Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/48ef27-5858-424b-add1-0f6455f05276/1/0vONSutNAojbuFTR6uC9itP4Qfo.mft
File: 0vONSutNAojbuFTR6uC9itP4Qfo.mft (raw, json)
Hash identifier: ggYvPeNkvBqApY8gHylz3EXt4hRlg3DJicyvb2tgOAM=
Subject key identifier: F0:95:2C:ED:AC:D5:53:DD:7A:62:52:01:DF:E2:7E:41:55:F3:46:B3
Authority key identifier: D2:F3:8D:4A:EB:4D:02:88:DB:B8:54:D1:EA:E0:BD:8A:D3:F8:41:FA
Certificate issuer: /CN=d2f38d4aeb4d0288dbb854d1eae0bd8ad3f841fa
Certificate serial: 019A4FD01DAFCF3569A4508EB41D8E872606
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0vONSutNAojbuFTR6uC9itP4Qfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/48ef27-5858-424b-add1-0f6455f05276/1/0vONSutNAojbuFTR6uC9itP4Qfo.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 17:00:30 +0000
Manifest this update: Tue 04 Nov 2025 17:00:30 +0000
Manifest next update: Wed 05 Nov 2025 17:00:30 +0000
Files and hashes: 1: 0vONSutNAojbuFTR6uC9itP4Qfo.crl (hash: KwMvM9hFffshWCVQ1EZ3Nouk1QgC3qjtPTmZV3Du52Q=)
2: ERnL-2TcZrO4tJF-sDDaVNlMYnY.roa (hash: +H0qLZUs9MIqoA3GO45JQCdAhU27Z3D/QbaTtfRGmIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/48ef27-5858-424b-add1-0f6455f05276/1/0vONSutNAojbuFTR6uC9itP4Qfo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/48ef27-5858-424b-add1-0f6455f05276/1/0vONSutNAojbuFTR6uC9itP4Qfo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0vONSutNAojbuFTR6uC9itP4Qfo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:1d:af:cf:35:69:a4:50:8e:b4:1d:8e:87:26:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2f38d4aeb4d0288dbb854d1eae0bd8ad3f841fa
Validity
Not Before: Nov 4 17:00:30 2025 GMT
Not After : Nov 5 17:00:30 2025 GMT
Subject: CN=f0952cedacd553dd7a625201dfe27e4155f346b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f0:bb:29:35:a8:43:af:d3:45:68:22:29:ae:
0c:f9:de:07:a6:da:77:92:9b:fd:47:14:5e:fd:7c:
7a:25:bd:40:03:12:83:72:ec:ee:d1:20:6a:4b:9e:
8b:4f:aa:15:97:01:6e:2a:37:49:f5:e0:7b:35:fa:
37:81:50:1f:12:2f:5a:30:9e:42:ed:ee:f5:a9:a4:
70:d0:f4:e7:b0:af:66:7b:b0:62:33:ba:91:83:a7:
49:a0:8b:70:f6:97:78:c7:b3:11:f8:9c:d1:28:36:
e8:12:c0:fb:43:d2:c2:f2:3f:85:e2:e9:03:ad:ce:
42:67:57:dd:16:a4:3b:0c:dc:6c:76:47:67:db:ea:
d8:0b:27:28:73:80:2e:15:31:b6:f2:8d:4d:ec:8b:
47:4e:04:cb:22:8e:3b:dd:f5:0b:e8:9b:f4:09:88:
c2:b2:98:8a:5d:0d:09:62:44:ba:79:11:41:98:82:
09:18:70:00:01:40:b3:41:5b:f5:2f:57:cf:58:c2:
d5:ee:0d:0d:a6:80:91:90:09:d3:c0:d2:7c:33:73:
7b:76:c3:b1:a7:47:88:d9:4d:2d:53:be:ad:3c:fc:
f1:68:5a:d7:c8:8a:4b:6c:07:ba:eb:e8:53:69:17:
7b:87:47:f6:71:08:df:bf:e0:8a:a9:31:01:ee:cb:
56:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:95:2C:ED:AC:D5:53:DD:7A:62:52:01:DF:E2:7E:41:55:F3:46:B3
X509v3 Authority Key Identifier:
keyid:D2:F3:8D:4A:EB:4D:02:88:DB:B8:54:D1:EA:E0:BD:8A:D3:F8:41:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0vONSutNAojbuFTR6uC9itP4Qfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/48ef27-5858-424b-add1-0f6455f05276/1/0vONSutNAojbuFTR6uC9itP4Qfo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/48ef27-5858-424b-add1-0f6455f05276/1/0vONSutNAojbuFTR6uC9itP4Qfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:8a:b2:39:ae:a7:f0:48:c0:dc:db:0d:22:cc:2b:39:29:b0:
74:b1:31:d2:bb:0e:b1:e0:00:6a:33:4e:04:fe:37:dd:cf:c5:
74:ae:a0:94:4e:fc:fd:bf:d1:2f:69:cd:a2:73:8f:99:ca:85:
8c:d3:b0:9b:28:22:7d:45:94:5b:63:f2:3e:82:10:92:ed:a0:
e6:54:b0:b4:b2:fa:c5:f0:72:a6:d5:a4:0a:b8:48:e7:cf:25:
7c:74:42:d3:3c:1d:21:1c:3f:5b:11:4a:ac:6e:8d:81:4f:fc:
88:8d:81:9a:23:b5:4f:37:ab:5d:63:8c:8f:cf:49:68:1a:f2:
eb:a8:fc:a4:c5:bc:b1:ec:f1:0a:fd:17:cd:51:d1:a3:e3:09:
4b:9a:00:f8:85:90:1b:69:ca:5f:9e:c5:a5:dd:2e:07:02:48:
ca:7a:ea:8c:f9:0f:27:b8:26:a7:24:c9:12:99:ed:c3:86:b2:
f4:4a:6c:ec:58:5c:ac:04:d2:1e:bb:5b:d3:fe:a9:80:6d:22:
df:f0:46:47:11:ea:40:92:10:e5:36:83:c3:a1:3a:2c:08:0f:
3d:d8:43:d6:9b:fa:0d:45:a9:8d:16:f4:78:b3:6e:57:2c:ae:
0d:f0:33:00:1e:01:09:16:b7:4e:e8:b9:e7:76:c6:9b:8b:e1:
ec:f6:de:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:47:39 2025 by rpki-client