Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/56bfb4-b3fe-465a-b357-52abb53b7513/1/D0OG59TvxHLBH-nP7z0zCXSzP2E.mft
File: D0OG59TvxHLBH-nP7z0zCXSzP2E.mft (raw, json)
Hash identifier: ohFaW/frc/RtCsPT+DYqGi1cxZM63ZaMaFCzb5MiNqo=
Subject key identifier: 13:54:F7:EE:48:F8:DE:5A:D1:10:6F:2F:A7:92:20:44:21:7B:40:BB
Authority key identifier: 0F:43:86:E7:D4:EF:C4:72:C1:1F:E9:CF:EF:3D:33:09:74:B3:3F:61
Certificate issuer: /CN=0f4386e7d4efc472c11fe9cfef3d330974b33f61
Certificate serial: 019A4EF4F20C52E1A71DCB8E02AC691170E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D0OG59TvxHLBH-nP7z0zCXSzP2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/56bfb4-b3fe-465a-b357-52abb53b7513/1/D0OG59TvxHLBH-nP7z0zCXSzP2E.mft
Manifest number: 09AE
Signing time: Tue 04 Nov 2025 13:01:06 +0000
Manifest this update: Tue 04 Nov 2025 13:01:06 +0000
Manifest next update: Wed 05 Nov 2025 13:01:06 +0000
Files and hashes: 1: D0OG59TvxHLBH-nP7z0zCXSzP2E.crl (hash: l8jIukQlJRscrY7kdnN/p4Rs06i6gz6GW/ylbm68IpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/56bfb4-b3fe-465a-b357-52abb53b7513/1/D0OG59TvxHLBH-nP7z0zCXSzP2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/56bfb4-b3fe-465a-b357-52abb53b7513/1/D0OG59TvxHLBH-nP7z0zCXSzP2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/D0OG59TvxHLBH-nP7z0zCXSzP2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:f2:0c:52:e1:a7:1d:cb:8e:02:ac:69:11:70:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f4386e7d4efc472c11fe9cfef3d330974b33f61
Validity
Not Before: Nov 4 13:01:06 2025 GMT
Not After : Nov 5 13:01:06 2025 GMT
Subject: CN=1354f7ee48f8de5ad1106f2fa7922044217b40bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:72:9e:01:13:c0:27:cf:43:53:e5:c0:4b:f1:
47:e5:38:8a:a1:24:a6:11:d7:3b:8f:d2:e9:cb:c0:
1c:2c:2a:35:1c:fd:ce:b1:60:98:61:b4:3e:cf:cb:
8f:ac:f0:90:3d:57:b3:dc:21:02:2c:d4:40:f5:51:
71:ed:1d:f5:cc:b0:70:70:75:59:26:f5:02:e9:61:
94:99:5f:7d:83:ea:24:88:c3:6d:09:9d:e3:71:95:
0a:d0:e1:08:30:09:eb:d0:41:00:08:53:9e:48:19:
c4:08:d3:54:3f:1a:46:24:5e:f6:22:1f:07:bb:82:
db:50:ba:cc:da:53:0d:21:82:82:30:31:29:fc:41:
eb:69:bc:47:71:78:91:17:40:fd:86:a5:24:38:9e:
74:ea:a3:27:a9:1e:41:bd:f8:6e:dd:b3:db:77:f7:
40:03:a2:3b:e6:04:8d:08:53:7e:76:b3:a1:7a:b0:
59:4f:3a:94:63:46:1d:8b:2e:3a:51:0a:1b:11:95:
40:8e:1b:eb:9d:8f:de:e7:87:77:d3:c6:2f:85:cf:
97:a1:cc:a2:be:c7:bc:d1:a6:a6:14:bf:ca:c0:27:
41:3a:90:9a:b0:74:22:26:fc:36:af:cb:c2:06:96:
28:cc:67:68:7c:a5:1e:05:a9:c4:f1:3a:28:5c:15:
89:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:54:F7:EE:48:F8:DE:5A:D1:10:6F:2F:A7:92:20:44:21:7B:40:BB
X509v3 Authority Key Identifier:
keyid:0F:43:86:E7:D4:EF:C4:72:C1:1F:E9:CF:EF:3D:33:09:74:B3:3F:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D0OG59TvxHLBH-nP7z0zCXSzP2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/56bfb4-b3fe-465a-b357-52abb53b7513/1/D0OG59TvxHLBH-nP7z0zCXSzP2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/56bfb4-b3fe-465a-b357-52abb53b7513/1/D0OG59TvxHLBH-nP7z0zCXSzP2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:16:c0:fb:f6:e5:4f:e2:c6:db:bc:19:6d:7a:68:9d:1f:ec:
d4:b4:33:05:b5:97:e9:ca:52:56:a1:85:36:09:8d:86:2c:bd:
35:99:ce:a6:42:51:30:fc:bf:ad:2b:55:76:b4:1d:7b:53:2e:
fe:d5:e6:2c:73:88:77:89:25:6c:cd:08:4b:82:0a:0d:64:2e:
15:aa:fd:be:eb:a6:12:66:fc:19:90:9a:0f:e1:6d:f2:c4:e2:
61:59:c3:0e:3a:1e:11:45:2a:fb:41:51:04:19:eb:e5:9f:aa:
a4:cc:e2:b0:0c:95:04:2f:e8:b3:84:a2:17:e9:35:d2:54:aa:
24:c4:18:45:f6:7d:d3:8a:e1:40:08:46:4f:ca:24:67:f4:a8:
d9:04:66:d3:db:a0:23:9d:5b:13:ed:fd:03:4e:cc:74:f0:fe:
ba:e7:35:e9:50:12:c6:ec:c7:b0:45:d2:79:3e:b1:7f:a5:8d:
d2:17:38:e5:32:27:ef:f8:e8:f2:52:d1:85:2c:68:79:4c:7b:
e0:f8:8a:55:2b:a8:7f:73:ec:4c:fe:47:12:65:90:15:33:f3:
d8:6b:d3:b5:fa:e8:84:18:57:12:1c:16:62:52:18:6a:83:bc:
47:61:9f:69:4d:8e:10:29:18:1c:8a:2b:85:5e:12:d1:80:68:
9e:32:2c:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:42 2025 by rpki-client