Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0fc3f6-6a1a-4cdc-a147-da8b2d576bf1/1/0jxZJVkZvdmrA73hxceIBixLmfM.mft
File: 0jxZJVkZvdmrA73hxceIBixLmfM.mft (raw, json)
Hash identifier: WEZVx4E4Q7ZmyarpUbsrFDooUzYqYwpyj5xnq52x3L8=
Subject key identifier: E7:CD:D4:A3:82:25:DF:D1:0C:16:21:4B:0A:C9:BB:ED:67:DC:D5:6E
Authority key identifier: D2:3C:59:25:59:19:BD:D9:AB:03:BD:E1:C5:C7:88:06:2C:4B:99:F3
Certificate issuer: /CN=d23c59255919bdd9ab03bde1c5c788062c4b99f3
Certificate serial: 019A500705A69EDF24E3C426BB341E3BB181
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0jxZJVkZvdmrA73hxceIBixLmfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0fc3f6-6a1a-4cdc-a147-da8b2d576bf1/1/0jxZJVkZvdmrA73hxceIBixLmfM.mft
Manifest number: 0840
Signing time: Tue 04 Nov 2025 18:00:28 +0000
Manifest this update: Tue 04 Nov 2025 18:00:28 +0000
Manifest next update: Wed 05 Nov 2025 18:00:28 +0000
Files and hashes: 1: 0jxZJVkZvdmrA73hxceIBixLmfM.crl (hash: IeBkj6r1eACeWEH590mVEI8PArIE7DuL9DpWDDkVWcs=)
2: JC586knHAJCWuyAHAdSdP6vCZvc.roa (hash: 5tWj8kAF7Tk8U+7sz2E535dJcNrZC7NIfrQwoPJI7rw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/0fc3f6-6a1a-4cdc-a147-da8b2d576bf1/1/0jxZJVkZvdmrA73hxceIBixLmfM.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/0fc3f6-6a1a-4cdc-a147-da8b2d576bf1/1/0jxZJVkZvdmrA73hxceIBixLmfM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0jxZJVkZvdmrA73hxceIBixLmfM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:05:a6:9e:df:24:e3:c4:26:bb:34:1e:3b:b1:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d23c59255919bdd9ab03bde1c5c788062c4b99f3
Validity
Not Before: Nov 4 18:00:28 2025 GMT
Not After : Nov 5 18:00:28 2025 GMT
Subject: CN=e7cdd4a38225dfd10c16214b0ac9bbed67dcd56e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:45:e3:c2:be:0e:83:e2:1a:60:dd:3f:9a:96:
0e:8a:8c:24:19:fa:92:8d:c4:3d:9a:a9:a3:09:f5:
1b:1d:e5:da:8c:e9:14:38:bc:86:83:6f:53:34:ea:
be:91:20:56:2f:f9:b2:58:45:2a:13:1e:80:21:4c:
d1:dc:f0:af:4c:ff:56:bc:b5:a2:e9:0e:ee:c7:f8:
84:e6:f5:13:f6:71:5e:65:43:41:2d:d1:e9:47:8e:
44:b2:ff:e9:d7:4a:89:d8:8f:d0:b2:99:a6:bb:44:
68:e9:26:f7:f7:a0:d5:fc:bc:bb:be:77:d2:8b:03:
bf:9f:db:df:e2:a5:20:57:57:34:a0:29:d9:71:d1:
0f:25:a5:cb:d6:64:84:3b:e1:7c:a4:ac:3e:d7:bf:
62:49:62:02:11:0c:0a:05:00:35:0b:cc:e9:88:41:
81:03:1d:d4:b7:18:70:f8:9d:bb:09:f5:45:c6:a8:
b3:8a:f4:80:bd:e0:af:7d:28:14:87:4f:3b:26:2a:
30:97:7a:4a:2d:9a:a3:30:e6:03:3a:a9:23:98:fd:
41:40:e1:64:06:fb:7b:38:6a:7b:8d:ec:f6:52:12:
6d:cf:52:bf:77:f9:12:16:20:44:6a:d0:5c:89:8d:
53:25:6e:bb:32:ee:07:5b:05:13:03:05:26:71:9a:
20:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:CD:D4:A3:82:25:DF:D1:0C:16:21:4B:0A:C9:BB:ED:67:DC:D5:6E
X509v3 Authority Key Identifier:
keyid:D2:3C:59:25:59:19:BD:D9:AB:03:BD:E1:C5:C7:88:06:2C:4B:99:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jxZJVkZvdmrA73hxceIBixLmfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0fc3f6-6a1a-4cdc-a147-da8b2d576bf1/1/0jxZJVkZvdmrA73hxceIBixLmfM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0fc3f6-6a1a-4cdc-a147-da8b2d576bf1/1/0jxZJVkZvdmrA73hxceIBixLmfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:5f:17:52:e3:4f:38:39:f9:05:aa:c5:d3:e2:3a:78:2d:db:
1a:ee:17:7d:32:e3:fa:a7:75:a9:be:e5:21:b0:9e:c0:67:6b:
eb:94:51:c8:2d:64:ad:55:e6:82:33:ea:cf:35:1e:35:fe:9b:
a9:3d:7f:f5:8c:d6:fa:62:53:00:a0:83:e2:3f:52:0e:59:80:
76:98:93:1f:09:e2:c3:c7:4d:a6:fe:54:bd:f4:40:47:93:86:
55:27:68:96:51:82:f1:fd:ae:2f:10:c2:86:78:ce:1f:26:45:
62:62:1b:33:93:b7:4d:25:06:2a:4c:67:6d:e9:6a:e1:28:4d:
a8:b1:4d:2f:37:9a:2c:92:aa:ce:b7:26:c4:68:05:43:e0:86:
0f:04:ad:d8:4f:a8:ea:3e:51:7e:fb:be:6e:15:71:33:14:53:
75:21:cf:e7:4e:64:24:d7:a2:d7:f8:93:4e:88:50:f1:0d:1d:
fe:8f:87:14:4b:d1:a2:5f:53:1c:7e:8a:c3:68:0a:03:7f:4d:
5a:1c:93:3c:6f:65:81:1f:ba:f4:52:1b:8d:15:68:75:6d:de:
9a:47:a8:35:e4:38:e7:ed:65:a9:c5:63:b3:76:c6:37:fe:85:
e0:8a:a7:7a:06:eb:61:e0:d2:50:82:c0:fa:38:5b:66:c2:db:
80:0e:18:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:06:54 2025 by rpki-client