Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/9cb34a-c372-482e-81ca-8f639c5a1a72/1/0Lf8iwWNH0mZAajC-G5irpUTZ5c.mft
File: 0Lf8iwWNH0mZAajC-G5irpUTZ5c.mft (raw, json)
Hash identifier: 8G/dpSHhovRwm+iKG9t2T/eyP58DCzhEVVtASrgZUBM=
Subject key identifier: 21:43:A1:53:01:1C:E2:2C:FE:B4:CB:25:2D:9D:DD:AB:E2:CB:16:58
Authority key identifier: D0:B7:FC:8B:05:8D:1F:49:99:01:A8:C2:F8:6E:62:AE:95:13:67:97
Certificate issuer: /CN=d0b7fc8b058d1f499901a8c2f86e62ae95136797
Certificate serial: 019A4EF4DCEAFD29A174A8B54476E5864B8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Lf8iwWNH0mZAajC-G5irpUTZ5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/9cb34a-c372-482e-81ca-8f639c5a1a72/1/0Lf8iwWNH0mZAajC-G5irpUTZ5c.mft
Manifest number: 0CFA
Signing time: Tue 04 Nov 2025 13:01:01 +0000
Manifest this update: Tue 04 Nov 2025 13:01:01 +0000
Manifest next update: Wed 05 Nov 2025 13:01:01 +0000
Files and hashes: 1: 0Lf8iwWNH0mZAajC-G5irpUTZ5c.crl (hash: PaxU8mRAItuFdRVG1BqzGRxBs7WJxoZXfRTPCsVvRhw=)
2: IakaUVIwolxABf_iFG6RX8yq8dc.roa (hash: 7jt2eahvNjy4JlonD7RGKwXoWtuGwCznkksLfkvVUZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/9cb34a-c372-482e-81ca-8f639c5a1a72/1/0Lf8iwWNH0mZAajC-G5irpUTZ5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/9cb34a-c372-482e-81ca-8f639c5a1a72/1/0Lf8iwWNH0mZAajC-G5irpUTZ5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Lf8iwWNH0mZAajC-G5irpUTZ5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:dc:ea:fd:29:a1:74:a8:b5:44:76:e5:86:4b:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0b7fc8b058d1f499901a8c2f86e62ae95136797
Validity
Not Before: Nov 4 13:01:01 2025 GMT
Not After : Nov 5 13:01:01 2025 GMT
Subject: CN=2143a153011ce22cfeb4cb252d9dddabe2cb1658
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:79:8b:fd:95:f1:80:da:49:e4:a8:25:d0:0e:
dd:44:00:de:db:8d:2c:fe:4a:47:79:28:d4:84:34:
3c:dd:fe:37:be:08:d5:93:13:66:d9:30:a8:95:10:
fd:51:2a:bc:a8:a6:83:0e:35:5a:d4:6f:f7:65:07:
55:f9:8a:76:f2:7e:43:5f:2f:ec:45:9c:f9:e9:f1:
b5:d8:d9:ad:2f:36:18:58:64:d8:1c:a0:a5:a1:f4:
dd:12:dc:31:a2:64:f9:d1:96:bf:cf:81:cb:8f:75:
93:7f:5c:62:f9:be:62:47:75:6e:43:b0:fe:36:2f:
10:b7:24:3b:ed:b2:fe:1b:ed:65:1c:29:a8:a2:f2:
37:fa:7c:3c:f4:92:82:50:bd:f5:d2:26:cd:96:0f:
25:82:08:25:f0:2f:d9:3b:5a:f0:f8:2e:ed:93:3d:
00:b8:b8:a3:5f:68:d8:5b:db:17:9d:b3:0e:a4:a3:
60:88:64:2e:fb:a7:6b:0c:33:33:95:a6:12:d4:86:
82:4e:8e:13:91:49:b9:c2:c9:ee:bc:d1:55:3a:63:
aa:a0:99:12:ac:ad:50:7f:4a:b1:71:4d:42:e7:eb:
e6:e4:9d:19:d7:42:36:40:31:4a:de:eb:1a:e3:aa:
13:6a:f3:1a:6d:b4:ea:06:5f:3d:a4:e5:aa:f4:6a:
e0:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:43:A1:53:01:1C:E2:2C:FE:B4:CB:25:2D:9D:DD:AB:E2:CB:16:58
X509v3 Authority Key Identifier:
keyid:D0:B7:FC:8B:05:8D:1F:49:99:01:A8:C2:F8:6E:62:AE:95:13:67:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Lf8iwWNH0mZAajC-G5irpUTZ5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9cb34a-c372-482e-81ca-8f639c5a1a72/1/0Lf8iwWNH0mZAajC-G5irpUTZ5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9cb34a-c372-482e-81ca-8f639c5a1a72/1/0Lf8iwWNH0mZAajC-G5irpUTZ5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:ca:6b:6c:3f:f8:de:ce:f0:d9:63:75:d2:db:10:99:63:8d:
af:8c:9c:a1:49:2a:79:ba:38:aa:c6:a5:4f:b0:7c:cd:57:ca:
66:18:7a:81:88:3f:70:d6:70:cb:27:e9:d5:c7:3f:a4:0d:15:
3c:4d:2b:49:af:b0:de:2b:63:fc:04:d3:04:56:61:68:ed:bd:
c0:fb:fa:6e:57:dc:87:35:73:b5:ab:9d:03:6b:f1:51:b6:0c:
c9:e5:c6:d0:19:fb:f3:5b:95:61:bc:a6:21:23:5c:c9:28:72:
f8:ef:0b:95:47:65:fd:69:42:bc:bd:c3:be:0e:0a:a6:0b:9e:
18:da:ca:e8:f6:46:9f:52:f6:27:93:83:24:3b:70:18:6b:31:
1c:1c:3e:b5:e8:b2:40:e2:77:c3:03:46:57:62:4e:45:ae:04:
3f:1b:92:83:51:20:07:c8:80:f7:94:e6:46:5e:04:e2:47:db:
bf:51:96:8c:d2:cb:1f:6d:40:c4:9e:66:34:e5:4a:85:45:20:
b8:1d:c5:70:ec:88:d6:d0:de:ab:61:e8:64:8c:fa:01:d5:ef:
7c:20:fc:d8:1f:28:7d:b4:9c:02:fd:66:12:00:5b:80:2b:ea:
d2:72:85:53:38:65:23:df:39:cf:3b:01:e2:61:f7:c6:12:03:
e4:6c:8f:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:53:15 2025 by rpki-client