Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/f41051-0810-43ff-b196-cfefdfdfbe6b/1/0mpECeqR9QbWM4ccbDVUDUYDN9E.mft
File: 0mpECeqR9QbWM4ccbDVUDUYDN9E.mft (raw, json)
Hash identifier: J25XVu9u8bY4reU1So3S2rJodQYY8gPFVz0i9m1P5nY=
Subject key identifier: 5F:C4:F8:66:CA:78:4B:DD:24:02:B1:FE:3F:22:6A:0E:9D:DB:79:C1
Authority key identifier: D2:6A:44:09:EA:91:F5:06:D6:33:87:1C:6C:35:54:0D:46:03:37:D1
Certificate issuer: /CN=d26a4409ea91f506d633871c6c35540d460337d1
Certificate serial: 019A4EF5E0D545B5DB2F56F975C815BBE424
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0mpECeqR9QbWM4ccbDVUDUYDN9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/f41051-0810-43ff-b196-cfefdfdfbe6b/1/0mpECeqR9QbWM4ccbDVUDUYDN9E.mft
Manifest number: 0EEE
Signing time: Tue 04 Nov 2025 13:02:07 +0000
Manifest this update: Tue 04 Nov 2025 13:02:07 +0000
Manifest next update: Wed 05 Nov 2025 13:02:07 +0000
Files and hashes: 1: 0mpECeqR9QbWM4ccbDVUDUYDN9E.crl (hash: Pgxc727leNWFOcKQZYyBZ2ObV6uCXpOtxcn7GPmxq+k=)
2: ffPM5tOijzqMCvBgVLZrulDjr9M.roa (hash: mjTFPQvjm3YGXdJ50ci8rDHwA1GVzk1mURHKwSEJb1M=)
3: v6hAmhwF5zdYx8dEgkzg5dcM3po.roa (hash: WVX44j02BF26OexloZBarRA/wYQhTTWNJB3y+NBHmOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/f41051-0810-43ff-b196-cfefdfdfbe6b/1/0mpECeqR9QbWM4ccbDVUDUYDN9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/f41051-0810-43ff-b196-cfefdfdfbe6b/1/0mpECeqR9QbWM4ccbDVUDUYDN9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/0mpECeqR9QbWM4ccbDVUDUYDN9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:e0:d5:45:b5:db:2f:56:f9:75:c8:15:bb:e4:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d26a4409ea91f506d633871c6c35540d460337d1
Validity
Not Before: Nov 4 13:02:07 2025 GMT
Not After : Nov 5 13:02:07 2025 GMT
Subject: CN=5fc4f866ca784bdd2402b1fe3f226a0e9ddb79c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:aa:59:83:c9:3e:2e:5e:42:cb:ba:f2:e1:60:
1e:56:3c:0a:18:e8:50:f9:26:c3:f3:6b:3d:2e:97:
e9:b7:5e:76:60:3c:04:0a:78:0a:52:47:14:05:59:
ae:5a:cb:c2:61:d7:aa:13:e1:4a:12:10:28:b5:92:
c0:2b:1f:31:b5:f2:e6:4f:23:94:3f:83:cd:7c:7f:
2a:7b:37:51:80:de:cb:f3:8a:30:df:4f:3e:ff:ee:
9c:47:b9:7c:80:81:5e:7b:9b:bb:21:bc:b8:50:12:
b9:cd:86:77:ff:9a:d1:80:b2:71:24:b9:79:75:43:
95:20:70:b3:b8:c8:37:c4:91:02:26:ec:54:54:b3:
37:fc:30:ee:bb:b7:88:4f:f5:94:8d:ad:2f:f6:34:
00:6f:60:5b:4a:83:44:ad:93:b4:75:15:91:fd:25:
57:91:87:62:77:58:14:bd:bb:aa:09:f2:f2:c8:3a:
61:c7:6a:52:7a:2e:2e:d5:16:37:c3:14:ef:87:c2:
87:00:1d:36:70:ef:f3:b3:7b:23:43:56:3f:3e:4e:
12:e2:60:e4:14:54:f2:14:c6:b2:9c:4a:9c:b8:ec:
58:33:2c:fd:a1:3e:2e:dd:50:0b:ae:cd:cb:c5:f5:
07:16:fa:07:a1:69:50:43:2a:83:45:8a:53:8f:11:
a1:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:C4:F8:66:CA:78:4B:DD:24:02:B1:FE:3F:22:6A:0E:9D:DB:79:C1
X509v3 Authority Key Identifier:
keyid:D2:6A:44:09:EA:91:F5:06:D6:33:87:1C:6C:35:54:0D:46:03:37:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mpECeqR9QbWM4ccbDVUDUYDN9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f41051-0810-43ff-b196-cfefdfdfbe6b/1/0mpECeqR9QbWM4ccbDVUDUYDN9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f41051-0810-43ff-b196-cfefdfdfbe6b/1/0mpECeqR9QbWM4ccbDVUDUYDN9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:29:50:13:7f:0f:b0:91:95:43:da:cf:0d:93:e5:f3:87:3f:
7e:be:ec:01:4d:89:01:50:ee:f6:1b:59:f3:5a:27:1e:67:39:
8b:17:c6:dc:fc:e9:7f:2f:65:95:e7:7b:1f:1c:53:e2:bc:f4:
ea:ce:70:76:b9:c3:0f:06:0b:3f:fc:62:68:7b:ce:5c:37:38:
98:99:ac:c4:19:e9:98:df:a4:e6:2c:28:72:96:bf:fc:20:e0:
37:78:4f:17:4f:d8:93:32:1f:ba:6b:92:21:02:bb:f1:7d:33:
db:fa:a5:47:bf:28:a3:e6:57:1e:d7:19:ce:16:c0:26:40:2b:
d8:c8:ff:64:4e:18:a7:bb:04:50:5e:f6:d0:28:5a:8e:a9:75:
11:d2:e5:78:0f:b2:d2:d5:86:eb:e8:1e:14:80:48:aa:ae:e8:
6d:be:87:8d:bc:94:a4:c0:22:78:37:1c:c9:36:e2:3c:cb:0d:
10:12:0a:25:57:93:ca:8c:85:6f:87:07:c7:77:dc:e4:93:fa:
61:46:fa:1d:22:25:7f:7b:81:df:29:64:4e:a2:04:7c:4f:11:
0c:ec:7a:77:27:c3:39:29:e2:c5:da:18:ad:5e:05:22:b9:6b:
04:a0:2f:75:c5:03:82:dc:65:42:18:ee:a8:f5:8d:10:02:4d:
08:ed:20:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:40:36 2025 by rpki-client