Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.mft
File: 0gsI5gdmjgYFAITuN5KKHAsDVJI.mft (raw, json)
Hash identifier: FF680v/YrqPNOIHkRPgdtq6w4nYkIj+cESVlkZMNl0E=
Subject key identifier: 2C:FB:D6:B2:D2:97:B2:AF:44:A6:73:3A:55:DF:D3:0C:A1:E5:FC:9E
Authority key identifier: D2:0B:08:E6:07:66:8E:06:05:00:84:EE:37:92:8A:1C:0B:03:54:92
Certificate issuer: /CN=d20b08e607668e06050084ee37928a1c0b035492
Certificate serial: 019A4D3CD763E8EAFDEC7A2A65C8F9BBA3E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0gsI5gdmjgYFAITuN5KKHAsDVJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.mft
Manifest number: 043B
Signing time: Tue 04 Nov 2025 05:00:24 +0000
Manifest this update: Tue 04 Nov 2025 05:00:24 +0000
Manifest next update: Wed 05 Nov 2025 05:00:24 +0000
Files and hashes: 1: 0gsI5gdmjgYFAITuN5KKHAsDVJI.crl (hash: 98nXNJjOPysw5y7O315yRfr4vPSB1xHJfjjR5m/ANoI=)
2: 3bcszB4ipjOyzxEmMRx3Cb2Frg8.roa (hash: VCt09RErcTdOo8fIexLlVqTQrbVLMl5U72RInG7+sVI=)
3: QT2bGKmHREGB3-sqEAhjlcIYXXI.roa (hash: lsIhMN9LkDQx5Xr58fqlkjIVmBAb+8AMBjPiPSb4cQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0gsI5gdmjgYFAITuN5KKHAsDVJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3c:d7:63:e8:ea:fd:ec:7a:2a:65:c8:f9:bb:a3:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d20b08e607668e06050084ee37928a1c0b035492
Validity
Not Before: Nov 4 05:00:24 2025 GMT
Not After : Nov 5 05:00:24 2025 GMT
Subject: CN=2cfbd6b2d297b2af44a6733a55dfd30ca1e5fc9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:9c:aa:69:6b:16:e0:0f:1c:42:0d:3f:30:1b:
b8:e6:01:89:65:72:5a:98:13:8e:f7:46:c3:76:6d:
bc:e9:50:2e:99:08:a3:ea:0a:13:08:46:f9:8a:96:
13:c5:3f:60:69:07:6a:e6:38:3a:b5:d0:3d:c2:b7:
de:09:4a:e6:66:d8:b6:73:44:c6:72:ed:95:96:77:
bb:fc:20:9c:a8:ad:61:27:3b:b4:cf:55:ca:f3:7f:
4b:d9:df:15:04:19:7f:32:68:93:4f:12:cc:ac:73:
e3:ab:ac:e5:f4:88:1e:0b:ef:2b:80:f9:86:9b:2e:
76:4b:fc:42:e4:80:6f:33:66:12:aa:f9:56:de:8a:
cf:7a:9c:76:5a:6b:e7:41:f3:aa:54:71:e1:e2:db:
37:58:97:ca:9f:d9:9d:b5:0b:3e:bb:63:49:5b:ec:
77:eb:1e:16:42:4d:89:11:db:f3:ca:9d:43:2b:0c:
78:f3:89:66:a7:9b:10:be:7b:23:bf:9a:94:51:ab:
8a:90:95:59:65:bf:2f:0b:15:f0:8c:ac:d7:7a:a3:
d6:48:d3:dc:c6:a1:80:22:2f:a4:3a:c5:f9:4c:02:
20:22:9d:1d:93:aa:cb:02:9d:86:fe:34:18:05:ac:
fd:94:57:94:7f:a3:04:d7:a7:ea:7d:b3:93:71:7e:
34:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:FB:D6:B2:D2:97:B2:AF:44:A6:73:3A:55:DF:D3:0C:A1:E5:FC:9E
X509v3 Authority Key Identifier:
keyid:D2:0B:08:E6:07:66:8E:06:05:00:84:EE:37:92:8A:1C:0B:03:54:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0gsI5gdmjgYFAITuN5KKHAsDVJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:44:bf:e2:28:a9:a4:7a:14:78:23:58:08:fa:1d:34:1a:83:
8b:90:c6:6b:93:3c:eb:9d:78:0a:49:6a:ca:47:0c:c4:9c:49:
2d:34:95:2e:2a:80:22:3f:c3:6d:b3:f5:17:84:c4:17:96:ec:
8f:f5:7e:b0:8a:bf:0d:20:e2:94:af:d3:64:8a:3f:4b:8c:87:
ef:2b:d8:da:f5:bc:9f:4a:7d:6f:82:e9:93:22:97:3b:68:bb:
a9:01:1a:cc:83:05:06:39:6f:f2:e1:8b:f9:f0:3b:2b:2a:0b:
e8:b9:79:df:c0:f3:c4:57:25:ae:8c:39:4e:9b:37:9b:14:af:
8a:5a:f6:da:65:db:5d:71:9a:8a:7c:2d:43:7e:1e:c5:62:84:
7f:26:8c:70:47:c5:f0:d1:0e:1c:23:f3:e9:86:d7:ee:e8:b1:
e0:d7:90:43:1c:cd:3d:d4:7d:5e:c7:22:90:b7:55:f8:51:30:
ee:5a:dc:b0:55:10:74:7d:c0:01:bc:de:f7:0e:5b:a2:ff:ba:
96:06:80:a7:75:57:a4:6a:75:5f:6e:6c:74:f6:6b:be:88:bb:
b9:29:81:75:1f:04:cf:33:3f:1d:78:59:22:f6:b1:cc:8e:2a:
cc:19:fa:9d:13:61:18:5d:91:84:5e:0b:a3:53:e1:ac:92:ea:
f8:06:be:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:50 2025 by rpki-client