifier:
keyid:D2:37:08:09:9F:7A:20:55:64:B5:F8:E0:5D:21:7B:D2:FA:E4:DE:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jcICZ96IFVktfjgXSF70vrk3og.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:83:bf:e5:6d:03:bf:ce:79:8e:a2:89:97:21:b1:be:fd:98:
e9:af:33:47:f6:e4:49:83:e0:e6:1d:9c:af:60:e6:73:ad:4a:
21:8a:73:7c:b0:e2:cb:67:b7:c9:f4:79:ca:b2:8b:95:92:9d:
d1:d1:f3:34:ca:90:1f:a8:61:b7:b8:a3:00:24:b3:17:4f:ac:
7c:68:21:7e:9f:1a:85:2b:c6:46:92:fc:2d:da:9b:3e:33:26:
15:07:92:27:75:8e:5c:aa:ed:01:1a:99:f9:92:37:8b:68:dc:
8c:11:aa:6a:c8:c0:0f:b1:b8:b2:93:9e:c3:31:2a:73:1a:e2:
88:62:c8:e7:5f:62:a9:71:21:96:45:cf:5c:6d:fc:00:90:09:
40:be:6e:cb:b4:86:5c:b8:25:ae:a4:7d:cf:18:5f:51:40:69:
86:a5:73:cb:d6:64:c3:82:91:b1:1b:da:e5:16:63:65:68:77:
5c:8a:4a:10:a0:bc:59:44:19:02:fd:e5:49:88:7d:46:8d:16:
dd:b3:ef:79:10:3b:ab:9f:8b:d9:70:8a:43:05:9d:72:58:1f:
c4:eb:7b:37:5c:7b:41:38:92:93:2e:cb:47:ac:b8:f8:a6:3d:
14:b6:75:9f:02:8b:99:d1:35:37:59:70:94:b7:16:1d:a5:6b:
6c:60:0f:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:05:34 2025 by rpki-client