Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/0fbkNwERz7-WhASFQie4CShRRQ0.mft
File: 0fbkNwERz7-WhASFQie4CShRRQ0.mft (raw, json)
Hash identifier: DQvKJhOZHL1qxjP6NAREkkFeWAUuugx2vfXLp+s0J5A=
Subject key identifier: C9:EE:8D:30:69:1E:3A:84:B0:23:D4:95:7C:C0:25:3E:FC:D5:00:CD
Authority key identifier: D1:F6:E4:37:01:11:CF:BF:96:84:04:85:42:27:B8:09:28:51:45:0D
Certificate issuer: /CN=d1f6e4370111cfbf968404854227b8092851450d
Certificate serial: 019A560950E8005057FC80F79E0474CC4220
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0fbkNwERz7-WhASFQie4CShRRQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/0fbkNwERz7-WhASFQie4CShRRQ0.mft
Manifest number: 0F72
Signing time: Wed 05 Nov 2025 22:00:42 +0000
Manifest this update: Wed 05 Nov 2025 22:00:42 +0000
Manifest next update: Thu 06 Nov 2025 22:00:42 +0000
Files and hashes: 1: 0fbkNwERz7-WhASFQie4CShRRQ0.crl (hash: 9IQ6As6FJoxbiLmmUixS8jDyaji3D3BKaIgdEA/vyJE=)
2: w9laCbfNTG9x8SgYBLM8cjfOdmA.roa (hash: WglJOtLwDI5HpNhEnz7a8Exzapc/0A4kuz517Fgs06A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/0fbkNwERz7-WhASFQie4CShRRQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/0fbkNwERz7-WhASFQie4CShRRQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0fbkNwERz7-WhASFQie4CShRRQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 21:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:56:09:50:e8:00:50:57:fc:80:f7:9e:04:74:cc:42:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1f6e4370111cfbf968404854227b8092851450d
Validity
Not Before: Nov 5 22:00:42 2025 GMT
Not After : Nov 6 22:00:42 2025 GMT
Subject: CN=c9ee8d30691e3a84b023d4957cc0253efcd500cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:5c:6b:06:b0:cf:97:ab:e5:61:87:b6:88:e4:
85:d7:4e:2c:f1:08:cb:71:c0:3e:83:93:ad:ff:c3:
55:23:8d:d0:01:39:42:65:54:d9:03:8c:d4:c6:32:
6b:98:cd:c5:97:30:03:c4:97:50:76:f2:8d:cb:4e:
42:c7:33:ab:a4:e3:a6:3a:fb:ea:fe:d7:8b:ba:ea:
74:26:28:b1:42:9f:f7:a1:89:ee:49:19:3f:7c:28:
ee:8e:9e:3e:44:9f:4f:bd:2d:ee:ef:e1:42:a0:dd:
cd:13:eb:9d:e8:00:e1:1b:68:16:df:79:45:6c:87:
38:ae:12:32:62:33:42:a6:26:09:a8:de:1d:a7:87:
20:76:f0:9c:fa:c4:48:2d:87:98:5d:78:86:2f:cf:
c0:d3:8e:b9:29:d5:3a:35:a6:51:d2:e2:b5:5e:de:
78:56:49:3a:ec:2d:d5:5d:d8:b8:25:1c:ff:3f:4c:
f8:20:e9:1e:20:18:46:2a:e3:47:9c:4d:8c:4e:d4:
f5:a0:cc:ab:be:e6:1d:96:e7:46:aa:7a:43:b0:67:
a9:15:ca:45:85:6d:c0:db:b7:bf:af:e1:30:7a:97:
b3:69:aa:1d:b3:1d:9f:87:a6:06:51:96:47:bd:dc:
32:d9:a7:d7:d3:31:ab:6d:97:43:bf:b1:a2:54:41:
53:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:EE:8D:30:69:1E:3A:84:B0:23:D4:95:7C:C0:25:3E:FC:D5:00:CD
X509v3 Authority Key Identifier:
keyid:D1:F6:E4:37:01:11:CF:BF:96:84:04:85:42:27:B8:09:28:51:45:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0fbkNwERz7-WhASFQie4CShRRQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/0fbkNwERz7-WhASFQie4CShRRQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/0fbkNwERz7-WhASFQie4CShRRQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:7b:03:09:7f:70:99:89:a9:de:ba:db:48:73:af:7f:92:39:
6c:9a:da:d9:29:e7:65:28:ef:76:44:eb:85:fb:00:fb:b3:c1:
95:38:20:92:dd:37:59:08:6a:05:68:69:55:f5:4c:63:bd:17:
12:e3:64:e4:bc:bf:f4:25:2c:0e:48:74:9e:c9:3b:11:5d:fe:
be:be:3c:4c:56:ea:57:01:0f:aa:87:84:b2:52:9a:24:93:7d:
cd:6f:d6:ff:b1:95:b2:64:a1:f3:bd:0f:df:c0:ea:db:94:40:
57:37:2f:8d:1c:30:b5:6e:3d:95:ce:fd:4e:f2:fd:04:3b:39:
4e:3c:5b:47:79:e8:7b:1a:c0:a9:0e:2d:5a:6a:7c:c2:1b:eb:
f3:7d:39:cb:d3:6a:2a:7e:3d:bd:2e:cc:db:ff:f0:f9:25:5b:
2d:ae:0d:ac:2e:2c:0a:63:94:ad:83:8b:01:97:d4:a9:f0:1f:
c8:c4:05:d9:bc:09:f0:ea:c6:32:1c:81:3c:4c:11:d0:40:fb:
aa:8e:32:54:75:be:0d:7f:03:6f:fa:68:da:89:27:2b:89:a2:
ea:3b:ae:66:08:73:bb:f9:3b:ec:8c:c4:0e:ae:ca:8a:ea:83:
e3:c1:74:97:4f:a5:80:43:d5:4e:0c:52:14:29:e3:a2:85:91:
95:5d:da:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 00:41:49 2025 by rpki-client