Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.mft
File: 0vbmtaNP0YtDU4Xbh7s66XR4UQg.mft (raw, json)
Hash identifier: njw0Ot/AZGykPXwP5ELfbJBjCBThES+kc27xT2qGN7U=
Subject key identifier: 02:46:69:65:ED:50:40:91:DC:54:1E:CA:28:9E:20:29:EB:4C:F7:B0
Authority key identifier: D2:F6:E6:B5:A3:4F:D1:8B:43:53:85:DB:87:BB:3A:E9:74:78:51:08
Certificate issuer: /CN=d2f6e6b5a34fd18b435385db87bb3ae974785108
Certificate serial: 019A4E1912FCA32F4489F6D36B1D5A875231
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0vbmtaNP0YtDU4Xbh7s66XR4UQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.mft
Manifest number: 14C0
Signing time: Tue 04 Nov 2025 09:00:57 +0000
Manifest this update: Tue 04 Nov 2025 09:00:57 +0000
Manifest next update: Wed 05 Nov 2025 09:00:57 +0000
Files and hashes: 1: 0vbmtaNP0YtDU4Xbh7s66XR4UQg.crl (hash: RlxxzC98bQNQ+i2SXmFrx9nJKgA376sjeVpeZSIfu4U=)
2: vHnKRxUajbywNAqL6nOx-jDQRUM.roa (hash: 9L1D0lkWg2QABU5Zj6IAqZoeAKA6O0lNRb8Xz0hsQns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0vbmtaNP0YtDU4Xbh7s66XR4UQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:19:12:fc:a3:2f:44:89:f6:d3:6b:1d:5a:87:52:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2f6e6b5a34fd18b435385db87bb3ae974785108
Validity
Not Before: Nov 4 09:00:57 2025 GMT
Not After : Nov 5 09:00:57 2025 GMT
Subject: CN=02466965ed504091dc541eca289e2029eb4cf7b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ef:fc:ff:1b:f6:c7:cc:d0:05:a4:4f:10:53:
dd:f4:6c:1d:bc:83:98:d2:a6:db:30:24:fc:ef:a2:
0f:a9:49:10:44:88:cd:5e:72:78:13:3a:0b:cf:08:
f1:c5:e2:e4:17:1a:08:0e:30:e3:d5:fb:98:f8:07:
0d:ac:cd:d1:1f:e4:a9:c8:f6:bf:47:a6:9c:6d:8f:
da:68:1a:a5:64:ce:c0:b2:b7:61:d3:e6:c6:2e:cd:
39:b1:3d:10:36:d3:76:74:e7:33:fa:75:af:5f:fd:
88:73:a9:80:8a:51:1e:92:b7:a1:85:bc:73:b2:93:
2b:a6:f6:9b:31:80:0b:e0:88:54:70:ae:7b:76:c0:
7a:5d:05:8b:9b:82:79:69:c0:69:53:82:14:a6:a3:
5a:e8:2f:63:84:51:77:e7:8a:9d:97:d2:44:83:d3:
f9:67:57:28:a4:2c:18:53:98:a9:7c:c7:84:03:51:
db:ab:c9:ce:61:54:c7:1a:4c:15:1a:ef:53:1f:0c:
ab:eb:6e:b0:56:c9:6e:cb:fd:9d:ea:86:eb:35:d1:
fa:a1:e1:bd:2c:5e:59:c8:5e:63:b0:9e:33:79:d3:
fd:1f:1a:13:37:dc:31:93:e7:6c:e8:79:2c:fb:01:
bc:45:6f:0f:6a:11:f6:2d:57:21:0b:2d:33:cd:c6:
f5:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:46:69:65:ED:50:40:91:DC:54:1E:CA:28:9E:20:29:EB:4C:F7:B0
X509v3 Authority Key Identifier:
keyid:D2:F6:E6:B5:A3:4F:D1:8B:43:53:85:DB:87:BB:3A:E9:74:78:51:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0vbmtaNP0YtDU4Xbh7s66XR4UQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:09:36:04:22:68:83:ce:3d:53:5e:69:90:c8:04:aa:67:da:
ae:67:49:9b:5c:6a:7c:8c:cb:ee:30:cd:1d:f3:78:1c:46:85:
ca:7f:d2:a6:b4:97:7c:3e:8a:d2:6d:40:53:da:2e:25:fa:83:
b8:91:18:0b:2d:64:3a:9b:8e:ed:03:ca:8c:74:5f:91:c9:d8:
0f:f8:79:1b:ad:38:96:94:cf:67:79:ec:4a:23:62:f8:b1:e3:
0b:65:b8:7b:ef:9f:17:6a:1f:b7:57:98:77:8d:51:ad:10:ca:
55:8d:a4:b1:fe:43:6d:a9:61:8f:33:fe:35:e6:9b:2d:d9:6a:
ad:7a:b7:64:98:03:68:9b:c9:e7:83:50:66:94:0f:09:b1:26:
f5:70:02:f8:34:68:d7:cc:13:b5:75:b5:47:aa:7c:39:f1:e1:
b2:ea:60:07:26:6e:31:bd:1c:5f:5a:1d:d4:55:d0:95:b7:f9:
90:c1:9c:69:de:2b:74:48:ca:45:aa:27:0b:7c:ad:85:b3:05:
5b:a8:26:55:e0:88:d0:94:51:17:19:c2:ae:95:ae:a8:ee:18:
be:fa:22:ec:06:c4:d1:9c:44:d7:83:83:dd:9a:57:78:ad:87:
f8:28:02:b0:f4:43:9a:c4:fb:b3:2e:bf:e0:42:2e:f1:0b:56:
df:2e:f4:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:47:05 2025 by rpki-client