Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.mft
File: 0VK0wfXUhO78KxWX9FUAOrZUsFU.mft (raw, json)
Hash identifier: jrY1Skg0nxoIr9H2pVCgd8g+L+ccoIulyinZul5hm3o=
Subject key identifier: 7F:BD:2E:2E:6B:E2:68:03:36:88:24:67:EB:46:95:76:3B:BE:C3:04
Authority key identifier: D1:52:B4:C1:F5:D4:84:EE:FC:2B:15:97:F4:55:00:3A:B6:54:B0:55
Certificate issuer: /CN=d152b4c1f5d484eefc2b1597f455003ab654b055
Certificate serial: 019A4E4FDE4EE13CC3F3DC5B44F8DD54F7F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0VK0wfXUhO78KxWX9FUAOrZUsFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 10:00:48 +0000
Manifest this update: Tue 04 Nov 2025 10:00:48 +0000
Manifest next update: Wed 05 Nov 2025 10:00:48 +0000
Files and hashes: 1: 0VK0wfXUhO78KxWX9FUAOrZUsFU.crl (hash: JEKUhTBdsV+zYuxVtqHxr6MmEKe4V5iRMLnRsfGa0EU=)
2: IjvsoBUG9ktBfZ3shBFq4X7nJnE.roa (hash: ZOvBCy3Gp00mtEZBuX+IHu80U1fpsi2/qrYNX8CCasY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0VK0wfXUhO78KxWX9FUAOrZUsFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:de:4e:e1:3c:c3:f3:dc:5b:44:f8:dd:54:f7:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d152b4c1f5d484eefc2b1597f455003ab654b055
Validity
Not Before: Nov 4 10:00:48 2025 GMT
Not After : Nov 5 10:00:48 2025 GMT
Subject: CN=7fbd2e2e6be2680336882467eb4695763bbec304
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:82:e5:3b:13:9d:9a:7a:ad:cc:69:eb:30:b3:
9d:55:20:37:71:dd:15:11:bd:43:2c:4c:2a:6c:c5:
03:31:b1:9d:8f:58:4b:cb:6e:3f:fb:b5:0e:69:bf:
6f:9f:56:09:1f:2c:c9:71:0d:69:c3:f6:da:fb:ad:
7d:8e:15:68:15:d1:9f:ff:f5:3f:43:70:a0:0b:04:
da:ff:75:11:7d:5e:6c:54:5d:75:a7:d3:d5:b6:2b:
5b:c5:13:0c:43:81:70:ef:0e:d6:bd:a7:3a:c1:df:
3a:c6:6a:5c:a2:d7:a7:ad:97:a3:0b:c2:ab:ac:0b:
b1:2f:e8:76:d9:16:af:18:ea:63:f1:17:35:e0:67:
a5:23:8e:85:4d:57:e8:70:34:29:a2:c9:63:b7:08:
ad:20:aa:40:5b:a7:89:a8:34:11:8c:4d:b6:ee:20:
82:f7:b1:df:54:7c:6f:e3:3a:38:98:24:28:4a:ed:
d5:8f:9c:7e:2f:c4:ff:06:39:45:b1:fc:9f:c7:d3:
ae:18:49:80:0d:0e:4c:48:99:ad:93:20:23:c1:e9:
01:16:fc:94:6f:33:42:2d:27:5a:f4:25:82:c3:a0:
60:72:1f:d1:04:2d:71:62:29:5f:8b:eb:45:ec:51:
da:dd:cf:04:e8:74:37:1c:c8:03:a1:7c:36:fc:ec:
28:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:BD:2E:2E:6B:E2:68:03:36:88:24:67:EB:46:95:76:3B:BE:C3:04
X509v3 Authority Key Identifier:
keyid:D1:52:B4:C1:F5:D4:84:EE:FC:2B:15:97:F4:55:00:3A:B6:54:B0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0VK0wfXUhO78KxWX9FUAOrZUsFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:11:94:44:c3:b5:b5:e7:58:a4:fc:b5:ea:ac:5a:bf:62:b4:
93:13:35:cb:35:1d:32:09:f7:83:70:e0:da:de:79:7f:c3:bf:
fd:43:6d:e6:a9:c0:75:0a:49:b8:8c:60:0b:cc:e8:ad:0a:3c:
dd:1a:fd:64:b0:3e:04:62:d3:ee:53:2c:ec:19:f7:df:7e:f9:
e8:6d:7f:54:0d:14:58:9b:e0:fb:14:04:48:d0:5b:67:96:ad:
3f:95:9b:c4:6f:fa:18:10:03:96:e0:ce:75:02:ad:bd:e4:ed:
a7:a4:39:64:10:8b:3f:44:2f:d2:64:fb:04:7a:41:a9:64:f1:
59:62:00:4d:1e:5d:d5:76:3b:1b:36:88:13:7f:7f:be:20:eb:
22:69:1f:26:de:59:36:ad:94:56:e5:fd:92:02:b3:91:0a:1f:
97:14:57:87:ef:2e:b7:c9:1e:05:5e:8d:1a:4a:79:99:58:da:
95:c0:59:62:67:d5:14:fc:67:3b:92:a5:ca:ba:5f:8b:0f:24:
97:9d:55:d4:fc:84:3b:07:c0:cc:39:a0:be:b1:5a:46:78:7a:
f6:e5:37:a3:09:fe:c5:10:76:33:be:ae:c7:01:be:00:a2:30:
93:08:51:28:f9:d8:22:f2:8c:66:39:84:ba:e5:7a:7a:0d:17:
c8:a0:c2:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:23:09 2025 by rpki-client