Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.mft
File: 0S1NL7dadVmiD3lUjEWFQv0Kmkw.mft (raw, json)
Hash identifier: LHk8rQSq9Tn7UsRJ4D8AfeUDGcRUk3tKRg4PjZiD620=
Subject key identifier: 08:D9:D2:08:FA:07:12:53:54:37:9A:53:2C:79:BC:06:66:EC:76:AA
Authority key identifier: D1:2D:4D:2F:B7:5A:75:59:A2:0F:79:54:8C:45:85:42:FD:0A:9A:4C
Certificate issuer: /CN=d12d4d2fb75a7559a20f79548c458542fd0a9a4c
Certificate serial: 019A51197BD52AD15CE3EE1F210A88C14EE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S1NL7dadVmiD3lUjEWFQv0Kmkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.mft
Manifest number: 1434
Signing time: Tue 04 Nov 2025 23:00:15 +0000
Manifest this update: Tue 04 Nov 2025 23:00:15 +0000
Manifest next update: Wed 05 Nov 2025 23:00:15 +0000
Files and hashes: 1: 0S1NL7dadVmiD3lUjEWFQv0Kmkw.crl (hash: rO0ZbgVIsjUxaVTibZIGKbzl2NTF3bDzRREdJ2eV07o=)
2: KqC_P0HJkM92_lcS0Jpa0USOEVs.roa (hash: KV6dI03WkVzxAgFRttiw4LQ06BXsoXy1LKrixgsu660=)
3: qufcdPSdEtDaFtrISHEdLWv3S2M.roa (hash: T2dPM9R1QKb1KXwCc1Gtxp+rTdBsb2KAhbC/WGxf99k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0S1NL7dadVmiD3lUjEWFQv0Kmkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:19:7b:d5:2a:d1:5c:e3:ee:1f:21:0a:88:c1:4e:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12d4d2fb75a7559a20f79548c458542fd0a9a4c
Validity
Not Before: Nov 4 23:00:15 2025 GMT
Not After : Nov 5 23:00:15 2025 GMT
Subject: CN=08d9d208fa07125354379a532c79bc0666ec76aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a7:da:00:c2:84:24:7a:b3:b5:8f:4f:50:9f:
1f:32:ba:94:17:2f:46:a1:d1:d0:23:f4:bd:35:55:
2a:fa:7a:56:bc:49:d1:fe:5d:a1:61:e5:be:d4:ed:
9d:4d:32:39:11:f8:d1:c5:ed:7a:4f:3c:5b:71:a8:
0b:e3:35:52:c8:38:ef:f1:1f:8b:b2:fe:30:3f:ab:
c7:89:d2:2a:05:9c:ba:80:34:13:99:85:cf:5a:cb:
e6:23:b6:ed:53:b3:9b:4e:e7:4b:fc:eb:9d:f1:0f:
20:36:62:c1:56:22:3d:15:62:ae:e1:7d:4c:2d:7b:
88:0f:f6:8d:3e:e6:57:4b:f5:9b:a2:93:02:53:13:
af:b9:23:90:87:5d:15:d1:88:83:c0:7a:e4:16:80:
0b:29:ee:6e:38:d5:46:cf:52:71:26:ba:00:be:e8:
25:a2:df:9f:07:a1:0e:49:c6:0b:1e:63:42:19:3e:
3b:2d:1e:3d:f8:14:51:b2:ed:2a:6c:b4:4c:09:24:
a8:25:a2:11:5d:81:1b:71:d0:35:18:86:78:1c:ef:
8e:7f:d8:ac:93:21:76:23:eb:8a:99:4e:df:89:8d:
5b:1a:9a:48:4a:11:06:45:c3:4f:f2:ff:a7:92:19:
3c:3a:8b:50:59:e2:a7:d4:01:27:90:00:ce:3b:0e:
f2:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:D9:D2:08:FA:07:12:53:54:37:9A:53:2C:79:BC:06:66:EC:76:AA
X509v3 Authority Key Identifier:
keyid:D1:2D:4D:2F:B7:5A:75:59:A2:0F:79:54:8C:45:85:42:FD:0A:9A:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S1NL7dadVmiD3lUjEWFQv0Kmkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:c4:36:ba:0d:41:14:7b:30:37:62:49:a6:e9:94:f6:a1:8d:
e7:aa:a9:47:1a:de:8e:69:67:ec:b3:7d:a7:b5:00:65:13:0f:
ba:55:a7:e4:90:98:29:e8:80:28:72:38:92:db:ad:b3:79:e8:
96:f7:06:7e:82:d5:52:20:79:3e:39:ca:92:99:b5:8f:cc:6d:
e5:04:e1:f7:3b:c9:90:e4:32:5c:ff:31:3d:d2:01:b1:c4:71:
1f:21:d0:51:09:60:96:87:01:01:fc:f7:4b:39:cb:25:15:81:
a1:60:16:ab:a7:20:05:7e:6c:32:af:e8:b2:7d:07:ec:a9:b2:
ae:40:ed:16:65:f3:71:06:53:b3:b5:60:61:60:71:f6:2d:7f:
d3:43:c0:33:97:21:8f:ed:64:56:6c:d4:1b:07:3a:9e:01:74:
59:9f:ae:ab:6d:a6:f0:4d:b2:71:1c:f9:b5:9e:cb:2f:1b:c8:
13:9a:10:87:0e:68:01:d4:e9:46:81:b2:c3:ce:31:74:17:0b:
02:dc:1a:78:27:71:e3:f5:21:96:1c:63:03:87:48:cf:cb:bf:
41:7e:b0:2c:fe:bf:d4:a7:ac:8b:98:f8:47:58:12:43:d8:88:
4b:25:84:f2:1c:cf:72:74:56:0a:86:c7:93:42:bc:5e:9a:12:
c1:c1:c1:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:45:06 2025 by rpki-client