Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/db75db-25b2-43dc-aa12-ed001a2889ad/1/CtBt0nvZOjgNpMddGovwdoKP1ko.mft
File: CtBt0nvZOjgNpMddGovwdoKP1ko.mft (raw, json)
Hash identifier: S0YIf7X60dX1cv+liRDWIq7m+xUUhDz2QDwwL0Pqt3U=
Subject key identifier: C8:8C:2C:E5:1B:03:0D:76:D0:E2:EA:61:02:FB:05:53:B8:19:F2:6D
Authority key identifier: 0A:D0:6D:D2:7B:D9:3A:38:0D:A4:C7:5D:1A:8B:F0:76:82:8F:D6:4A
Certificate issuer: /CN=0ad06dd27bd93a380da4c75d1a8bf076828fd64a
Certificate serial: 019A4E4FAFADC31DD4F7C9A98BA4ACBDF016
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CtBt0nvZOjgNpMddGovwdoKP1ko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/db75db-25b2-43dc-aa12-ed001a2889ad/1/CtBt0nvZOjgNpMddGovwdoKP1ko.mft
Manifest number: 0A05
Signing time: Tue 04 Nov 2025 10:00:36 +0000
Manifest this update: Tue 04 Nov 2025 10:00:36 +0000
Manifest next update: Wed 05 Nov 2025 10:00:36 +0000
Files and hashes: 1: 24PmMpD-bHbUV8mxF_RlzuSRjLU.roa (hash: ohLVMvfqoqKO1xPsU0QfK7dKJZtv+ZBmQ14II/YiXms=)
2: CtBt0nvZOjgNpMddGovwdoKP1ko.crl (hash: Fjh0heZb6ylbZSnEMbst8GEZJfe964yUX/dsNX88+DA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/db75db-25b2-43dc-aa12-ed001a2889ad/1/CtBt0nvZOjgNpMddGovwdoKP1ko.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/db75db-25b2-43dc-aa12-ed001a2889ad/1/CtBt0nvZOjgNpMddGovwdoKP1ko.mft
rsync://rpki.ripe.net/repository/DEFAULT/CtBt0nvZOjgNpMddGovwdoKP1ko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:af:ad:c3:1d:d4:f7:c9:a9:8b:a4:ac:bd:f0:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ad06dd27bd93a380da4c75d1a8bf076828fd64a
Validity
Not Before: Nov 4 10:00:36 2025 GMT
Not After : Nov 5 10:00:36 2025 GMT
Subject: CN=c88c2ce51b030d76d0e2ea6102fb0553b819f26d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:34:aa:68:89:c6:a8:92:68:34:98:e6:c2:d9:
c7:4b:ed:46:29:62:61:67:69:f4:f9:9c:f0:53:72:
fc:23:9b:b8:ad:74:56:ce:dd:a0:59:6c:ca:65:2d:
58:73:87:93:7e:bc:b7:3e:c3:22:c0:9e:6c:c4:2f:
dd:3a:29:ee:17:60:c7:44:99:dc:3b:c6:1b:1b:28:
40:18:79:b5:dd:62:63:14:aa:52:3e:76:22:49:b1:
a3:33:8d:16:fe:f7:b9:ed:2e:0f:da:e5:57:86:f3:
35:8a:55:1b:73:6c:a0:47:db:43:70:65:e3:5d:05:
71:9f:d9:bf:51:af:43:0b:de:91:14:08:78:18:c9:
fa:86:76:bf:3e:94:8c:de:9f:1e:6b:ce:6e:e3:43:
7d:10:15:eb:0c:cb:d7:83:a8:82:bc:24:1a:21:e8:
60:bd:a2:c4:38:7f:e1:96:6e:be:99:75:a5:1d:df:
b5:24:e2:03:17:e9:25:bc:db:03:87:4e:58:f6:51:
5f:ae:07:91:ed:39:bf:5a:ae:4f:93:18:78:02:d1:
cc:4a:16:6a:b5:a8:7b:fe:8d:c0:8a:ed:4d:72:b9:
8d:96:17:06:8e:b1:38:56:21:3f:9a:2f:98:1d:fd:
dd:37:17:af:82:bd:90:5e:86:d3:02:77:a6:79:08:
a5:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:8C:2C:E5:1B:03:0D:76:D0:E2:EA:61:02:FB:05:53:B8:19:F2:6D
X509v3 Authority Key Identifier:
keyid:0A:D0:6D:D2:7B:D9:3A:38:0D:A4:C7:5D:1A:8B:F0:76:82:8F:D6:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CtBt0nvZOjgNpMddGovwdoKP1ko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/db75db-25b2-43dc-aa12-ed001a2889ad/1/CtBt0nvZOjgNpMddGovwdoKP1ko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/db75db-25b2-43dc-aa12-ed001a2889ad/1/CtBt0nvZOjgNpMddGovwdoKP1ko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:3d:0a:1d:27:1f:ef:2b:c5:20:52:ed:49:52:95:f3:9f:a5:
7f:46:f6:d4:7e:6f:74:ed:52:f7:b0:96:be:39:6e:25:c2:b4:
56:b1:2a:d3:32:72:d6:84:08:6e:88:d6:4b:ae:6e:a4:7a:18:
a7:dd:2e:c4:08:e7:a4:df:6c:eb:15:10:5c:b9:0b:fd:c2:d2:
ad:17:a5:51:a1:f3:69:97:37:f4:5f:2e:87:cf:4c:82:dd:01:
49:49:4b:fe:ad:69:72:2c:a9:d9:d3:e4:8d:12:44:38:c8:44:
38:a6:b6:6d:f8:c8:e8:c7:9f:7c:df:39:cc:d1:46:56:35:79:
9c:dd:4c:7a:6f:0a:00:97:52:0b:26:90:7a:79:2a:32:07:59:
1b:c1:ab:fb:f8:94:40:de:41:f0:1c:6e:7c:92:94:98:58:cd:
b2:c5:47:55:97:0a:d5:b4:ea:df:e1:cd:0f:27:13:22:de:c6:
81:d7:a8:a6:51:d2:d7:49:37:03:6f:92:f0:22:3a:e2:bb:d0:
ba:13:b2:e3:73:cc:d5:e4:5a:f5:e4:b6:0b:d7:d5:68:24:82:
af:45:74:0e:2b:53:57:21:65:19:c1:66:9c:8f:ee:70:3c:42:
51:10:66:67:6c:70:92:76:17:93:03:2b:57:ce:fb:40:49:85:
ce:03:e2:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:37:20 2025 by rpki-client