Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/a08748-8622-4e86-82ef-3bdaacb9d08d/1/0FWBRyuSqFqQyqHkfXIj14iuAUg.mft
File: 0FWBRyuSqFqQyqHkfXIj14iuAUg.mft (raw, json)
Hash identifier: O/RTcrmRGTuCusaRUxPspWrNG6O5mlmhlxhIBEpX8Lw=
Subject key identifier: 61:D5:35:08:6A:DE:89:A7:1C:53:78:B2:1B:76:E9:81:00:E4:2F:CD
Authority key identifier: D0:55:81:47:2B:92:A8:5A:90:CA:A1:E4:7D:72:23:D7:88:AE:01:48
Certificate issuer: /CN=d05581472b92a85a90caa1e47d7223d788ae0148
Certificate serial: 019A53E40C1D3E8C23F35295D1520B50DE8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0FWBRyuSqFqQyqHkfXIj14iuAUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/a08748-8622-4e86-82ef-3bdaacb9d08d/1/0FWBRyuSqFqQyqHkfXIj14iuAUg.mft
Manifest number: 0220
Signing time: Wed 05 Nov 2025 12:00:45 +0000
Manifest this update: Wed 05 Nov 2025 12:00:45 +0000
Manifest next update: Thu 06 Nov 2025 12:00:45 +0000
Files and hashes: 1: 0FWBRyuSqFqQyqHkfXIj14iuAUg.crl (hash: CdZGTOmULuKlZ5ogcvtVuZbVJDsXfrc+7c2m5P+BrIA=)
2: Tdi0Hj6bQsB2NE33pvFHyR4UnH4.roa (hash: QY4nN2KRRzSRBGH5wO5xXZyBIH3qA69otudacqD4SWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/a08748-8622-4e86-82ef-3bdaacb9d08d/1/0FWBRyuSqFqQyqHkfXIj14iuAUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/a08748-8622-4e86-82ef-3bdaacb9d08d/1/0FWBRyuSqFqQyqHkfXIj14iuAUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0FWBRyuSqFqQyqHkfXIj14iuAUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:e4:0c:1d:3e:8c:23:f3:52:95:d1:52:0b:50:de:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d05581472b92a85a90caa1e47d7223d788ae0148
Validity
Not Before: Nov 5 12:00:45 2025 GMT
Not After : Nov 6 12:00:45 2025 GMT
Subject: CN=61d535086ade89a71c5378b21b76e98100e42fcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:fc:8d:88:4e:f8:22:e3:87:bc:f3:e3:ce:2d:
b2:18:64:72:4d:9e:ae:68:02:64:2d:45:9a:a4:c7:
76:c3:c0:0a:7f:b6:ac:af:84:ec:0e:ac:1c:25:83:
18:8f:62:19:06:99:64:3e:a3:6f:e7:f9:c4:01:f8:
f9:a7:3d:1e:42:62:a7:ea:87:4c:6a:72:67:86:49:
3b:f6:30:4a:97:0c:18:4a:ac:8f:de:21:e5:22:6c:
c7:ca:1e:02:0e:dd:d5:d9:ad:58:b4:2b:fa:84:d8:
99:89:1b:34:f8:b5:bb:ec:76:b0:c0:15:5b:fd:82:
de:af:fb:09:cf:01:f0:d3:db:de:3e:8d:6c:ba:00:
71:d8:62:ba:a8:26:21:27:78:12:f0:76:f8:89:74:
27:20:c1:e1:e7:fa:97:7b:4e:ae:c8:9e:9a:4d:4f:
71:ac:95:dc:34:5a:b7:4a:92:45:1a:67:76:d1:1a:
7d:a6:45:e1:40:45:e0:e8:e5:a1:3f:35:f7:b4:18:
61:96:54:ed:b5:b6:5a:74:4c:4f:9a:67:e3:63:e2:
f8:3a:81:ec:7c:56:1c:9c:79:2d:21:54:ac:e4:9d:
3e:2f:b7:f3:aa:18:31:5c:bc:2a:8b:96:4d:e2:aa:
17:48:44:04:f6:e6:7e:8f:a3:d5:ee:a0:5d:70:cf:
ff:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:D5:35:08:6A:DE:89:A7:1C:53:78:B2:1B:76:E9:81:00:E4:2F:CD
X509v3 Authority Key Identifier:
keyid:D0:55:81:47:2B:92:A8:5A:90:CA:A1:E4:7D:72:23:D7:88:AE:01:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0FWBRyuSqFqQyqHkfXIj14iuAUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a08748-8622-4e86-82ef-3bdaacb9d08d/1/0FWBRyuSqFqQyqHkfXIj14iuAUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a08748-8622-4e86-82ef-3bdaacb9d08d/1/0FWBRyuSqFqQyqHkfXIj14iuAUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:35:70:f9:c4:7f:66:79:0f:5f:63:e4:2b:82:3f:34:56:bc:
15:d2:7b:cf:d9:33:4d:5c:d1:46:12:0b:70:c9:26:24:d8:ed:
4a:e3:e6:38:ad:f4:66:0a:f3:7d:c0:e5:6c:fa:79:96:87:08:
43:d2:1d:bc:5d:ef:57:84:f5:3b:2f:26:73:92:6a:ed:db:80:
97:6e:a8:cf:6c:58:52:fe:39:ad:ae:3d:03:2a:38:d4:49:3c:
ba:08:49:ac:40:d3:ca:69:9c:a5:db:f4:29:07:34:7f:5f:ce:
7f:38:6e:69:4d:ef:d0:99:12:8b:5e:d4:89:8d:e2:27:57:65:
d6:56:db:15:e9:c3:2b:57:14:8b:f8:c3:36:56:6f:c6:27:62:
f6:ce:b2:df:bf:e9:45:28:b0:f4:e4:74:58:57:af:f8:59:70:
5b:c6:ae:55:9e:a9:aa:46:6d:f6:cf:c3:0b:12:ad:aa:50:a5:
23:a9:a0:32:60:05:2e:e1:8c:f0:71:33:94:cb:1e:2f:6b:82:
79:33:2a:79:8e:48:31:bb:54:f1:dd:50:60:66:c9:cd:7a:04:
d9:60:66:1f:eb:e2:56:ff:9f:90:84:5c:fb:c4:93:aa:92:fc:
5f:d3:06:d0:8f:d2:03:3b:8c:05:43:f8:73:45:c9:4a:bb:4c:
47:a1:49:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:51:59 2025 by rpki-client