Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/65fa3c-0175-4cee-9930-59cfd453dd17/1/0eXrdTZiC1hX0b9ZAYPWUMojIn8.mft
File: 0eXrdTZiC1hX0b9ZAYPWUMojIn8.mft (raw, json)
Hash identifier: KB+L99kFmAUrisNCtuSiRUlE+o58ITEX5rS8Zgqx1mc=
Subject key identifier: A6:F3:2B:EA:20:4A:90:5D:A4:7A:74:21:DD:90:CC:E5:BB:9F:A3:AE
Authority key identifier: D1:E5:EB:75:36:62:0B:58:57:D1:BF:59:01:83:D6:50:CA:23:22:7F
Certificate issuer: /CN=d1e5eb7536620b5857d1bf590183d650ca23227f
Certificate serial: 019A503DF6C9DB5D96543F0C61B0D1F16457
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0eXrdTZiC1hX0b9ZAYPWUMojIn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/65fa3c-0175-4cee-9930-59cfd453dd17/1/0eXrdTZiC1hX0b9ZAYPWUMojIn8.mft
Manifest number: 03C8
Signing time: Tue 04 Nov 2025 19:00:29 +0000
Manifest this update: Tue 04 Nov 2025 19:00:29 +0000
Manifest next update: Wed 05 Nov 2025 19:00:29 +0000
Files and hashes: 1: 0eXrdTZiC1hX0b9ZAYPWUMojIn8.crl (hash: wQMD7+yziWGgMqzGA90ncTDjoZWrsN/CAbnnZhQDS78=)
2: GqXg2NC5IUxRI1mWcJNsyZxesng.roa (hash: wIFPJcYLl1DLySOyYumJerZ6TcbUU8g29XL5Yzwhz2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/65fa3c-0175-4cee-9930-59cfd453dd17/1/0eXrdTZiC1hX0b9ZAYPWUMojIn8.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/65fa3c-0175-4cee-9930-59cfd453dd17/1/0eXrdTZiC1hX0b9ZAYPWUMojIn8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0eXrdTZiC1hX0b9ZAYPWUMojIn8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3d:f6:c9:db:5d:96:54:3f:0c:61:b0:d1:f1:64:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1e5eb7536620b5857d1bf590183d650ca23227f
Validity
Not Before: Nov 4 19:00:29 2025 GMT
Not After : Nov 5 19:00:29 2025 GMT
Subject: CN=a6f32bea204a905da47a7421dd90cce5bb9fa3ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:bd:5d:9f:70:36:1b:69:5b:34:24:ca:83:75:
b9:88:cd:bf:ee:a3:77:64:9f:4f:91:3c:19:7f:ab:
a0:0a:0c:ef:fc:11:eb:91:aa:f9:4e:24:bc:c2:32:
28:b7:23:cd:4a:89:bb:61:50:77:30:a1:92:1c:ad:
06:3d:2a:92:a2:eb:f3:8d:69:6d:27:8e:a0:c9:ec:
9a:22:9d:72:7e:ce:df:44:e6:ad:6a:74:0d:a1:5e:
dc:36:65:db:a8:f4:70:10:e5:86:08:ba:85:41:ac:
e8:67:cb:9f:30:78:d7:7d:db:0f:b8:b7:d0:b7:ff:
41:ea:64:97:9c:ee:3d:e3:40:4e:6a:57:da:0f:e0:
8e:16:11:cb:d6:cb:02:3f:76:d9:20:c2:2e:4b:46:
aa:83:9a:27:ae:c1:9f:94:c3:56:6c:fc:6e:24:31:
52:51:55:fe:d0:d6:f7:de:b1:88:4a:5e:29:e8:a4:
2f:e1:08:92:78:ec:a9:f8:e3:20:6c:9c:ea:45:4c:
6f:04:15:22:5a:77:72:79:78:92:9b:a9:93:09:40:
84:25:8c:2f:48:df:cb:cb:d9:b2:88:6c:16:e0:e5:
d3:a8:ea:8d:7f:77:40:84:0c:80:21:c0:40:40:67:
b1:07:fd:16:42:b6:e3:b4:78:d7:78:80:d6:0c:92:
5e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:F3:2B:EA:20:4A:90:5D:A4:7A:74:21:DD:90:CC:E5:BB:9F:A3:AE
X509v3 Authority Key Identifier:
keyid:D1:E5:EB:75:36:62:0B:58:57:D1:BF:59:01:83:D6:50:CA:23:22:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0eXrdTZiC1hX0b9ZAYPWUMojIn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/65fa3c-0175-4cee-9930-59cfd453dd17/1/0eXrdTZiC1hX0b9ZAYPWUMojIn8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/65fa3c-0175-4cee-9930-59cfd453dd17/1/0eXrdTZiC1hX0b9ZAYPWUMojIn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:f5:a3:43:b7:b7:9a:fd:17:d8:f9:bf:2a:66:ac:46:23:5e:
a6:c6:71:04:e5:66:6c:99:0b:9e:c0:bb:5f:22:65:b3:fb:64:
c9:9b:12:b9:85:96:3b:33:3a:21:5e:00:67:12:c4:63:af:13:
a0:b0:ae:1c:9c:70:4e:37:f5:f9:14:6b:c2:c4:fc:64:6e:24:
79:6f:45:a3:24:7a:ad:f9:07:6f:c9:5c:62:6b:54:48:a9:ed:
66:f7:e7:c3:e8:c7:de:04:72:87:fd:b9:5a:6c:40:01:7b:38:
92:e0:8c:51:bf:58:a1:c2:4e:c2:ed:05:e0:8a:b4:ab:5c:8b:
a2:b2:3f:e1:11:42:d9:b8:da:06:cf:26:68:d1:30:fd:53:1e:
55:61:44:e7:09:11:2c:2f:03:86:9f:2c:3e:1e:bd:f1:b7:53:
f7:0c:de:13:2e:7d:d6:10:2e:5a:a2:84:f5:6c:dc:3b:cb:ee:
b4:4d:51:18:f5:6d:8a:c6:86:7d:24:57:92:1c:b8:a0:45:6a:
f2:73:31:07:62:75:1f:df:69:84:8b:f1:79:32:e6:f7:0d:33:
d6:53:5d:53:7f:1c:dd:2c:b5:a8:00:6e:16:b7:c6:a7:53:eb:
c6:6f:d9:73:e8:33:eb:ee:ad:ff:f5:ca:0c:f1:ba:fe:78:eb:
23:3e:24:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:22:13 2025 by rpki-client