Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/456a2b-8755-4bfc-8b6c-dbbc254d1c6c/1/0bDoaG99qx9kyA1DgsPFlJ_xHb8.mft
File: 0bDoaG99qx9kyA1DgsPFlJ_xHb8.mft (raw, json)
Hash identifier: Aohr1+cT4QSa49+al1F6sTIft2cb+D0X5liCmq4GlQ0=
Subject key identifier: 41:00:07:D3:15:4D:19:2F:89:3A:70:53:36:40:79:52:35:C2:1B:78
Authority key identifier: D1:B0:E8:68:6F:7D:AB:1F:64:C8:0D:43:82:C3:C5:94:9F:F1:1D:BF
Certificate issuer: /CN=d1b0e8686f7dab1f64c80d4382c3c5949ff11dbf
Certificate serial: 019A5150BDE01C733A5FC4A47C00625077A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0bDoaG99qx9kyA1DgsPFlJ_xHb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/456a2b-8755-4bfc-8b6c-dbbc254d1c6c/1/0bDoaG99qx9kyA1DgsPFlJ_xHb8.mft
Manifest number: 0564
Signing time: Wed 05 Nov 2025 00:00:37 +0000
Manifest this update: Wed 05 Nov 2025 00:00:37 +0000
Manifest next update: Thu 06 Nov 2025 00:00:37 +0000
Files and hashes: 1: 0bDoaG99qx9kyA1DgsPFlJ_xHb8.crl (hash: 4M8Q/usmg/Ue2f7x7oH1RrmCZbcaZS71eDzZiraj0UQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/456a2b-8755-4bfc-8b6c-dbbc254d1c6c/1/0bDoaG99qx9kyA1DgsPFlJ_xHb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/456a2b-8755-4bfc-8b6c-dbbc254d1c6c/1/0bDoaG99qx9kyA1DgsPFlJ_xHb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0bDoaG99qx9kyA1DgsPFlJ_xHb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 00:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:bd:e0:1c:73:3a:5f:c4:a4:7c:00:62:50:77:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1b0e8686f7dab1f64c80d4382c3c5949ff11dbf
Validity
Not Before: Nov 5 00:00:37 2025 GMT
Not After : Nov 6 00:00:37 2025 GMT
Subject: CN=410007d3154d192f893a70533640795235c21b78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d0:3b:d0:ad:0b:22:04:cc:5a:e4:16:cb:69:
39:4c:ec:17:c5:7e:3c:93:27:7a:c8:ef:2c:6c:fe:
20:1d:78:87:0c:08:12:7d:6f:20:19:ad:ab:3b:ef:
7c:21:78:55:bd:93:1b:fb:c8:c4:fa:b7:d3:8d:65:
49:0c:85:7f:2c:c9:31:7b:e2:9b:22:4e:e2:ac:c7:
42:3f:38:21:84:a2:70:1f:69:4e:5a:17:2b:8c:0e:
7b:1b:21:40:80:26:6b:10:e0:1d:61:19:3d:96:d8:
02:ce:bf:d6:67:bf:84:a0:ad:89:3a:ac:ee:e0:bd:
d7:c0:b1:8c:ac:78:ab:b3:7d:9f:85:d3:17:9b:6a:
b3:03:6b:db:84:80:1f:8a:be:26:17:ea:08:9f:01:
82:df:79:b4:59:d7:fc:f3:5f:cf:ab:bb:5f:88:e7:
22:c7:84:f9:c9:4f:86:9f:39:8a:35:ef:d6:86:32:
90:47:80:62:3f:bd:2c:2a:98:89:da:f9:4c:77:1d:
29:37:34:06:39:f8:85:8b:05:ce:f7:fc:f2:43:c9:
7e:24:9b:c0:85:c8:f3:86:5c:dc:6a:28:f3:b9:05:
b6:92:17:fa:e3:fc:81:6a:1e:52:ab:a8:6d:9a:28:
64:ea:a5:85:33:75:3c:42:5d:06:a7:03:d0:ee:5a:
bc:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:00:07:D3:15:4D:19:2F:89:3A:70:53:36:40:79:52:35:C2:1B:78
X509v3 Authority Key Identifier:
keyid:D1:B0:E8:68:6F:7D:AB:1F:64:C8:0D:43:82:C3:C5:94:9F:F1:1D:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0bDoaG99qx9kyA1DgsPFlJ_xHb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/456a2b-8755-4bfc-8b6c-dbbc254d1c6c/1/0bDoaG99qx9kyA1DgsPFlJ_xHb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/456a2b-8755-4bfc-8b6c-dbbc254d1c6c/1/0bDoaG99qx9kyA1DgsPFlJ_xHb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:4c:b3:81:bb:87:83:63:3f:68:52:77:a4:5c:34:ac:fd:41:
a7:c4:bf:75:95:e5:ec:61:e4:47:f2:cf:a7:df:eb:92:10:21:
98:9d:f8:32:51:3b:d8:64:10:f8:9b:0c:9c:42:3f:2b:84:e4:
e1:88:79:e4:2e:ac:9e:e6:92:fa:62:77:33:60:95:96:a7:43:
ed:cb:76:ee:d7:9d:39:f2:d5:dd:ac:c4:33:41:70:9e:96:4b:
78:2d:04:a4:9b:fc:4d:33:25:95:74:97:0d:de:cc:0f:52:e8:
5f:f1:6a:ae:a7:79:46:ed:95:1b:69:86:10:7d:ff:70:e4:c8:
44:06:29:84:2f:8f:c9:77:c6:87:a3:f2:7f:80:ce:e2:b7:da:
b8:42:eb:49:ab:34:e5:28:59:84:29:83:77:bd:19:6f:0f:ea:
3a:04:ac:52:d0:8f:d8:1b:ce:e1:1b:2e:c1:07:88:59:8c:d9:
3a:60:29:0f:e3:ce:17:51:00:0c:9d:b7:e2:a9:b6:fd:f6:76:
61:ca:6d:ac:f7:a7:64:9e:33:48:48:73:5e:a5:80:21:05:5d:
7b:be:4b:c0:8d:3b:2f:6b:51:47:26:fc:de:d3:cb:bb:40:0f:
5e:b9:d5:6b:b7:e3:83:14:2b:a0:b7:ca:c4:77:12:d6:d9:2c:
ab:79:53:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:35:41 2025 by rpki-client