Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.mft
File: 0cSRMJSiEmjHOmdlOjc41z5cWac.mft (raw, json)
Hash identifier: GRSUZXWtX7EOOxOtUgvhRHQxEPSexARLmaurIV3GliY=
Subject key identifier: DC:E8:F8:2C:88:E3:F7:7B:BA:2D:A9:1C:A8:D8:3F:F6:6C:15:4B:91
Authority key identifier: D1:C4:91:30:94:A2:12:68:C7:3A:67:65:3A:37:38:D7:3E:5C:59:A7
Certificate issuer: /CN=d1c4913094a21268c73a67653a3738d73e5c59a7
Certificate serial: 019A50E2F652ECAC8EBB58CF8361D89DF91E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0cSRMJSiEmjHOmdlOjc41z5cWac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.mft
Manifest number: 15E7
Signing time: Tue 04 Nov 2025 22:00:42 +0000
Manifest this update: Tue 04 Nov 2025 22:00:42 +0000
Manifest next update: Wed 05 Nov 2025 22:00:42 +0000
Files and hashes: 1: 0cSRMJSiEmjHOmdlOjc41z5cWac.crl (hash: 2NzquX7NKWLlPNI2eOFrsKzZ9/6iEoCA/IQCy4ssswA=)
2: FIvNNxujkeosaQmK-8zL99U8I-8.roa (hash: xdptKNwYHkOXesPFH1LxyuhIbU4UE4ZRfmuf1MyhTcI=)
3: Z5fcF5W7KXTPN2HuxSQd8ZQH4aQ.roa (hash: KQQ09ojl8xnv8sB90M9HtEN2nEY3TEzVcMAwOp9asR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.mft
rsync://rpki.ripe.net/repository/DEFAULT/0cSRMJSiEmjHOmdlOjc41z5cWac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e2:f6:52:ec:ac:8e:bb:58:cf:83:61:d8:9d:f9:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1c4913094a21268c73a67653a3738d73e5c59a7
Validity
Not Before: Nov 4 22:00:42 2025 GMT
Not After : Nov 5 22:00:42 2025 GMT
Subject: CN=dce8f82c88e3f77bba2da91ca8d83ff66c154b91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:54:23:05:65:9a:3c:86:05:a0:95:c4:56:a7:
fb:a4:7f:98:9d:5a:78:f0:ba:86:14:19:a1:8b:eb:
fb:73:a8:6e:96:38:4f:09:c0:ca:4c:75:08:1e:49:
4f:fd:67:e1:4f:e5:78:af:7c:a3:a6:ca:f1:8c:aa:
30:cb:42:7b:08:77:79:8b:09:45:60:f4:ac:1d:dc:
5b:fa:1d:a7:02:1f:01:af:43:85:57:8b:c0:5c:cf:
9f:97:ed:75:e1:14:29:09:aa:9f:19:a3:33:d9:bc:
f7:f2:a6:c7:b8:c6:aa:49:6d:88:15:80:c8:a0:90:
48:2f:81:ee:39:66:77:f0:37:79:49:2e:f7:24:92:
97:d9:44:97:e1:28:17:39:03:14:3e:44:3c:88:bd:
d5:d9:d7:e9:18:50:c1:0b:26:39:32:cc:92:81:76:
0b:96:9b:81:0b:4d:15:af:b7:36:7f:83:02:79:ec:
c0:37:56:65:ea:5c:5a:b8:53:9d:ae:1c:7b:9e:54:
33:d4:d2:97:4c:36:ec:e7:5e:22:25:93:c0:d5:4e:
bc:9d:6e:92:1c:22:38:fa:cc:fb:3f:d1:02:6a:76:
93:15:33:a3:e2:59:5c:62:4b:90:7f:27:51:0c:29:
6b:4f:6d:bf:70:53:bc:64:79:2d:57:c2:49:9b:93:
83:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:E8:F8:2C:88:E3:F7:7B:BA:2D:A9:1C:A8:D8:3F:F6:6C:15:4B:91
X509v3 Authority Key Identifier:
keyid:D1:C4:91:30:94:A2:12:68:C7:3A:67:65:3A:37:38:D7:3E:5C:59:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0cSRMJSiEmjHOmdlOjc41z5cWac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:61:46:e1:11:c8:fa:61:13:31:06:98:b6:84:b4:49:35:6b:
26:27:4a:68:c6:89:6e:29:33:91:7f:ee:06:79:e3:ec:24:42:
36:cc:6c:37:e6:e3:e9:c0:91:82:72:2b:61:9f:de:35:7d:16:
62:31:d0:ff:46:1d:79:57:54:23:db:84:3e:3a:40:2c:28:08:
5c:a7:bf:7c:14:dd:b8:5f:3b:9a:4b:0e:c7:42:96:39:a3:17:
67:82:11:37:aa:9a:f8:bb:1d:f9:ca:9b:62:db:d7:ff:4f:fa:
8c:39:94:10:a4:76:1d:17:46:57:a4:db:de:9d:da:b9:df:af:
60:c5:9c:15:b8:1c:64:11:eb:e9:e7:d7:33:99:75:a6:ce:7f:
d1:6c:f4:ee:e6:d3:54:b8:c8:e1:4e:ad:6e:52:8d:8c:f8:ee:
74:97:cb:9a:ba:03:73:02:bb:99:41:d1:23:70:0a:ac:28:7c:
6a:8e:38:ce:97:db:60:3a:e6:5b:33:04:4c:cd:4f:47:dd:bc:
de:d6:03:be:2c:15:b9:fd:f3:ca:dc:63:79:99:6f:39:7d:73:
e8:90:8f:a8:6d:8b:e0:8d:a5:de:f3:96:4f:65:b7:f6:83:9c:
04:a5:54:24:e4:85:fe:c4:3d:b6:08:23:86:fd:24:fe:36:47:
98:3c:e1:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:53:09 2025 by rpki-client