Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.mft
File: 0QOvGXZFpJQcbNsIZprwCLeRAr4.mft (raw, json)
Hash identifier: hMvgSRUc2odzV8sYfqzbXPHTcatvyYJXCmPpgFe1cbY=
Subject key identifier: FD:32:D1:84:52:FD:CA:88:94:1A:D1:28:8B:F1:9E:D3:CD:D7:54:E3
Authority key identifier: D1:03:AF:19:76:45:A4:94:1C:6C:DB:08:66:9A:F0:08:B7:91:02:BE
Certificate issuer: /CN=d103af197645a4941c6cdb08669af008b79102be
Certificate serial: 019A52D1FFCC784AC9752290AD4A99AB3785
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0QOvGXZFpJQcbNsIZprwCLeRAr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.mft
Manifest number: 1080
Signing time: Wed 05 Nov 2025 07:01:25 +0000
Manifest this update: Wed 05 Nov 2025 07:01:25 +0000
Manifest next update: Thu 06 Nov 2025 07:01:25 +0000
Files and hashes: 1: 0QOvGXZFpJQcbNsIZprwCLeRAr4.crl (hash: MxPwjTHo5DfMfeOfhbUcK1FANRng5SoqKz5LC5OTzuQ=)
2: Ns-TL5URBIXkWjSrsIX0f-jA8r8.roa (hash: rkMxs94A3zqfZql4p2TlDjcRtvwJLskmzewtRu09cI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0QOvGXZFpJQcbNsIZprwCLeRAr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:ff:cc:78:4a:c9:75:22:90:ad:4a:99:ab:37:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d103af197645a4941c6cdb08669af008b79102be
Validity
Not Before: Nov 5 07:01:25 2025 GMT
Not After : Nov 6 07:01:25 2025 GMT
Subject: CN=fd32d18452fdca88941ad1288bf19ed3cdd754e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8c:2e:18:5b:d2:23:f9:8e:94:02:48:ec:72:
8b:74:a8:57:5d:4a:2c:cb:af:7d:52:f4:30:f6:27:
12:a2:ef:1b:b8:84:17:8d:62:c4:28:4a:ee:96:1f:
f1:1c:8c:d8:b7:92:93:f4:d4:6c:ac:f9:77:4f:52:
95:98:72:b6:e9:ac:56:af:55:f4:83:25:b6:1e:73:
69:d5:ce:f7:06:7c:ab:97:f9:06:67:fb:6c:b1:4c:
3a:6b:4c:c2:5a:cd:5d:64:45:a4:8a:05:47:60:fe:
2c:30:00:80:07:de:cb:e6:e0:67:18:04:79:1b:e1:
36:f8:9e:ec:2e:0e:b9:15:99:19:ad:34:7a:99:a4:
44:3a:f2:a2:dc:55:ba:a9:2b:56:8b:d5:a3:7a:f2:
42:3b:94:49:95:6f:d2:a5:f7:19:67:7a:29:31:b1:
32:0f:3f:19:99:73:d8:e9:7f:5a:3a:63:6e:13:e6:
0a:ce:40:71:d2:74:2b:6b:76:b4:33:20:87:94:34:
d4:c7:07:ca:c0:ef:ab:71:67:7c:4d:4f:d7:8d:b2:
a9:dd:e4:c3:0b:99:9f:50:cf:7b:dd:b5:e2:72:cc:
3c:10:79:e3:3e:2a:a5:ad:a1:86:ba:be:7b:ed:ed:
35:89:9f:d6:f7:ad:ca:a8:ee:f4:6a:03:c0:31:41:
2e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:32:D1:84:52:FD:CA:88:94:1A:D1:28:8B:F1:9E:D3:CD:D7:54:E3
X509v3 Authority Key Identifier:
keyid:D1:03:AF:19:76:45:A4:94:1C:6C:DB:08:66:9A:F0:08:B7:91:02:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0QOvGXZFpJQcbNsIZprwCLeRAr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:15:27:31:ee:63:37:91:cc:23:ab:8b:a9:6e:4a:16:46:bc:
b6:03:1a:13:84:90:f8:c2:9b:95:3e:da:3b:d0:bd:75:1c:83:
12:cb:7a:0d:fe:50:02:c6:cb:f5:a3:15:ad:75:e2:4a:ed:b3:
9e:70:02:db:4b:9d:ad:42:f3:4c:1b:7c:21:6f:b2:5c:4a:00:
70:b1:3a:3f:e9:2d:0b:76:96:b5:fc:70:60:c5:f5:7a:6a:84:
07:86:33:86:11:1e:a7:96:19:6c:a8:da:d7:8e:a8:54:c6:6d:
4b:63:b1:bb:6d:fb:41:9c:d3:2a:13:ec:cc:3d:b0:82:91:85:
0b:57:69:72:5f:90:1b:19:14:d1:42:92:e2:7d:ac:d3:49:52:
97:a6:3e:5c:b1:51:00:e4:2d:c9:db:18:8e:c8:d1:ae:1e:0b:
d4:a5:62:aa:fb:44:04:d1:dc:68:d1:d3:e2:46:98:d6:1d:ea:
30:b4:e6:55:ec:0b:84:0b:0d:88:ed:7c:23:dd:66:36:1d:76:
0d:2e:15:36:10:c3:78:dc:06:d0:b9:06:52:07:86:76:f4:59:
9b:06:3a:5d:d0:64:23:56:18:24:d3:b0:45:b8:96:69:94:58:
c6:30:a6:2c:0a:6a:e1:fd:08:8e:b0:00:69:e1:6f:67:ab:bc:
82:9e:b9:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:22:03 2025 by rpki-client