Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/deaad8-3113-4512-a9ce-358243c551a2/1/0s3V8WKiZ4AAA88wwY6c684nTsU.mft
File: 0s3V8WKiZ4AAA88wwY6c684nTsU.mft (raw, json)
Hash identifier: 82FxAmKX7xtxz1GTb63aVEqgoIIlP8BvDxncgY3PfTw=
Subject key identifier: 8B:14:78:3C:F2:D6:95:80:96:ED:7D:3D:04:98:4D:D0:0F:08:0A:B4
Authority key identifier: D2:CD:D5:F1:62:A2:67:80:00:03:CF:30:C1:8E:9C:EB:CE:27:4E:C5
Certificate issuer: /CN=d2cdd5f162a267800003cf30c18e9cebce274ec5
Certificate serial: 019A5119AF3324DBFE42F4368C38263F7143
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0s3V8WKiZ4AAA88wwY6c684nTsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/deaad8-3113-4512-a9ce-358243c551a2/1/0s3V8WKiZ4AAA88wwY6c684nTsU.mft
Manifest number: 09A1
Signing time: Tue 04 Nov 2025 23:00:28 +0000
Manifest this update: Tue 04 Nov 2025 23:00:28 +0000
Manifest next update: Wed 05 Nov 2025 23:00:28 +0000
Files and hashes: 1: 0s3V8WKiZ4AAA88wwY6c684nTsU.crl (hash: J0tu46UltrhRIJ8EKMPwSWOmhfHyV/doc8JrJwxmTuE=)
2: 4d-M2xoibAEms_RDQ9mCEYeUNpg.roa (hash: wVeVUALjyzMUssmf4Hte549aQq7kwv7Or9f/6VG17Vc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/deaad8-3113-4512-a9ce-358243c551a2/1/0s3V8WKiZ4AAA88wwY6c684nTsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/deaad8-3113-4512-a9ce-358243c551a2/1/0s3V8WKiZ4AAA88wwY6c684nTsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0s3V8WKiZ4AAA88wwY6c684nTsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:19:af:33:24:db:fe:42:f4:36:8c:38:26:3f:71:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2cdd5f162a267800003cf30c18e9cebce274ec5
Validity
Not Before: Nov 4 23:00:28 2025 GMT
Not After : Nov 5 23:00:28 2025 GMT
Subject: CN=8b14783cf2d6958096ed7d3d04984dd00f080ab4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:3f:51:07:f5:43:0b:34:20:ef:54:16:6f:8f:
f6:7a:be:55:67:58:5b:34:58:6b:4a:f6:8b:af:b1:
26:29:10:44:96:d7:65:fe:5a:d2:a1:42:7c:7b:91:
74:2b:87:fe:6c:04:67:6f:62:21:a0:12:f0:39:33:
ab:09:36:08:d7:91:ff:62:17:52:3e:74:cf:72:d6:
0c:e8:be:a6:fa:cc:a0:7c:2a:ed:b6:12:37:96:65:
c4:dd:20:2c:af:ab:12:d2:7c:bc:e6:5b:32:fc:22:
43:92:97:0d:d8:df:d2:e9:13:7c:0f:c9:2b:92:7d:
c3:3e:61:47:4d:93:e9:e8:1a:b1:9d:2e:f3:84:ae:
00:58:a5:9f:30:04:d9:32:35:84:79:78:f4:65:4d:
99:c2:59:89:98:56:41:cc:54:de:23:f4:90:0e:04:
7a:bd:e6:6e:d9:b3:7b:86:0e:1b:10:29:c2:95:44:
eb:1a:95:6f:80:3e:cc:eb:a5:38:46:60:ba:6f:15:
8b:a8:53:1c:87:ea:24:e0:f8:46:b0:da:d1:aa:08:
bd:17:e2:3a:13:42:21:dd:d5:a6:5d:d5:0b:10:36:
34:21:74:5b:6b:4d:ed:b2:e2:af:a8:ee:d0:49:fc:
d8:d0:66:39:9e:dc:16:1d:ff:38:60:2d:c7:5a:26:
5f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:14:78:3C:F2:D6:95:80:96:ED:7D:3D:04:98:4D:D0:0F:08:0A:B4
X509v3 Authority Key Identifier:
keyid:D2:CD:D5:F1:62:A2:67:80:00:03:CF:30:C1:8E:9C:EB:CE:27:4E:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0s3V8WKiZ4AAA88wwY6c684nTsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/deaad8-3113-4512-a9ce-358243c551a2/1/0s3V8WKiZ4AAA88wwY6c684nTsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/deaad8-3113-4512-a9ce-358243c551a2/1/0s3V8WKiZ4AAA88wwY6c684nTsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:a8:64:df:d5:74:45:4c:64:05:d5:88:93:85:d6:4e:21:ed:
92:48:e5:10:2c:ac:03:9a:6f:ed:92:b7:a7:6b:32:70:9f:30:
f8:17:6e:a0:ac:dc:8d:c2:91:7a:48:b6:b3:cc:92:25:d6:42:
e0:72:5a:64:a5:bc:87:8e:d9:96:29:e4:67:3f:b1:69:a3:0b:
8a:04:33:bf:f2:83:5e:99:b3:fb:bf:13:79:44:d3:f2:83:5d:
d5:ae:b9:93:5a:c2:c4:a0:c5:36:18:4d:26:51:9f:03:63:10:
33:3d:87:42:14:50:fd:ee:0d:2e:a8:52:64:14:3e:ad:6f:26:
7a:e2:41:e2:b7:97:38:b5:c0:a9:ed:23:50:9c:28:e9:5b:2a:
ec:d3:b7:e3:39:d2:f7:44:1f:9a:ae:b5:68:25:78:6e:e7:6d:
65:e5:92:90:5f:29:92:94:bb:f3:b9:fa:67:6e:cc:8f:8d:91:
d6:f5:1a:5f:33:b9:c1:fd:be:af:dd:8a:46:a3:2b:69:e4:40:
70:60:d2:dd:ce:11:09:a2:46:b6:15:06:e6:09:b1:08:f6:86:
f1:0f:09:66:8a:65:27:c1:34:77:65:7d:20:b1:b9:bf:94:92:
ae:87:52:96:a7:30:e3:c0:4a:7a:25:1c:1c:f8:8b:f4:63:e1:
5f:81:a4:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:52:09 2025 by rpki-client