Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/317635-a90a-4704-9672-15f62c890af8/1/0LYdHx2czatrbY4UUMLJNtOX5nA.mft
File: 0LYdHx2czatrbY4UUMLJNtOX5nA.mft (raw, json)
Hash identifier: GaVgQYFSy9PEW1y2s3znF71Djb//sLqpUcWmj0KmK5c=
Subject key identifier: E0:06:6F:F1:9F:12:57:25:04:CD:75:81:B1:07:BB:48:56:F5:17:9E
Authority key identifier: D0:B6:1D:1F:1D:9C:CD:AB:6B:6D:8E:14:50:C2:C9:36:D3:97:E6:70
Certificate issuer: /CN=d0b61d1f1d9ccdab6b6d8e1450c2c936d397e670
Certificate serial: 019A4E867A81A0FB591A21DB48A937722E15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0LYdHx2czatrbY4UUMLJNtOX5nA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/317635-a90a-4704-9672-15f62c890af8/1/0LYdHx2czatrbY4UUMLJNtOX5nA.mft
Manifest number: 03F1
Signing time: Tue 04 Nov 2025 11:00:27 +0000
Manifest this update: Tue 04 Nov 2025 11:00:27 +0000
Manifest next update: Wed 05 Nov 2025 11:00:27 +0000
Files and hashes: 1: 0LYdHx2czatrbY4UUMLJNtOX5nA.crl (hash: csk3/yewq9gJQRjCJAafKCyb6/311YrkHxwSGYrodY4=)
2: DhPaCGROVzc_RyLkimAXvuteooA.roa (hash: 7GJwuhnVTvbxl3b1/oKcnOg3a/h9WeQA7faf/qH9pFA=)
3: WtuPQAz22oEnCEx3Rc-9J0U0Qbk.roa (hash: LqsVaHB6US9lWput6TNuWvOyM8xnvQFU16n5uBdiSPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/317635-a90a-4704-9672-15f62c890af8/1/0LYdHx2czatrbY4UUMLJNtOX5nA.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/317635-a90a-4704-9672-15f62c890af8/1/0LYdHx2czatrbY4UUMLJNtOX5nA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0LYdHx2czatrbY4UUMLJNtOX5nA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:7a:81:a0:fb:59:1a:21:db:48:a9:37:72:2e:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0b61d1f1d9ccdab6b6d8e1450c2c936d397e670
Validity
Not Before: Nov 4 11:00:27 2025 GMT
Not After : Nov 5 11:00:27 2025 GMT
Subject: CN=e0066ff19f12572504cd7581b107bb4856f5179e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4f:f0:12:75:42:f9:d6:ce:e0:bf:6a:e6:2d:
bb:86:59:35:b6:b0:0b:6c:7d:8c:77:76:c9:5c:1b:
b0:1f:1b:02:28:6c:b4:ed:88:5c:8d:38:27:57:b8:
2d:a2:62:28:d9:46:6a:8b:bf:0a:73:67:26:65:d8:
1b:d7:ac:86:98:4b:05:67:8e:15:29:68:03:bf:f9:
f1:58:0e:d8:73:1a:5d:a3:bd:01:b0:0c:17:59:2d:
a5:e3:da:b5:21:cc:dc:bc:a5:ee:94:f7:46:8a:66:
f0:95:de:52:0b:07:a1:6b:7e:85:07:23:94:62:bc:
81:b7:b8:80:b1:71:f4:d1:9f:6a:63:14:e3:53:b8:
3d:47:84:64:ff:61:c1:8b:59:5f:a6:c7:3b:f8:46:
49:92:a1:83:1c:43:78:2e:cb:cb:ae:42:1c:6a:37:
26:3d:54:cc:51:b2:c0:41:76:f5:3f:a1:c5:2c:77:
9c:e4:8b:f8:2e:30:ce:d4:34:5f:97:60:5c:bc:6f:
c2:44:e4:a9:e9:a9:ee:2d:30:04:11:92:91:8d:e5:
42:a6:23:1a:0a:18:41:9a:0c:ef:53:ad:19:94:3d:
f7:d2:70:4b:53:ae:e6:60:4d:3a:03:28:21:32:4c:
4b:9a:c8:46:59:62:3c:7f:76:58:d8:06:4a:9c:26:
06:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:06:6F:F1:9F:12:57:25:04:CD:75:81:B1:07:BB:48:56:F5:17:9E
X509v3 Authority Key Identifier:
keyid:D0:B6:1D:1F:1D:9C:CD:AB:6B:6D:8E:14:50:C2:C9:36:D3:97:E6:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0LYdHx2czatrbY4UUMLJNtOX5nA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/317635-a90a-4704-9672-15f62c890af8/1/0LYdHx2czatrbY4UUMLJNtOX5nA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/317635-a90a-4704-9672-15f62c890af8/1/0LYdHx2czatrbY4UUMLJNtOX5nA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:43:4b:85:ec:73:b8:07:7b:c6:3a:dc:50:d2:2d:91:e5:73:
a6:45:2b:50:57:ce:bd:de:57:76:46:71:c4:09:3c:09:56:bb:
82:70:b7:2e:7e:8e:46:2e:61:04:78:ca:eb:83:ef:f2:a9:a3:
c0:74:1e:a5:57:7a:54:cb:ff:6f:51:3c:1a:6b:1b:0a:97:68:
04:7d:6d:1e:5e:b7:72:cc:4e:09:9d:b8:85:a8:13:8b:7d:43:
19:6c:51:08:82:4f:bf:ff:96:65:1b:ec:e3:a9:e4:d7:dd:75:
02:10:d5:b5:e9:b2:9e:76:63:02:df:69:c1:c6:33:8b:1f:9d:
53:bf:e8:85:7e:24:95:04:93:df:2a:92:42:bc:a9:d3:c5:e0:
c1:1f:ef:a8:d5:df:f6:4d:0d:71:5f:42:20:18:f1:98:76:de:
51:68:1a:1d:22:3f:eb:ce:36:96:0e:f0:44:82:9a:68:82:60:
26:8a:6f:db:d1:6f:9a:39:be:a1:72:90:d4:eb:49:9e:8d:ac:
84:95:4f:3f:7e:07:17:91:99:be:54:da:38:8e:1a:a1:fa:07:
f5:c2:f6:26:42:53:4b:69:6d:4d:2f:e6:c6:91:fe:99:f1:66:
e0:f8:de:1e:b0:b9:32:e7:e8:de:e7:19:c5:0a:20:49:ec:b8:
60:a5:b9:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:54:48 2025 by rpki-client