Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/855e35-87cc-448e-b7b7-07cb22bf424d/1/0rV_WXgvlBtdLrPUKG1ZEbF54AY.mft
File: 0rV_WXgvlBtdLrPUKG1ZEbF54AY.mft (raw, json)
Hash identifier: CTP2knjeqIis+rlpmCuzcEul0Ih1tKNRcEjlvKJoq6o=
Subject key identifier: 39:96:EF:F3:67:2B:7C:18:81:76:FF:DB:7F:57:9E:9E:A7:99:5A:57
Authority key identifier: D2:B5:7F:59:78:2F:94:1B:5D:2E:B3:D4:28:6D:59:11:B1:79:E0:06
Certificate issuer: /CN=d2b57f59782f941b5d2eb3d4286d5911b179e006
Certificate serial: 019A4DE1668BAA5172CCC6363019D8C93878
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0rV_WXgvlBtdLrPUKG1ZEbF54AY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/855e35-87cc-448e-b7b7-07cb22bf424d/1/0rV_WXgvlBtdLrPUKG1ZEbF54AY.mft
Manifest number: 170A
Signing time: Tue 04 Nov 2025 08:00:08 +0000
Manifest this update: Tue 04 Nov 2025 08:00:08 +0000
Manifest next update: Wed 05 Nov 2025 08:00:08 +0000
Files and hashes: 1: 0rV_WXgvlBtdLrPUKG1ZEbF54AY.crl (hash: +iBrttPwYyaVDnFxlwFnQAemmRzCvZSRGT91AZMNYwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/855e35-87cc-448e-b7b7-07cb22bf424d/1/0rV_WXgvlBtdLrPUKG1ZEbF54AY.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/855e35-87cc-448e-b7b7-07cb22bf424d/1/0rV_WXgvlBtdLrPUKG1ZEbF54AY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0rV_WXgvlBtdLrPUKG1ZEbF54AY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:66:8b:aa:51:72:cc:c6:36:30:19:d8:c9:38:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2b57f59782f941b5d2eb3d4286d5911b179e006
Validity
Not Before: Nov 4 08:00:08 2025 GMT
Not After : Nov 5 08:00:08 2025 GMT
Subject: CN=3996eff3672b7c188176ffdb7f579e9ea7995a57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:9d:5a:c0:73:f0:ac:e1:3d:45:81:a1:15:b4:
18:5a:89:e8:a4:0e:ce:ef:1b:0c:26:a1:1d:1a:84:
06:f8:ed:b3:ea:43:af:5b:50:90:71:8b:be:e9:d8:
05:2a:ff:82:d3:56:33:d0:43:29:3d:3a:c2:ee:15:
0f:cf:9b:65:ba:49:03:39:3f:b3:40:86:98:69:76:
b2:23:aa:61:20:32:f6:bf:e9:f1:22:a9:9f:35:67:
78:df:ac:1f:de:34:c3:81:58:9c:56:34:29:2b:05:
8d:bf:f4:02:a7:8b:d6:21:0a:66:79:f0:9c:45:fc:
b0:5e:24:ad:4f:25:4b:89:f8:25:a9:d4:df:ff:d2:
1b:dd:bc:b8:c3:83:8e:84:f9:0b:e1:0f:05:23:3b:
e8:7a:1d:a8:54:4a:d2:08:55:11:84:76:b0:1e:70:
fc:bb:66:01:61:7e:40:c6:8c:fe:1d:2a:78:ad:60:
02:e7:3e:f2:ee:ef:d5:0f:70:8c:38:47:0d:e3:fc:
37:70:89:5f:b9:65:e5:f6:bb:ee:5f:b3:16:27:28:
c1:bf:21:c5:ae:ba:92:3f:7e:8c:d8:61:0a:80:9c:
dc:8a:ab:eb:8c:2f:6c:94:ab:84:e7:08:94:23:16:
5e:28:21:16:00:87:1b:eb:4a:80:a8:7a:4f:e7:a3:
f2:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:96:EF:F3:67:2B:7C:18:81:76:FF:DB:7F:57:9E:9E:A7:99:5A:57
X509v3 Authority Key Identifier:
keyid:D2:B5:7F:59:78:2F:94:1B:5D:2E:B3:D4:28:6D:59:11:B1:79:E0:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0rV_WXgvlBtdLrPUKG1ZEbF54AY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/855e35-87cc-448e-b7b7-07cb22bf424d/1/0rV_WXgvlBtdLrPUKG1ZEbF54AY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/855e35-87cc-448e-b7b7-07cb22bf424d/1/0rV_WXgvlBtdLrPUKG1ZEbF54AY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:5f:00:96:fc:c3:8f:ea:99:92:b0:43:84:2a:5e:92:51:14:
ac:de:0f:75:4e:77:66:14:67:6e:a8:93:06:09:3f:2d:48:97:
3c:04:29:d8:72:ed:a0:99:26:dd:ad:52:e7:2e:32:77:c9:53:
80:74:7f:45:66:ad:f4:62:f5:fb:68:3d:e6:89:46:19:30:05:
4d:d5:d7:e2:01:a1:47:72:82:1d:23:f6:64:b1:73:32:a2:c5:
4b:d8:ba:55:0a:14:19:91:ee:4f:fa:10:7b:83:65:60:6e:76:
8d:a3:99:7d:5c:ab:bc:06:75:03:7b:8e:0c:4b:3c:66:8a:72:
c0:1e:be:92:2e:56:ab:33:d8:15:aa:2f:c4:79:a3:5a:54:e3:
42:7e:f3:18:15:7b:84:1d:f3:c6:48:dc:1e:38:97:24:d7:02:
74:af:3f:30:ca:83:29:d5:5c:cd:42:8e:e1:b1:89:02:23:fd:
ac:87:bc:bb:4c:19:b0:6d:ce:2e:fb:07:c8:d8:53:57:24:2f:
32:ff:7a:19:09:c8:0c:26:2e:d9:78:48:d2:ac:5c:04:79:bb:
16:2e:d5:27:4a:62:39:ce:7d:3a:ae:45:25:4d:c8:10:f7:91:
76:07:eb:42:6f:5f:4d:a6:6f:0f:52:bd:ff:cb:93:6a:cd:c8:
16:a3:2a:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:09:26 2025 by rpki-client