Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.mft
File: 0KHbRmz4CCBik9B-ZfISH-tJoz4.mft (raw, json)
Hash identifier: 3lXs6uwgOUgc1NM8/sXYEHBFW8jYJSUHQVMHeh7c1PI=
Subject key identifier: 89:63:61:CE:83:84:B1:FE:DB:80:15:9E:8E:CB:98:42:8B:7F:66:AB
Authority key identifier: D0:A1:DB:46:6C:F8:08:20:62:93:D0:7E:65:F2:12:1F:EB:49:A3:3E
Certificate issuer: /CN=d0a1db466cf808206293d07e65f2121feb49a33e
Certificate serial: 019A4E4F9BA28983BF4C080340830D89BE10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0KHbRmz4CCBik9B-ZfISH-tJoz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.mft
Manifest number: 14FB
Signing time: Tue 04 Nov 2025 10:00:31 +0000
Manifest this update: Tue 04 Nov 2025 10:00:31 +0000
Manifest next update: Wed 05 Nov 2025 10:00:31 +0000
Files and hashes: 1: 0KHbRmz4CCBik9B-ZfISH-tJoz4.crl (hash: uRu6NyMEho0Iyc7VYS4TGz9I5SqOenCRxquDXg+J3n0=)
2: wC7Ohmh2aveKOZ7_Cl4a1vLomLo.roa (hash: hPiN8yhRbkkwhBqX7IPJBoamojlDhfcUtcDIIbpri30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0KHbRmz4CCBik9B-ZfISH-tJoz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:9b:a2:89:83:bf:4c:08:03:40:83:0d:89:be:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0a1db466cf808206293d07e65f2121feb49a33e
Validity
Not Before: Nov 4 10:00:31 2025 GMT
Not After : Nov 5 10:00:31 2025 GMT
Subject: CN=896361ce8384b1fedb80159e8ecb98428b7f66ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:45:2f:77:60:ee:ff:06:ac:b2:ac:77:32:ff:
1e:bb:3e:f9:1e:69:53:55:5b:15:7b:c4:04:53:8c:
5f:42:66:48:66:6b:45:c6:08:2e:36:56:c9:e5:e9:
dd:df:f3:b0:d9:70:d7:8d:3f:4e:c7:26:15:0f:a4:
2e:98:75:ad:50:e1:81:7b:59:33:92:66:d3:96:a2:
fa:2f:ab:4e:e3:6a:0b:6d:80:2a:7b:a2:40:ca:3b:
2e:99:43:5e:9e:8b:fa:11:f0:36:a1:a6:15:a7:dc:
a2:c2:f7:ef:61:84:50:a1:20:13:fa:48:0f:66:25:
8d:9c:54:8a:f8:47:d9:3a:90:76:e5:43:2d:bf:75:
d5:99:28:d9:13:d3:92:96:e8:ef:3f:5e:44:d8:35:
7b:63:23:86:4c:53:73:1e:bb:95:3a:8e:b7:75:39:
0c:d0:5f:66:49:04:4b:a3:30:2d:2a:17:7c:3c:f2:
bb:e3:26:36:7f:59:e4:45:85:af:9b:dc:cd:a8:d5:
55:f0:4f:6a:7c:c3:3e:f7:a9:26:3c:43:6d:14:1f:
06:0d:88:58:7b:17:bd:80:61:d1:ea:a9:6e:4b:92:
7d:09:60:9f:46:89:cc:d2:81:00:24:11:61:97:ba:
10:d5:0c:25:f8:7d:4f:bf:05:33:53:0d:37:f5:d3:
5d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:63:61:CE:83:84:B1:FE:DB:80:15:9E:8E:CB:98:42:8B:7F:66:AB
X509v3 Authority Key Identifier:
keyid:D0:A1:DB:46:6C:F8:08:20:62:93:D0:7E:65:F2:12:1F:EB:49:A3:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KHbRmz4CCBik9B-ZfISH-tJoz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:6f:40:e1:66:d8:fd:5e:fa:60:a9:62:6c:bc:be:ed:12:80:
01:ba:de:ae:4d:5c:3e:b0:4a:2e:06:02:30:a3:13:e3:7e:53:
75:65:70:d6:8d:f6:14:ea:98:46:cb:48:e0:d5:84:50:5f:f6:
ba:dc:cd:b4:21:59:79:fe:16:89:29:c6:9f:03:d3:a9:73:a5:
4a:e5:9d:3c:2a:92:22:fa:87:f5:57:d9:92:98:74:3b:6b:4d:
b9:50:3f:06:51:7f:cb:7c:c9:50:e5:ac:1c:39:fa:bf:06:56:
85:68:e2:bc:66:6e:38:c4:34:bb:24:4c:db:e8:5d:b6:20:52:
5b:35:34:8e:99:45:77:b5:35:f5:43:98:cd:0b:a2:29:3b:4a:
f7:21:0f:ed:32:37:30:1c:7f:1c:d3:62:35:e9:c1:e4:97:04:
c6:36:db:f0:91:c9:b0:d1:55:d1:31:14:a3:7d:2e:89:a6:45:
85:f9:09:8d:ad:25:ff:06:5d:e1:dd:21:c4:23:a8:e4:08:b1:
36:1c:16:66:e9:1f:c2:01:c7:8f:02:40:6a:a8:72:85:8f:26:
ce:ba:5b:6f:f2:a3:6f:ae:ba:d4:d9:d3:3e:e6:d8:79:83:cf:
93:0f:2d:4e:22:9e:ea:42:f9:4e:74:28:c1:b8:63:0c:80:bd:
af:30:c8:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:23:32 2025 by rpki-client