Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/37de59-9ca4-447e-a510-e4a86b0ffd2e/1/0JTrDpiYeirfj5WgPnhlmRogGFU.mft
File: 0JTrDpiYeirfj5WgPnhlmRogGFU.mft (raw, json)
Hash identifier: +7dtKCiQ/zABJVTfWApq/4bquASHuWrgcjIW1YsUy6M=
Subject key identifier: A9:C3:55:0C:A2:FD:40:4F:75:FE:C6:42:A9:FC:6B:3C:DB:65:DE:AD
Authority key identifier: D0:94:EB:0E:98:98:7A:2A:DF:8F:95:A0:3E:78:65:99:1A:20:18:55
Certificate issuer: /CN=d094eb0e98987a2adf8f95a03e7865991a201855
Certificate serial: 019A4D3D0D1859C8AAFD7B5713959A25C595
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0JTrDpiYeirfj5WgPnhlmRogGFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/37de59-9ca4-447e-a510-e4a86b0ffd2e/1/0JTrDpiYeirfj5WgPnhlmRogGFU.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 05:00:37 +0000
Manifest this update: Tue 04 Nov 2025 05:00:37 +0000
Manifest next update: Wed 05 Nov 2025 05:00:37 +0000
Files and hashes: 1: 0JTrDpiYeirfj5WgPnhlmRogGFU.crl (hash: w+mWsXmfT7oXDZDkUidng34vXaCsgxBYQ7UHCfJOLCs=)
2: zWlbMie9smiEiWEP03iooF2NKYI.roa (hash: i3CosfERz9PWPOxFmY5jsq43lJm4fTA/Cty1Zgq6vks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/37de59-9ca4-447e-a510-e4a86b0ffd2e/1/0JTrDpiYeirfj5WgPnhlmRogGFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/37de59-9ca4-447e-a510-e4a86b0ffd2e/1/0JTrDpiYeirfj5WgPnhlmRogGFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0JTrDpiYeirfj5WgPnhlmRogGFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3d:0d:18:59:c8:aa:fd:7b:57:13:95:9a:25:c5:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d094eb0e98987a2adf8f95a03e7865991a201855
Validity
Not Before: Nov 4 05:00:37 2025 GMT
Not After : Nov 5 05:00:37 2025 GMT
Subject: CN=a9c3550ca2fd404f75fec642a9fc6b3cdb65dead
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:4e:3f:f7:9c:4c:7c:e7:4f:72:21:80:52:1e:
db:71:25:12:04:9c:02:f9:0f:30:df:9e:3f:ad:15:
a4:f0:99:c7:b5:4c:2e:7c:47:9c:83:8b:3a:c6:e6:
ef:9e:26:cd:8a:3c:95:70:ab:1d:63:8e:41:e8:79:
5e:7d:be:3f:e5:f0:4e:8f:e7:26:22:35:51:b8:42:
14:cb:de:12:28:ac:6d:0d:1b:da:2f:94:06:ed:91:
78:79:7e:7b:4d:c9:c7:31:0a:c7:cd:19:d5:17:da:
ba:46:be:8b:07:ba:0f:3f:8d:df:40:10:12:5f:9d:
ae:9b:47:dc:59:0d:1c:33:e7:ad:8c:03:40:d9:c5:
97:f2:12:cf:b5:d2:66:1b:b3:fa:1e:d0:3f:6c:a7:
44:e0:71:3c:50:41:63:89:34:69:06:d8:0a:06:95:
3b:92:64:ce:8f:43:f3:07:3d:d2:28:c9:bb:e4:dc:
61:11:a2:05:01:67:d0:1e:1f:0f:75:7a:cf:54:49:
46:d8:d5:85:87:75:57:5b:1c:21:e4:fd:d4:e7:01:
98:2a:d1:a9:6f:36:7b:79:c5:61:05:73:85:e7:0b:
b4:35:c0:4d:f2:8a:5b:79:87:6c:dc:e7:00:1f:f7:
0a:16:86:01:d3:7b:9d:15:9c:72:a1:a5:2e:e0:9c:
50:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:C3:55:0C:A2:FD:40:4F:75:FE:C6:42:A9:FC:6B:3C:DB:65:DE:AD
X509v3 Authority Key Identifier:
keyid:D0:94:EB:0E:98:98:7A:2A:DF:8F:95:A0:3E:78:65:99:1A:20:18:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0JTrDpiYeirfj5WgPnhlmRogGFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/37de59-9ca4-447e-a510-e4a86b0ffd2e/1/0JTrDpiYeirfj5WgPnhlmRogGFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/37de59-9ca4-447e-a510-e4a86b0ffd2e/1/0JTrDpiYeirfj5WgPnhlmRogGFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:d8:e3:8a:98:98:19:20:01:50:65:e8:79:d7:8f:be:42:fe:
3e:6b:dc:02:bb:60:c8:ea:fc:aa:2a:bd:e5:96:80:6e:6f:4e:
b6:af:24:46:af:45:37:31:14:94:b5:20:0d:12:36:d6:c3:4d:
d6:09:26:30:d8:37:ae:f2:b1:d3:86:10:4e:1b:7d:56:45:41:
27:86:81:ac:c4:d7:b0:d6:34:7e:38:fd:af:79:8b:86:1a:81:
10:e1:30:9d:db:32:bd:2b:be:3f:aa:37:ea:69:b9:55:01:bd:
ad:1c:66:35:b9:3c:b1:04:5f:53:1d:06:ac:21:1a:80:55:ef:
f2:9b:ba:8e:97:f0:e0:3a:7e:23:c0:4e:22:4a:5a:22:9b:15:
3b:7b:f3:26:ef:ee:c1:6b:87:fd:4b:6e:22:68:06:35:34:2d:
86:d9:04:e8:7c:31:40:6a:3e:6d:4d:d5:ab:e2:5a:b2:5a:e8:
96:a2:2c:26:fc:37:68:d9:32:39:ba:e1:28:f5:c2:35:a9:cb:
ed:23:97:90:53:50:61:82:35:43:e0:09:c4:78:39:db:99:b4:
47:a1:d3:21:86:90:04:ac:fe:a5:02:59:af:6d:f9:91:99:f9:
fd:f0:9a:35:21:65:25:34:da:9c:95:7d:a0:92:75:5e:0b:27:
e9:f0:8f:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNPQ0YWciq/XtXE5WaJcWVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwOTRlYjBlOTg5ODdhMmFkZjhmOTVhMDNlNzg2NTk5MWEy
MDE4NTUwHhcNMjUxMTA0MDUwMDM3WhcNMjUxMTA1MDUwMDM3WjAzMTEwLwYDVQQD
EyhhOWMzNTUwY2EyZmQ0MDRmNzVmZWM2NDJhOWZjNmIzY2RiNjVkZWFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlk4/95xMfOdPciGAUh7bcSUSBJwC
+Q8w354/rRWk8JnHtUwufEecg4s6xubvnibNijyVcKsdY45B6Hlefb4/5fBOj+cm
IjVRuEIUy94SKKxtDRvaL5QG7ZF4eX57TcnHMQrHzRnVF9q6Rr6LB7oPP43fQBAS
X52um0fcWQ0cM+etjANA2cWX8hLPtdJmG7P6HtA/bKdE4HE8UEFjiTRpBtgKBpU7
kmTOj0PzBz3SKMm75NxhEaIFAWfQHh8PdXrPVElG2NWFh3VXWxwh5P3U5wGYKtGp
bzZ7ecVhBXOF5wu0NcBN8opbeYds3OcAH/cKFoYB03udFZxyoaUu4JxQRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKnDVQyi/UBPdf7GQqn8azzbZd6tMB8GA1UdIwQY
MBaAFNCU6w6YmHoq34+VoD54ZZkaIBhVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEpUckRwaVllaXJmajVXZ1BuaGxtUm9nR0ZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi8zN2RlNTktOWNhNC00NDdlLWE1MTAt
ZTRhODZiMGZmZDJlLzEvMEpUckRwaVllaXJmajVXZ1BuaGxtUm9nR0ZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi8zN2RlNTktOWNhNC00NDdlLWE1MTAtZTRhODZiMGZmZDJl
LzEvMEpUckRwaVllaXJmajVXZ1BuaGxtUm9nR0ZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV9jjipiY
GSABUGXoedePvkL+PmvcArtgyOr8qiq95ZaAbm9Otq8kRq9FNzEUlLUgDRI21sNN
1gkmMNg3rvKx04YQTht9VkVBJ4aBrMTXsNY0fjj9r3mLhhqBEOEwndsyvSu+P6o3
6mm5VQG9rRxmNbk8sQRfUx0GrCEagFXv8pu6jpfw4Dp+I8BOIkpaIpsVO3vzJu/u
wWuH/UtuImgGNTQthtkE6HwxQGo+bU3Vq+JaslrolqIsJvw3aNkyObrhKPXCNanL
7SOXkFNQYYI1Q+AJxHg525m0R6HTIYaQBKz+pQJZr235kZn5/fCaNSFlJTTanJV9
oJJ1Xgsn6fCPRQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:09:18 2025 by rpki-client