Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/40e5f4-d056-44f2-899e-2286b89e7a7e/1/V8dqgOwpEqVok1y1e2plDwPf2NI.mft
File: V8dqgOwpEqVok1y1e2plDwPf2NI.mft (raw, json)
Hash identifier: KwjZz+kGoWVOGeaFNExa9gdhc2q72dVgkKVvH9NnEFk=
Subject key identifier: 0A:FB:C9:49:DE:C8:00:F7:7F:4E:AA:14:1D:6A:39:15:9D:60:A2:C9
Authority key identifier: 57:C7:6A:80:EC:29:12:A5:68:93:5C:B5:7B:6A:65:0F:03:DF:D8:D2
Certificate issuer: /CN=57c76a80ec2912a568935cb57b6a650f03dfd8d2
Certificate serial: 019A4D3D3F49F029578169D91F089853B10C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8dqgOwpEqVok1y1e2plDwPf2NI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/40e5f4-d056-44f2-899e-2286b89e7a7e/1/V8dqgOwpEqVok1y1e2plDwPf2NI.mft
Manifest number: 0D38
Signing time: Tue 04 Nov 2025 05:00:50 +0000
Manifest this update: Tue 04 Nov 2025 05:00:50 +0000
Manifest next update: Wed 05 Nov 2025 05:00:50 +0000
Files and hashes: 1: V8dqgOwpEqVok1y1e2plDwPf2NI.crl (hash: OEDotiwJPsDqG4SeFenU3QJDpm9hsdD3TDIhW1oseWQ=)
2: c0WcDmEa-I3e6oejtEWp5xBEKhk.roa (hash: gv5nn6HuxLobRhPQtfW9QLB/XRSSApZbiTBp/n9p8eo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/40e5f4-d056-44f2-899e-2286b89e7a7e/1/V8dqgOwpEqVok1y1e2plDwPf2NI.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/40e5f4-d056-44f2-899e-2286b89e7a7e/1/V8dqgOwpEqVok1y1e2plDwPf2NI.mft
rsync://rpki.ripe.net/repository/DEFAULT/V8dqgOwpEqVok1y1e2plDwPf2NI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3d:3f:49:f0:29:57:81:69:d9:1f:08:98:53:b1:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c76a80ec2912a568935cb57b6a650f03dfd8d2
Validity
Not Before: Nov 4 05:00:50 2025 GMT
Not After : Nov 5 05:00:50 2025 GMT
Subject: CN=0afbc949dec800f77f4eaa141d6a39159d60a2c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:bf:9a:aa:20:49:ce:f2:0c:57:83:8d:06:6d:
6a:d9:55:ea:b3:af:8e:cc:ed:0d:c3:02:59:5a:e4:
78:d3:4e:4f:d2:53:e1:15:be:37:eb:dd:ea:95:e5:
66:a9:07:d0:65:96:5f:29:8a:1c:f9:49:bc:96:b1:
c8:54:40:de:5b:f2:50:c2:f2:0b:8c:58:ed:c7:b6:
eb:c8:5e:f6:58:08:e0:a4:cd:66:ff:f6:99:55:f3:
62:6c:5d:84:68:f6:c5:a8:34:f0:d2:d7:da:61:bd:
cc:82:77:a8:19:75:57:84:23:0e:cd:5d:77:0c:3d:
77:99:28:a5:8f:3d:b0:7f:8d:97:c4:ec:23:80:12:
35:89:32:87:4d:3c:2c:3f:c9:20:f2:6e:8d:95:f5:
b9:71:ed:c4:a9:b5:e1:b7:db:5c:f5:77:d1:dc:7a:
1a:87:06:d2:a4:09:af:40:31:13:f4:4d:69:c7:32:
59:52:37:c4:37:72:2b:f2:ad:24:6f:e1:ae:ed:d9:
c0:38:fe:40:62:49:97:2d:b7:01:19:03:46:b2:e6:
14:af:57:09:1f:ba:48:9e:e0:2b:7e:0e:5f:06:88:
89:b1:0f:3a:a6:8b:78:94:33:33:1e:8b:34:e9:3a:
2c:f7:05:7b:b8:70:e3:f0:fd:65:28:ec:65:ec:01:
c9:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:FB:C9:49:DE:C8:00:F7:7F:4E:AA:14:1D:6A:39:15:9D:60:A2:C9
X509v3 Authority Key Identifier:
keyid:57:C7:6A:80:EC:29:12:A5:68:93:5C:B5:7B:6A:65:0F:03:DF:D8:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8dqgOwpEqVok1y1e2plDwPf2NI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/40e5f4-d056-44f2-899e-2286b89e7a7e/1/V8dqgOwpEqVok1y1e2plDwPf2NI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/40e5f4-d056-44f2-899e-2286b89e7a7e/1/V8dqgOwpEqVok1y1e2plDwPf2NI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:8a:54:40:62:2e:2f:f1:f8:6d:26:4c:0f:a2:48:d3:99:8e:
90:38:e0:82:6f:fc:cd:fb:07:d7:bd:a5:d2:d7:4c:41:28:02:
62:16:4a:87:d9:e3:8f:32:6a:41:8b:da:19:54:27:ec:e3:45:
e4:eb:f9:4e:f6:7a:8d:34:b0:57:5f:83:ff:e6:72:43:88:fe:
a1:87:a4:44:e5:2e:26:87:55:c6:c1:9f:59:f7:7e:19:85:47:
c6:91:9e:6b:18:43:40:58:02:e6:fc:30:08:93:bf:0d:3d:3c:
2c:a4:21:35:b9:84:45:24:89:fa:de:8c:1c:51:d8:0d:30:de:
4e:c3:4f:80:8a:02:08:a9:7e:ac:c1:26:74:32:a4:60:b2:91:
aa:8b:b4:0e:9f:44:6a:23:da:be:49:35:a6:de:29:a8:82:28:
4e:09:0f:51:b2:40:23:c8:ad:72:48:23:07:ea:a5:e3:5f:c6:
3b:1f:c4:e0:dd:bc:07:9d:b5:fd:9e:82:8d:40:bd:8d:2b:72:
d4:8e:68:55:e0:f5:4e:42:b6:a3:d1:d0:3f:c6:ee:aa:cf:d2:
a4:cc:2f:c5:0e:11:2f:50:48:28:a6:3e:7c:1a:df:9d:7b:90:
ce:71:62:34:9c:a2:03:e8:32:1c:3b:47:94:65:05:38:b0:2e:
e5:03:52:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:40:59 2025 by rpki-client