Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.mft
File: 0FXguG8_USUFSGPPkmTmNG4Ju7c.mft (raw, json)
Hash identifier: oVKity3YOfD7s45nSgZvjXQKsMuc2zlSeBc7LGwismQ=
Subject key identifier: 3A:1A:96:97:B5:47:AE:EB:A8:72:40:8F:DA:71:65:E9:FA:4D:95:5E
Authority key identifier: D0:55:E0:B8:6F:3F:51:25:05:48:63:CF:92:64:E6:34:6E:09:BB:B7
Certificate issuer: /CN=d055e0b86f3f5125054863cf9264e6346e09bbb7
Certificate serial: 019A4E190799EEEC7878B266853D7DEECA23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0FXguG8_USUFSGPPkmTmNG4Ju7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 09:00:54 +0000
Manifest this update: Tue 04 Nov 2025 09:00:54 +0000
Manifest next update: Wed 05 Nov 2025 09:00:54 +0000
Files and hashes: 1: 0FXguG8_USUFSGPPkmTmNG4Ju7c.crl (hash: 1k38QOcyReJbzbn8SMkAm/C2IRUkaol1TGqpqeGACVY=)
2: FtQX4tz2PfNS1jDZrdtbiPoNYSU.roa (hash: M4MM/hQp8qhWYBPYsVJLPE9nJhVevNigPOSWligASH4=)
3: xpbeDPeraC0lsT88_DSzZTcvzFU.roa (hash: 7vANxALGvUHJgNJxUW1TqxLJ7J9U0tCgO5zgV2ERDWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.mft
rsync://rpki.ripe.net/repository/DEFAULT/0FXguG8_USUFSGPPkmTmNG4Ju7c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:19:07:99:ee:ec:78:78:b2:66:85:3d:7d:ee:ca:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d055e0b86f3f5125054863cf9264e6346e09bbb7
Validity
Not Before: Nov 4 09:00:54 2025 GMT
Not After : Nov 5 09:00:54 2025 GMT
Subject: CN=3a1a9697b547aeeba872408fda7165e9fa4d955e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:db:04:4e:82:2a:11:be:f3:ca:82:1c:20:58:
ed:57:15:91:fc:53:7c:b9:94:f3:9c:6e:e2:54:aa:
7b:7d:b6:8d:c8:21:47:d3:ef:4c:55:d6:f3:53:96:
b5:a8:62:01:52:df:b9:1c:27:96:89:60:90:57:8e:
0a:26:7e:9d:79:e7:f6:f9:b5:45:11:76:2c:cf:6d:
44:fe:46:1b:c2:76:39:36:ab:90:63:8a:76:1b:06:
e1:6c:89:4f:ee:81:0f:b6:da:d3:07:01:83:6d:d3:
4a:eb:b8:78:d7:a8:8f:ff:e3:d5:0a:a2:93:e8:27:
9b:b6:dd:20:e2:4c:a8:0d:03:c6:d8:3c:12:9b:87:
48:91:d8:04:4e:90:2c:12:04:4a:aa:89:ca:1b:35:
e2:58:c9:10:fc:0f:dd:a4:a5:06:82:4d:1f:16:9a:
77:74:9a:75:87:e4:d7:8c:a9:11:09:43:4c:ab:fd:
89:d3:83:3a:27:96:8b:63:47:77:6c:02:3c:2c:5d:
4b:28:9e:2e:9e:ff:dc:72:f7:4a:d3:70:fe:41:a0:
46:d4:e0:07:49:24:37:67:7a:cb:1d:79:cf:ab:34:
ff:47:d8:c2:96:c4:68:06:5a:58:25:88:44:29:e0:
70:61:78:b9:8d:4b:2f:db:35:f9:3d:1c:b5:00:bc:
26:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:1A:96:97:B5:47:AE:EB:A8:72:40:8F:DA:71:65:E9:FA:4D:95:5E
X509v3 Authority Key Identifier:
keyid:D0:55:E0:B8:6F:3F:51:25:05:48:63:CF:92:64:E6:34:6E:09:BB:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0FXguG8_USUFSGPPkmTmNG4Ju7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:40:8c:a5:d9:06:20:98:f7:35:40:a2:11:9f:d8:90:8b:73:
b9:8c:d5:12:b1:7d:57:02:87:3f:9c:3f:8d:e2:a8:06:99:dd:
e4:cc:55:b6:b5:ff:a1:f4:ed:05:dd:83:ba:11:be:c3:94:74:
a8:e4:74:d2:96:45:8b:10:a2:f0:23:44:59:51:ec:87:f0:99:
d4:f7:73:1c:7d:5b:31:03:d8:2d:b7:be:04:6b:9c:81:64:7b:
b8:54:be:41:ca:ae:e6:44:11:8f:9c:33:2d:24:b9:55:a4:0a:
dd:4c:ff:ca:a7:20:6a:f1:f9:9e:68:13:54:ed:b6:f5:0e:b8:
16:18:43:09:51:a8:d6:75:93:ff:b0:ec:60:8c:38:38:c3:0d:
5c:54:6f:b7:f4:dc:77:60:7d:ff:80:b6:16:a9:c1:64:7e:15:
66:76:59:d0:6d:54:49:e6:ce:b9:5f:7c:7b:5c:5f:d8:fe:90:
ac:05:40:33:13:d4:82:b3:36:5f:0b:4d:b7:61:e8:a3:ce:b8:
fa:6f:0a:cc:ca:26:54:3b:af:ad:8b:bb:f3:5c:b3:86:a1:e2:
92:43:64:74:61:1b:f0:a0:0e:1b:a7:f7:30:4a:77:65:ec:97:
1d:6e:ca:e1:d9:d1:80:2a:94:78:9a:63:4a:59:99:80:bc:f5:
9b:f5:97:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:05:21 2025 by rpki-client