Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/3a9a0b-d424-4eca-a938-92a877bb19f7/1/0rNq0o5SHtq0tN6jSaJ3ctSyp74.mft
File: 0rNq0o5SHtq0tN6jSaJ3ctSyp74.mft (raw, json)
Hash identifier: FSYjpObzlQ7+A7Jg5n4o4gLEod3uIfRfwQzt8TnSejs=
Subject key identifier: 09:75:0E:35:DE:41:E1:D4:9C:0B:FD:8D:C6:F3:31:46:32:40:39:A8
Authority key identifier: D2:B3:6A:D2:8E:52:1E:DA:B4:B4:DE:A3:49:A2:77:72:D4:B2:A7:BE
Certificate issuer: /CN=d2b36ad28e521edab4b4dea349a27772d4b2a7be
Certificate serial: 019A4F2B16BD1948231A60E223AA57A94E56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0rNq0o5SHtq0tN6jSaJ3ctSyp74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/3a9a0b-d424-4eca-a938-92a877bb19f7/1/0rNq0o5SHtq0tN6jSaJ3ctSyp74.mft
Manifest number: 1451
Signing time: Tue 04 Nov 2025 14:00:15 +0000
Manifest this update: Tue 04 Nov 2025 14:00:15 +0000
Manifest next update: Wed 05 Nov 2025 14:00:15 +0000
Files and hashes: 1: 0rNq0o5SHtq0tN6jSaJ3ctSyp74.crl (hash: JQrHBuJm2aE1snsl6NaDKB1zo9GxbSaQIj2qnNfAI5U=)
2: 5tz1cuLC3Spal7LSIEjI-Qlcl6U.roa (hash: XSoR4/ODhnGd0USG7NRxHx6V9kNwJuT3OUfa19EcNCE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/3a9a0b-d424-4eca-a938-92a877bb19f7/1/0rNq0o5SHtq0tN6jSaJ3ctSyp74.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/3a9a0b-d424-4eca-a938-92a877bb19f7/1/0rNq0o5SHtq0tN6jSaJ3ctSyp74.mft
rsync://rpki.ripe.net/repository/DEFAULT/0rNq0o5SHtq0tN6jSaJ3ctSyp74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:16:bd:19:48:23:1a:60:e2:23:aa:57:a9:4e:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2b36ad28e521edab4b4dea349a27772d4b2a7be
Validity
Not Before: Nov 4 14:00:15 2025 GMT
Not After : Nov 5 14:00:15 2025 GMT
Subject: CN=09750e35de41e1d49c0bfd8dc6f33146324039a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7e:61:c8:47:1f:37:f5:f4:4f:9d:77:9b:b2:
59:5e:e3:81:db:29:63:8b:76:fb:fd:58:56:90:54:
29:69:14:0f:89:c5:3a:0e:58:52:4b:ae:28:b3:98:
9e:94:24:9d:3f:24:55:bf:53:b7:2e:3f:2e:a0:f9:
f7:cf:01:3c:83:48:53:70:55:1a:aa:85:6d:f6:13:
52:a4:3a:f0:f5:66:65:1d:0d:44:e3:6b:f9:9d:80:
b0:46:1f:e8:9b:dc:23:3f:73:53:f6:e7:6e:25:6b:
cf:d7:fa:d4:b1:4f:b4:e4:20:cc:20:ae:f2:5b:c0:
df:12:8c:81:26:f2:9e:e4:be:03:6a:d7:73:d2:9d:
fb:b6:0a:d2:68:7a:b4:1c:a3:8f:91:a6:74:86:af:
1b:fe:d0:f3:2d:bd:88:23:ea:7d:c7:be:c8:33:93:
c6:73:f6:00:a3:c0:82:d3:58:c1:41:88:39:25:2c:
92:69:10:f4:4f:db:19:f3:41:da:0a:db:78:68:5f:
05:fd:20:82:f8:5e:04:ea:9e:00:d3:41:95:14:82:
83:fb:81:04:4c:e0:63:2a:3d:32:00:95:00:25:b1:
8e:c1:55:e6:eb:81:6b:e9:39:11:34:23:bf:96:dd:
33:a9:51:a9:99:20:61:0a:5d:51:ec:d7:6c:ec:b9:
88:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:75:0E:35:DE:41:E1:D4:9C:0B:FD:8D:C6:F3:31:46:32:40:39:A8
X509v3 Authority Key Identifier:
keyid:D2:B3:6A:D2:8E:52:1E:DA:B4:B4:DE:A3:49:A2:77:72:D4:B2:A7:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0rNq0o5SHtq0tN6jSaJ3ctSyp74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/3a9a0b-d424-4eca-a938-92a877bb19f7/1/0rNq0o5SHtq0tN6jSaJ3ctSyp74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/3a9a0b-d424-4eca-a938-92a877bb19f7/1/0rNq0o5SHtq0tN6jSaJ3ctSyp74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:58:4b:eb:a1:b9:a2:f5:0e:3d:70:6f:3e:f9:16:25:71:8d:
a1:86:bb:d2:9d:db:bf:a8:d4:0a:b3:7d:bf:60:9f:e6:69:29:
8a:3f:c6:5b:34:1c:d6:da:e3:dd:f3:32:31:1f:e8:7d:ca:22:
49:6f:da:9f:3f:e7:83:81:46:9c:52:18:39:a1:37:31:6d:80:
b2:1d:3c:34:b7:c8:7e:94:e6:1d:ca:a3:75:96:2d:07:59:fc:
da:a7:26:ea:4f:2f:94:63:7d:e5:1f:b7:7c:d5:5a:d6:5d:c4:
f2:c1:fc:b5:e6:ac:77:b8:b2:aa:1b:e0:01:58:dc:4a:91:2d:
50:b7:ff:48:8a:d0:36:62:72:4a:f5:cf:44:13:54:43:1b:e0:
c1:b8:4b:50:6c:2c:73:c3:c4:6b:10:3c:ed:18:21:80:cb:39:
4f:a9:3e:c0:73:11:f8:58:05:c9:2e:fd:48:1c:bc:09:ce:dd:
5d:27:3e:7d:21:24:8b:2a:1f:0c:52:bf:67:59:3a:35:d2:95:
92:5a:e9:ef:03:c8:d8:24:e3:87:f5:8b:8a:b0:51:7f:b7:99:
2b:e4:e2:c5:4e:87:86:a8:97:c0:89:e1:1d:45:79:11:60:73:
72:72:29:ba:82:d5:be:2c:0f:c7:fb:c0:39:51:62:bd:f0:6c:
29:91:97:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:42:37 2025 by rpki-client