Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/0p3Hkq38_ojHnnlY-_7FJWMLYvk.mft
File: 0p3Hkq38_ojHnnlY-_7FJWMLYvk.mft (raw, json)
Hash identifier: 7ZeOEZAju44895GJlT8Qke7V9XDH6NmqPm9oNm7LYLI=
Subject key identifier: 19:14:38:D3:4E:24:8A:C1:29:FD:50:B0:A3:D1:84:84:8B:38:82:54
Authority key identifier: D2:9D:C7:92:AD:FC:FE:88:C7:9E:79:58:FB:FE:C5:25:63:0B:62:F9
Certificate issuer: /CN=d29dc792adfcfe88c79e7958fbfec525630b62f9
Certificate serial: 019A4F61DCD26D0DD96D782601BB142BFEA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0p3Hkq38_ojHnnlY-_7FJWMLYvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/0p3Hkq38_ojHnnlY-_7FJWMLYvk.mft
Manifest number: 0B11
Signing time: Tue 04 Nov 2025 15:00:04 +0000
Manifest this update: Tue 04 Nov 2025 15:00:04 +0000
Manifest next update: Wed 05 Nov 2025 15:00:04 +0000
Files and hashes: 1: 0p3Hkq38_ojHnnlY-_7FJWMLYvk.crl (hash: mWrte4DSp3ZgjmjqeEGIQ/nE5J8Ne6lgE7b78SVqJP0=)
2: lPRYsXr9JuYhFsnWzjWNX4jmwLk.roa (hash: iBeGuJYtICJBlFiRT2Vx63Td8Xc0QnYIl7/YBwzr0yk=)
3: nse16AXrwM95FOL9jR_rmw-FBUU.roa (hash: CGc2Mm01WTMfgJYYXJTw2QH6yfxtC7+nYMl9iTzeZeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/0p3Hkq38_ojHnnlY-_7FJWMLYvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/0p3Hkq38_ojHnnlY-_7FJWMLYvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/0p3Hkq38_ojHnnlY-_7FJWMLYvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:61:dc:d2:6d:0d:d9:6d:78:26:01:bb:14:2b:fe:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d29dc792adfcfe88c79e7958fbfec525630b62f9
Validity
Not Before: Nov 4 15:00:04 2025 GMT
Not After : Nov 5 15:00:04 2025 GMT
Subject: CN=191438d34e248ac129fd50b0a3d184848b388254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a1:69:0c:0b:2e:48:d7:28:a1:c6:e6:c3:de:
2c:80:75:e8:00:15:82:c9:39:67:b3:eb:02:63:45:
88:88:d0:af:5e:a9:f4:a5:13:63:94:0f:82:32:13:
e6:83:d7:03:49:91:26:08:72:78:fa:18:21:e9:b6:
95:ba:f1:85:e5:f5:b0:22:74:7d:a2:4e:a6:fd:30:
ec:3f:03:59:82:9a:1c:13:38:fc:8e:f0:7c:e5:92:
7d:0e:3f:a8:0d:7a:80:53:e7:4b:3c:8e:94:1d:98:
ab:e1:98:5c:05:86:13:94:b9:2e:e4:03:d1:f2:4b:
cc:f0:c7:11:96:2f:94:12:31:02:8d:17:71:d7:8e:
aa:b0:45:26:d4:73:e3:05:47:b8:24:1b:af:66:1b:
d1:78:13:56:ea:e8:8e:b7:3f:6c:d3:06:ec:1d:cc:
3d:7d:71:10:f4:58:59:c7:ed:7e:6d:30:1d:2a:0d:
c9:a2:7e:7f:ab:29:95:8c:8a:4c:a3:10:1c:ec:a3:
25:a8:74:33:71:29:2b:2f:a1:5b:5a:59:18:ce:0d:
1d:eb:98:48:8c:a4:b5:8e:7e:93:21:ac:0a:bd:2a:
79:31:a4:98:f0:ac:c8:21:1b:c3:0d:69:a8:27:6c:
5d:9a:86:73:02:a9:7b:3f:3d:01:37:26:79:90:98:
3c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:14:38:D3:4E:24:8A:C1:29:FD:50:B0:A3:D1:84:84:8B:38:82:54
X509v3 Authority Key Identifier:
keyid:D2:9D:C7:92:AD:FC:FE:88:C7:9E:79:58:FB:FE:C5:25:63:0B:62:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0p3Hkq38_ojHnnlY-_7FJWMLYvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/0p3Hkq38_ojHnnlY-_7FJWMLYvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/0p3Hkq38_ojHnnlY-_7FJWMLYvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:5b:c2:8e:fd:19:a3:af:3f:90:cc:b9:43:36:df:70:c1:ca:
c8:67:bc:26:c7:35:64:a1:6f:0c:1d:95:1d:27:fd:72:67:50:
6c:4f:dd:b4:19:35:82:01:aa:3a:a6:b8:ad:a9:6a:e2:b6:e0:
ad:20:ac:a6:94:2b:59:70:47:29:38:43:ae:14:0d:cc:c2:5b:
3e:64:cd:f8:05:7f:8a:1d:db:cb:d1:34:b3:97:f0:1a:cd:62:
39:19:38:87:91:25:df:70:dd:b6:a8:4d:d4:9c:3c:8c:59:a6:
a4:99:d3:1d:a0:60:40:c9:c3:2d:5a:af:ad:5c:36:3f:78:88:
4c:ca:14:f7:88:76:18:2a:81:ea:53:6a:57:66:76:c2:b5:f2:
bd:a1:87:c7:1f:38:b5:d1:56:39:e5:72:67:ad:33:5d:5e:00:
80:e8:33:d9:65:04:1f:56:8c:60:4d:2c:1d:e7:d7:c3:28:6f:
1c:cc:8e:8c:e9:bb:3f:05:57:bc:de:38:1c:42:1c:b9:76:60:
b6:92:96:45:d2:ec:34:e4:71:17:88:28:77:fb:71:1a:ac:22:
1f:4a:68:44:30:44:b1:4f:d1:c1:f2:d9:25:15:85:68:d7:d2:
c2:11:5b:82:4d:da:b7:b2:e8:06:ff:fd:97:d6:78:1e:40:6e:
16:49:79:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:41:58 2025 by rpki-client