Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/accd38-0ae6-4b43-a168-1152f4393020/1/0RIqXLBkP3NsfseWGAmiWThmjw4.mft
File: 0RIqXLBkP3NsfseWGAmiWThmjw4.mft (raw, json)
Hash identifier: EnOpX9KvkjWGePA9OVVy6ceUONVIgJF3zY/R9EDI4/U=
Subject key identifier: 1D:46:8C:EC:FE:D2:08:E1:88:A9:2B:16:27:D0:D0:BD:06:A8:DC:E6
Authority key identifier: D1:12:2A:5C:B0:64:3F:73:6C:7E:C7:96:18:09:A2:59:38:66:8F:0E
Certificate issuer: /CN=d1122a5cb0643f736c7ec7961809a25938668f0e
Certificate serial: 019A52D1A7F3CFC97A8C7506DBDE30A04D02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0RIqXLBkP3NsfseWGAmiWThmjw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/accd38-0ae6-4b43-a168-1152f4393020/1/0RIqXLBkP3NsfseWGAmiWThmjw4.mft
Manifest number: 170F
Signing time: Wed 05 Nov 2025 07:01:02 +0000
Manifest this update: Wed 05 Nov 2025 07:01:02 +0000
Manifest next update: Thu 06 Nov 2025 07:01:02 +0000
Files and hashes: 1: 0RIqXLBkP3NsfseWGAmiWThmjw4.crl (hash: wFZiJMFi8pQDdFlE9Fky7mK8/S8KpxnLO2Q+aRCCyOo=)
2: zKQIfOeURvANDMREU7yI_nE_KFw.roa (hash: rsODojes6psnJwHqpB6iZWFEwYShL6Rps2nkmwoPbsQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/accd38-0ae6-4b43-a168-1152f4393020/1/0RIqXLBkP3NsfseWGAmiWThmjw4.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/accd38-0ae6-4b43-a168-1152f4393020/1/0RIqXLBkP3NsfseWGAmiWThmjw4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0RIqXLBkP3NsfseWGAmiWThmjw4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:a7:f3:cf:c9:7a:8c:75:06:db:de:30:a0:4d:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1122a5cb0643f736c7ec7961809a25938668f0e
Validity
Not Before: Nov 5 07:01:02 2025 GMT
Not After : Nov 6 07:01:02 2025 GMT
Subject: CN=1d468cecfed208e188a92b1627d0d0bd06a8dce6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:95:ce:46:a4:ab:1e:91:d4:5e:40:df:0f:d8:
e4:d7:72:e9:1d:62:2a:f7:39:da:e0:ff:1b:57:67:
3e:16:80:49:06:83:2d:4e:aa:e3:4e:56:59:5a:9b:
f7:89:81:70:78:7c:d0:cb:b1:16:52:1f:1f:3e:a8:
fc:fc:c5:5e:8e:2b:32:26:9e:65:1d:c1:b0:95:1a:
c3:b4:20:1b:29:55:39:ef:3e:3e:e0:4e:3a:ad:08:
6f:e8:86:89:1d:66:25:1e:aa:99:21:2f:57:87:44:
65:b4:ab:40:fb:91:90:43:89:b5:6a:e3:09:3e:32:
a8:0a:47:bd:64:ee:b2:83:8b:dd:1b:9d:cd:76:87:
7b:58:20:e3:e6:78:1f:bc:b9:20:4f:9b:81:62:f0:
05:45:a9:a6:af:db:c4:a5:da:80:8a:d8:46:85:f5:
0f:85:15:40:44:c1:c8:90:0c:78:e1:a2:c6:4e:83:
a7:58:9c:a6:f7:51:0a:74:72:2f:4c:13:2a:23:fd:
0f:6e:6c:3f:d3:8f:20:82:b9:45:a7:2f:8f:72:6e:
2c:b9:01:23:f9:7d:98:35:0c:74:f1:17:ae:a8:e3:
f0:af:0c:36:3e:4e:7c:c1:db:0a:f3:e0:ba:d5:8b:
50:65:df:b3:64:ac:9f:ae:0f:b8:18:6b:f9:09:ac:
3f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:46:8C:EC:FE:D2:08:E1:88:A9:2B:16:27:D0:D0:BD:06:A8:DC:E6
X509v3 Authority Key Identifier:
keyid:D1:12:2A:5C:B0:64:3F:73:6C:7E:C7:96:18:09:A2:59:38:66:8F:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0RIqXLBkP3NsfseWGAmiWThmjw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/accd38-0ae6-4b43-a168-1152f4393020/1/0RIqXLBkP3NsfseWGAmiWThmjw4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/accd38-0ae6-4b43-a168-1152f4393020/1/0RIqXLBkP3NsfseWGAmiWThmjw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:1c:b6:6c:b4:d3:4a:ef:d6:87:1e:96:30:f7:27:8b:ce:5c:
3c:bb:b3:4e:da:27:3d:81:16:8e:0d:06:2c:2a:16:1c:5f:92:
b2:a2:3e:02:81:3c:88:67:7f:34:80:3f:7e:d9:a3:f8:0a:06:
f5:d5:91:8c:81:7c:f6:34:a4:9b:75:3e:11:74:f8:92:42:f4:
65:de:54:b1:08:59:b8:b7:b5:9d:ce:d1:36:74:4b:2f:52:61:
0d:4f:90:0c:53:c6:01:77:be:26:f5:42:99:74:4e:d9:62:2e:
a7:aa:16:f6:67:c2:c2:6b:36:eb:3b:97:9d:44:2b:bc:a2:24:
d0:6b:96:61:b2:27:92:ef:3a:58:a9:9f:e3:c8:78:3d:5e:bb:
de:f4:e6:9f:80:17:3d:83:bc:f8:03:18:71:91:d9:ec:51:82:
ca:e7:27:85:51:5d:82:68:49:1a:06:8a:12:7c:43:34:0e:a7:
66:9a:ac:28:bc:89:7e:22:c9:c3:e5:da:63:f8:54:ed:95:06:
d6:82:0c:94:c3:f7:9a:58:f9:e9:2b:fc:f4:2a:14:5c:f5:3c:
f0:b4:58:3e:4d:9d:95:47:39:e0:91:3d:19:16:5d:f9:45:4a:
c3:68:b0:5b:b7:ef:6e:7f:46:b2:5b:a5:e2:52:0e:c5:fc:e4:
d2:5b:9b:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:59:13 2025 by rpki-client