Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/6ffcd2-5bf1-41e2-86a8-7bc1e4f56c88/1/0rvJBVXW0NNDK6u5W2DN7upYD1g.mft
File: 0rvJBVXW0NNDK6u5W2DN7upYD1g.mft (raw, json)
Hash identifier: c/3JuvcnQ/cZDEarNFJGY/GHtfm5kn7cTle6g5XU+20=
Subject key identifier: 56:DE:7C:D1:E3:42:FD:A9:05:C2:3E:07:F1:11:5F:0E:48:06:48:B4
Authority key identifier: D2:BB:C9:05:55:D6:D0:D3:43:2B:AB:B9:5B:60:CD:EE:EA:58:0F:58
Certificate issuer: /CN=d2bbc90555d6d0d3432babb95b60cdeeea580f58
Certificate serial: 019A4F62DDA8B444E587EF51CB9EFC3CC5EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0rvJBVXW0NNDK6u5W2DN7upYD1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/6ffcd2-5bf1-41e2-86a8-7bc1e4f56c88/1/0rvJBVXW0NNDK6u5W2DN7upYD1g.mft
Manifest number: 15A2
Signing time: Tue 04 Nov 2025 15:01:10 +0000
Manifest this update: Tue 04 Nov 2025 15:01:10 +0000
Manifest next update: Wed 05 Nov 2025 15:01:10 +0000
Files and hashes: 1: 0rvJBVXW0NNDK6u5W2DN7upYD1g.crl (hash: 9v5KLktxhWizSF5aInCjdYesj367mQt/dPW8LNkANVw=)
2: mSUuaNY6UdkYm0lDvwtHqv3NvLU.roa (hash: omo8awS6hh3Xi+tQ6clfUM9W5KqXeL6pdkyIRs6JAvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/6ffcd2-5bf1-41e2-86a8-7bc1e4f56c88/1/0rvJBVXW0NNDK6u5W2DN7upYD1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/6ffcd2-5bf1-41e2-86a8-7bc1e4f56c88/1/0rvJBVXW0NNDK6u5W2DN7upYD1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/0rvJBVXW0NNDK6u5W2DN7upYD1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:dd:a8:b4:44:e5:87:ef:51:cb:9e:fc:3c:c5:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2bbc90555d6d0d3432babb95b60cdeeea580f58
Validity
Not Before: Nov 4 15:01:10 2025 GMT
Not After : Nov 5 15:01:10 2025 GMT
Subject: CN=56de7cd1e342fda905c23e07f1115f0e480648b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f7:6e:c3:6d:af:09:08:71:81:56:d1:dc:d3:
9f:52:34:b5:d8:f1:be:a2:f4:44:ba:c6:71:03:67:
3c:40:e0:06:9d:07:3a:2e:41:4b:7e:62:f5:46:44:
86:31:6f:fd:bb:ef:cd:ff:23:bb:7b:63:9d:e5:6b:
da:2c:d6:e7:9f:53:78:5e:1c:00:c2:fc:db:7d:29:
8c:0d:af:e2:ba:7c:0b:85:5f:e0:90:bd:e6:8b:34:
cf:8b:46:f4:45:fa:30:d8:3e:f7:36:f0:b7:a7:90:
92:87:40:2d:a6:e0:10:c5:02:5f:70:5a:09:ef:79:
6a:19:06:00:9d:6f:26:52:4c:5a:e8:8a:e4:fa:e7:
16:01:1d:91:b6:ce:d5:26:7a:ae:5d:b9:0d:d8:41:
36:a0:af:bd:1d:d6:95:c9:73:51:16:e0:8c:15:4f:
4d:53:98:8c:e9:3f:56:dc:6f:61:39:27:6d:58:78:
d5:8b:13:64:b8:77:cd:88:b7:50:be:db:46:4a:87:
ea:ff:71:7f:28:92:d8:0d:30:ff:65:8a:b0:bf:fe:
30:f0:fe:a6:16:2d:c6:a2:8b:08:26:61:52:64:cf:
94:96:2e:b1:28:07:c8:8b:ff:55:ba:ef:59:33:97:
23:2f:4f:a3:9c:43:ae:91:8f:43:a4:6e:f5:4f:0d:
81:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:DE:7C:D1:E3:42:FD:A9:05:C2:3E:07:F1:11:5F:0E:48:06:48:B4
X509v3 Authority Key Identifier:
keyid:D2:BB:C9:05:55:D6:D0:D3:43:2B:AB:B9:5B:60:CD:EE:EA:58:0F:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0rvJBVXW0NNDK6u5W2DN7upYD1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6ffcd2-5bf1-41e2-86a8-7bc1e4f56c88/1/0rvJBVXW0NNDK6u5W2DN7upYD1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6ffcd2-5bf1-41e2-86a8-7bc1e4f56c88/1/0rvJBVXW0NNDK6u5W2DN7upYD1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:8f:28:df:3a:5d:0a:7f:25:01:cf:20:ea:f7:81:a8:7c:5f:
a2:b8:b9:cb:66:d4:d7:61:e9:f1:d0:24:aa:d7:60:e1:bf:cc:
f3:dc:2d:c4:a6:1e:4c:58:8a:18:b5:f3:f3:10:c3:9e:96:98:
9b:c8:86:16:02:65:9c:45:51:41:4d:ca:78:f6:21:1b:d6:9c:
11:fd:41:c3:8d:a2:c3:0c:02:fa:1c:ab:a9:9c:0e:ee:ea:d0:
82:7f:3e:e3:94:f1:6a:19:26:1a:15:fc:8a:64:64:be:79:94:
46:f2:a7:1a:b3:53:47:35:1d:f2:8e:3a:5d:52:5a:2c:71:6b:
0c:68:70:73:0c:55:12:7e:24:3a:fc:f7:e3:e7:1e:80:fd:10:
69:67:86:07:1f:e6:a0:aa:9e:cb:e3:30:99:8e:ed:15:2f:50:
34:8e:c7:d8:ae:8e:3c:15:61:fe:74:53:87:0c:9f:a6:d4:92:
52:29:97:f0:de:e4:3d:e2:1b:fc:dc:39:89:98:94:95:2e:1e:
dc:0e:8f:cf:f0:2c:4a:0b:6b:65:b6:6c:17:93:a2:27:1d:96:
64:cf:b8:20:6d:0e:5a:da:14:9f:7f:16:8b:85:d8:61:4c:92:
09:0a:1a:ac:b4:f6:67:f5:5e:d9:63:5d:15:b4:d1:a7:a2:49:
cb:58:a3:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:59:29 2025 by rpki-client