Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/b5e2cd-5fb0-49d5-bc65-89f2df80c345/1/0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.mft
File: 0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.mft (raw, json)
Hash identifier: 3pGCXPIOiL/pia+424cTK5WA8/Mazaky7BkJDdw3Uog=
Subject key identifier: 87:AA:02:F3:0C:B2:EC:C7:56:07:D5:68:71:F5:A8:B7:A2:CB:55:56
Authority key identifier: D1:6B:D0:E8:CB:54:98:C7:F9:AC:A1:BB:FC:F9:DB:37:75:65:E8:DF
Certificate issuer: /CN=d16bd0e8cb5498c7f9aca1bbfcf9db377565e8df
Certificate serial: 019A4DE1E58BF53B40A2A8C01940E131A553
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/b5e2cd-5fb0-49d5-bc65-89f2df80c345/1/0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.mft
Manifest number: 13CA
Signing time: Tue 04 Nov 2025 08:00:41 +0000
Manifest this update: Tue 04 Nov 2025 08:00:41 +0000
Manifest next update: Wed 05 Nov 2025 08:00:41 +0000
Files and hashes: 1: 0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.crl (hash: BsyNgjB/KHXNqdCVYrdLXKtNWrnBr3qNmQQTSNiPPXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/b5e2cd-5fb0-49d5-bc65-89f2df80c345/1/0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/b5e2cd-5fb0-49d5-bc65-89f2df80c345/1/0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:e5:8b:f5:3b:40:a2:a8:c0:19:40:e1:31:a5:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d16bd0e8cb5498c7f9aca1bbfcf9db377565e8df
Validity
Not Before: Nov 4 08:00:41 2025 GMT
Not After : Nov 5 08:00:41 2025 GMT
Subject: CN=87aa02f30cb2ecc75607d56871f5a8b7a2cb5556
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:1b:17:7c:ef:9a:9f:00:90:0d:3a:36:f2:c2:
20:15:ad:7e:1c:e9:9f:da:87:43:b8:04:ac:cf:ad:
1d:31:46:f3:80:84:72:32:85:56:e3:b1:13:77:aa:
da:07:67:55:8a:bf:de:9f:bd:29:78:84:15:0b:d8:
c5:e3:cc:d5:16:f3:85:56:ec:0f:87:9e:b3:d5:3c:
9a:e5:95:5f:9d:6d:24:77:0d:81:92:f9:ec:5b:7e:
a2:9b:85:19:58:c1:64:8e:00:44:0b:b6:30:31:44:
8c:1d:2c:dc:f5:d4:55:e2:3f:2b:11:80:d4:18:6b:
16:58:a1:86:e3:d6:a4:93:de:c7:e3:49:a8:7b:a1:
c5:df:b6:bf:44:37:be:6f:1d:d2:60:88:08:db:ff:
65:92:f8:97:49:20:81:e4:68:8a:a4:8a:c1:16:4e:
ee:9a:81:93:a7:27:e5:6a:c5:c2:f9:4d:f8:2d:23:
3d:13:0f:16:5c:aa:ee:4f:98:76:0b:02:f4:c2:51:
14:38:83:c6:9a:fa:d6:95:b5:9c:76:9c:9d:d9:81:
a9:64:30:4a:31:4b:f3:69:4e:8a:96:15:01:54:05:
1a:2a:bf:79:a1:21:18:c8:aa:a3:c0:a3:0e:9e:96:
c6:40:80:66:2a:cc:0a:32:9b:5e:85:ba:59:e4:2c:
26:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:AA:02:F3:0C:B2:EC:C7:56:07:D5:68:71:F5:A8:B7:A2:CB:55:56
X509v3 Authority Key Identifier:
keyid:D1:6B:D0:E8:CB:54:98:C7:F9:AC:A1:BB:FC:F9:DB:37:75:65:E8:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/b5e2cd-5fb0-49d5-bc65-89f2df80c345/1/0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/b5e2cd-5fb0-49d5-bc65-89f2df80c345/1/0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:cb:2b:f4:1b:1d:ed:ad:0e:c7:90:f0:1c:06:1b:5b:a4:9f:
0b:52:d2:13:bd:0e:f0:00:30:81:35:50:4b:fe:35:2f:c6:7a:
fa:e4:e7:ff:ce:9e:31:95:e6:03:33:4a:94:8b:b7:32:a6:17:
27:2d:f7:b5:5e:9b:c6:61:9d:0e:09:d0:8b:1b:7d:75:90:46:
40:95:8d:ec:ef:34:1b:d4:bb:7a:ed:90:02:19:b8:59:35:64:
78:54:03:b5:01:40:12:6f:47:b9:a2:0d:03:be:49:cd:d9:e7:
9a:a3:99:21:31:71:e0:eb:f2:0e:82:5d:c6:a8:e3:db:f6:8f:
4a:eb:7c:4c:79:87:af:5e:1c:87:b5:79:fc:f9:44:78:fe:5c:
c4:2e:56:de:09:49:ae:32:2b:10:59:9f:1f:52:d0:0c:af:e2:
12:c4:c8:bc:5c:b5:d3:b4:bc:ec:bb:f8:e3:13:9e:47:6f:83:
0a:cf:ff:60:8e:3b:c0:97:fa:a5:10:a8:14:e7:b5:74:85:2e:
2f:d6:82:6f:d8:9c:db:f3:72:75:af:4d:ea:21:5c:1c:4f:19:
b1:9c:0c:a3:b7:7d:b5:ac:01:8e:39:18:78:95:0a:5a:93:00:
7a:69:83:3b:e4:2c:62:83:29:bc:33:c0:26:d5:68:41:95:89:
e3:31:88:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:20:20 2025 by rpki-client