Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/a0ca76-e264-40f1-9d8a-065ca1f36310/1/0FsmI6OdVWxQtwRtNkR_tiGvl0o.mft
File: 0FsmI6OdVWxQtwRtNkR_tiGvl0o.mft (raw, json)
Hash identifier: ruu3UqxHVXn84yAdgJERBaeY+rbeazMDM/uyFeC9GWU=
Subject key identifier: 92:84:0D:FE:1C:2D:73:77:B7:82:9E:E2:BB:87:AF:0C:C5:02:50:48
Authority key identifier: D0:5B:26:23:A3:9D:55:6C:50:B7:04:6D:36:44:7F:B6:21:AF:97:4A
Certificate issuer: /CN=d05b2623a39d556c50b7046d36447fb621af974a
Certificate serial: 019A4E18B7641CAA6FD312863633B35A00F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0FsmI6OdVWxQtwRtNkR_tiGvl0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/a0ca76-e264-40f1-9d8a-065ca1f36310/1/0FsmI6OdVWxQtwRtNkR_tiGvl0o.mft
Manifest number: 1449
Signing time: Tue 04 Nov 2025 09:00:33 +0000
Manifest this update: Tue 04 Nov 2025 09:00:33 +0000
Manifest next update: Wed 05 Nov 2025 09:00:33 +0000
Files and hashes: 1: 0FsmI6OdVWxQtwRtNkR_tiGvl0o.crl (hash: r2i6rcXp1gYo+fB5kgzcbVrZbX6l4XRhS8swcFfQu14=)
2: YV4mxnesnEqsoXEgOeVxrXzaM2I.roa (hash: cQ3+oKEwuuiKGHKe3AeYP28TBOd1C3qmRH0uqKxLNb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/a0ca76-e264-40f1-9d8a-065ca1f36310/1/0FsmI6OdVWxQtwRtNkR_tiGvl0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/a0ca76-e264-40f1-9d8a-065ca1f36310/1/0FsmI6OdVWxQtwRtNkR_tiGvl0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/0FsmI6OdVWxQtwRtNkR_tiGvl0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:b7:64:1c:aa:6f:d3:12:86:36:33:b3:5a:00:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d05b2623a39d556c50b7046d36447fb621af974a
Validity
Not Before: Nov 4 09:00:33 2025 GMT
Not After : Nov 5 09:00:33 2025 GMT
Subject: CN=92840dfe1c2d7377b7829ee2bb87af0cc5025048
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a9:7b:62:1a:45:75:1d:46:a9:59:7d:13:cf:
94:47:64:37:c4:dd:eb:38:43:f4:af:d6:5a:40:32:
77:a8:75:80:ea:b7:60:50:d5:c8:06:07:d3:4b:81:
cb:72:72:88:9a:72:96:40:e5:8a:30:79:20:68:db:
d2:d8:c4:16:f7:db:8e:90:a9:87:b9:2e:fd:bc:31:
d2:64:8c:91:cd:a7:55:31:aa:4b:73:59:e3:1d:cb:
6b:86:b7:6f:94:7d:28:88:21:18:be:8c:ad:e0:91:
f9:e4:7e:09:a3:36:1e:42:88:d2:cf:75:88:21:39:
01:2d:25:33:1d:e8:c8:f2:c0:d4:a3:a8:79:4f:f0:
79:2a:39:c8:e4:ac:f8:de:c2:ca:3f:1a:43:ee:81:
0a:07:dd:b5:f0:ec:41:eb:c6:f8:f9:85:c0:86:f0:
1a:2c:74:77:5b:f4:00:16:ed:60:3e:75:6d:ca:e7:
15:96:e4:02:ec:d9:d5:89:fd:11:26:16:f2:74:45:
21:97:a7:10:15:80:5a:6a:54:9a:d5:a7:7c:66:5f:
0f:a7:5f:75:94:bc:f3:b2:d6:97:88:85:55:a5:09:
b6:62:21:71:da:e2:db:74:4c:0e:d8:71:46:ac:42:
ea:eb:30:0b:8b:1d:ac:3c:d7:af:62:ec:88:20:38:
be:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:84:0D:FE:1C:2D:73:77:B7:82:9E:E2:BB:87:AF:0C:C5:02:50:48
X509v3 Authority Key Identifier:
keyid:D0:5B:26:23:A3:9D:55:6C:50:B7:04:6D:36:44:7F:B6:21:AF:97:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0FsmI6OdVWxQtwRtNkR_tiGvl0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a0ca76-e264-40f1-9d8a-065ca1f36310/1/0FsmI6OdVWxQtwRtNkR_tiGvl0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a0ca76-e264-40f1-9d8a-065ca1f36310/1/0FsmI6OdVWxQtwRtNkR_tiGvl0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:44:a3:ed:6e:fc:3c:ff:91:2a:6e:4e:a0:00:48:2a:01:32:
38:01:06:d5:5e:a7:97:a9:20:22:b4:3c:3f:35:cf:b8:e0:8e:
b1:02:50:1c:70:44:bd:9b:4a:b6:2e:b4:28:08:8e:5a:c5:dd:
97:f7:72:2f:94:53:7b:d0:06:9d:04:f4:30:88:18:74:6e:8b:
7c:da:68:09:b2:d4:e3:f6:34:8d:b0:0e:14:de:a9:7b:dc:2e:
9e:7f:78:f7:bc:07:3e:a8:22:af:9f:fc:1f:12:59:a4:57:89:
97:c7:57:36:b7:a7:dc:15:f8:78:4d:33:47:ea:93:92:b1:5c:
53:d4:c4:b9:58:44:d5:43:bc:90:cc:e0:cf:f1:03:be:2c:79:
4d:42:c0:d7:36:f4:23:32:e3:a6:38:10:69:0b:07:d7:42:c4:
e2:d6:fb:52:b4:04:e2:51:ff:91:45:0c:3d:92:db:e4:ca:c0:
8a:29:c2:4a:99:ea:bf:82:59:de:4d:8e:8a:de:ee:69:0a:b4:
20:e2:d6:8b:ed:d2:f7:fd:ee:5e:11:d7:cd:10:a0:35:89:95:
4a:0e:aa:cc:48:62:ee:f0:f1:11:9e:c1:de:f4:66:41:23:db:
da:d9:23:a4:4c:58:8d:1e:d9:b6:5d:c7:b7:7b:b5:0d:3e:61:
12:7e:46:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:09:37 2025 by rpki-client