Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/0vHIhC58-JGyNNOh4OLg73PoQqo.mft
File: 0vHIhC58-JGyNNOh4OLg73PoQqo.mft (raw, json)
Hash identifier: URzBXP5YZ7uXyAbv3XEN6KTygJ2KJ/3HOqxlt4GWXQM=
Subject key identifier: 82:7C:F4:74:F6:F5:E4:57:66:1A:26:C6:BB:B3:50:AB:77:74:65:3F
Authority key identifier: D2:F1:C8:84:2E:7C:F8:91:B2:34:D3:A1:E0:E2:E0:EF:73:E8:42:AA
Certificate issuer: /CN=d2f1c8842e7cf891b234d3a1e0e2e0ef73e842aa
Certificate serial: 019A4EF54A4DF4F9341D6B15E767126FCF73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0vHIhC58-JGyNNOh4OLg73PoQqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/0vHIhC58-JGyNNOh4OLg73PoQqo.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 13:01:29 +0000
Manifest this update: Tue 04 Nov 2025 13:01:29 +0000
Manifest next update: Wed 05 Nov 2025 13:01:29 +0000
Files and hashes: 1: 0vHIhC58-JGyNNOh4OLg73PoQqo.crl (hash: C7OnLYNoeivlhQj0SFQ28J7FF3AsHqzyF+qB+RwoeSs=)
2: l7vPco-uERFJMqFRkAMdbQ7Lr5E.roa (hash: TO5lGNkolgRHajeHI2wA6DsrdU/+GUsTcjWvGuJo2do=)
3: mizpW-CedPrysq20puaRplVzBas.roa (hash: ZhIE+FWiXGSht5bpIKov+Ga9kyrb4wRzjNebEuN3tlM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/0vHIhC58-JGyNNOh4OLg73PoQqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/0vHIhC58-JGyNNOh4OLg73PoQqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0vHIhC58-JGyNNOh4OLg73PoQqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:4a:4d:f4:f9:34:1d:6b:15:e7:67:12:6f:cf:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2f1c8842e7cf891b234d3a1e0e2e0ef73e842aa
Validity
Not Before: Nov 4 13:01:29 2025 GMT
Not After : Nov 5 13:01:29 2025 GMT
Subject: CN=827cf474f6f5e457661a26c6bbb350ab7774653f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:0d:9e:e8:0e:09:aa:a7:7a:e4:10:91:cb:9e:
fc:5e:49:2b:8f:04:60:d0:3c:4e:31:e8:e1:a7:01:
7b:44:4f:99:56:0d:c2:6f:2d:f3:e6:92:1d:c6:5d:
89:6f:b2:05:b4:60:67:d2:30:f9:90:ec:1e:9d:70:
19:ea:51:fc:26:fd:56:e0:ce:8b:2b:83:c7:8f:61:
08:49:30:ee:0b:d4:89:8b:c9:fa:d3:b9:82:12:d8:
75:cc:ed:e3:65:39:f5:26:ff:8c:59:97:5b:69:75:
3e:3e:be:09:cd:13:c1:6f:1c:f9:f4:92:03:2e:68:
cc:54:b0:00:48:dd:99:33:36:70:c8:40:3b:eb:dc:
0e:73:3e:cd:b9:f1:2f:bc:fd:cd:7d:89:a2:32:d2:
a3:6d:4b:11:73:0c:6f:ce:6d:ed:a1:ae:63:3a:5b:
a7:0c:4a:13:3a:54:93:8c:52:d7:b2:36:15:32:b9:
3e:d1:c3:b0:b4:e2:28:12:23:26:b2:e3:9c:34:07:
2e:47:72:f5:ab:9e:a9:56:44:28:0c:ed:15:30:cf:
6a:ea:b1:c4:d5:3e:61:79:fd:b4:25:3a:87:42:0d:
c0:0f:88:53:fe:56:c6:1b:ce:bb:8d:8b:f2:ef:e3:
b7:3e:fa:78:89:3c:f2:f4:a5:2b:59:86:67:ad:c4:
5a:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:7C:F4:74:F6:F5:E4:57:66:1A:26:C6:BB:B3:50:AB:77:74:65:3F
X509v3 Authority Key Identifier:
keyid:D2:F1:C8:84:2E:7C:F8:91:B2:34:D3:A1:E0:E2:E0:EF:73:E8:42:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0vHIhC58-JGyNNOh4OLg73PoQqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/0vHIhC58-JGyNNOh4OLg73PoQqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/0vHIhC58-JGyNNOh4OLg73PoQqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:50:85:36:e5:e7:98:bc:d3:f8:8f:bc:8f:c5:e3:4d:16:8a:
c9:05:80:74:d8:c5:03:c6:3b:57:8e:ff:54:ff:ff:94:6e:f1:
79:3a:ad:98:fd:0b:3d:36:ee:aa:68:bd:ab:2f:61:1c:cd:a6:
2e:6d:04:22:7f:c6:98:37:02:59:7f:a0:6b:a8:38:8a:3e:bf:
f1:37:c2:37:95:be:0d:99:b2:da:7b:e1:5a:67:56:32:da:d1:
96:4e:f5:23:52:3f:0c:98:33:c3:ff:99:27:c9:01:57:f8:c3:
45:5a:6f:d8:15:35:cc:69:90:39:21:8a:e7:f1:66:f8:2e:ea:
a0:d3:85:c5:8e:ed:c9:22:e0:37:f0:10:72:64:36:0a:8e:12:
92:71:86:35:de:f6:ea:84:4e:65:93:40:2e:61:23:45:5f:97:
4a:4b:a5:9c:f6:75:fc:b5:e6:09:7c:0f:f8:ce:b7:35:9c:b0:
17:bd:c5:5d:ef:35:d9:cc:bc:da:ec:22:07:45:33:4b:65:ab:
23:ed:3b:60:13:64:55:ae:5e:4b:22:cd:9a:7f:61:a7:f7:88:
1b:1e:f7:1b:6d:97:4c:aa:d6:35:3e:6b:0b:58:3a:e0:96:33:
ad:ac:32:f7:07:83:a3:16:cb:f7:36:65:10:f2:01:42:b8:1a:
dc:08:9f:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:46:23 2025 by rpki-client