Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/0LxS2U5i76Pr8syhb0LS5WBziPA.mft
File: 0LxS2U5i76Pr8syhb0LS5WBziPA.mft (raw, json)
Hash identifier: 7m9K3IQKyJv6Ag+kjohxWnNfTvhLMpJHLQNa1omf/jI=
Subject key identifier: 61:8C:A4:C9:D0:FB:1D:A3:62:87:8E:90:90:FF:6E:F3:61:CC:98:49
Authority key identifier: D0:BC:52:D9:4E:62:EF:A3:EB:F2:CC:A1:6F:42:D2:E5:60:73:88:F0
Certificate issuer: /CN=d0bc52d94e62efa3ebf2cca16f42d2e5607388f0
Certificate serial: 019A522C9088C6A615551FF36D62433130E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0LxS2U5i76Pr8syhb0LS5WBziPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/0LxS2U5i76Pr8syhb0LS5WBziPA.mft
Manifest number: 0129
Signing time: Wed 05 Nov 2025 04:00:43 +0000
Manifest this update: Wed 05 Nov 2025 04:00:43 +0000
Manifest next update: Thu 06 Nov 2025 04:00:43 +0000
Files and hashes: 1: 0LxS2U5i76Pr8syhb0LS5WBziPA.crl (hash: WbTAuulYF0szp330yrU5Vplk1Sb5OSrbqyOI+zc8xqQ=)
2: L3NuWTe_ZTmjBo-VlxbB6Itqb5c.roa (hash: 1CPUHzNqQbUf2XOYArYRqgpqG1Ievq6YnuLxsGd4YuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/0LxS2U5i76Pr8syhb0LS5WBziPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/0LxS2U5i76Pr8syhb0LS5WBziPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0LxS2U5i76Pr8syhb0LS5WBziPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:90:88:c6:a6:15:55:1f:f3:6d:62:43:31:30:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0bc52d94e62efa3ebf2cca16f42d2e5607388f0
Validity
Not Before: Nov 5 04:00:43 2025 GMT
Not After : Nov 6 04:00:43 2025 GMT
Subject: CN=618ca4c9d0fb1da362878e9090ff6ef361cc9849
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:21:b7:49:bc:a9:c5:c3:73:cd:db:c9:d8:4e:
b8:c8:b3:ce:68:3d:d8:36:4f:24:67:91:15:bb:08:
f7:e5:1a:4c:6d:7d:2d:85:94:f0:51:80:8f:f0:db:
ac:d6:e0:d1:77:07:98:8d:07:8d:5c:05:d1:6c:fd:
74:05:bd:55:3f:a6:4d:c3:04:ce:b7:79:25:7f:01:
bf:0d:85:83:fd:5f:73:2d:2c:16:01:2a:ab:08:cd:
ac:3c:d9:99:ed:9a:74:54:cc:c8:ba:fe:4f:52:6b:
ab:76:21:80:b8:f2:7c:d3:b1:cd:51:3f:1a:2e:6d:
bf:7a:d0:19:8a:e8:ef:7a:43:c6:72:00:d6:4a:54:
d4:58:b1:bf:3e:b9:bc:4d:f1:86:ad:d5:d3:2b:41:
c2:db:8c:2a:df:78:4d:28:81:7f:24:1d:5b:51:3f:
62:62:d1:25:4b:43:b8:15:b7:aa:a4:41:cb:08:b5:
11:a7:06:89:76:72:45:fe:04:6a:64:7d:61:bb:95:
7a:2e:cb:a0:98:e8:49:25:55:a6:df:c5:7c:bf:1a:
f4:79:11:88:de:73:48:ba:59:19:2a:8d:55:ba:df:
99:d7:e7:e8:df:96:a9:1f:8b:9a:45:45:47:82:30:
bd:cb:29:90:b6:43:64:33:95:ed:ba:88:a2:8d:18:
5f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:8C:A4:C9:D0:FB:1D:A3:62:87:8E:90:90:FF:6E:F3:61:CC:98:49
X509v3 Authority Key Identifier:
keyid:D0:BC:52:D9:4E:62:EF:A3:EB:F2:CC:A1:6F:42:D2:E5:60:73:88:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0LxS2U5i76Pr8syhb0LS5WBziPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/0LxS2U5i76Pr8syhb0LS5WBziPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/0LxS2U5i76Pr8syhb0LS5WBziPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:e2:ea:bb:e8:a8:9e:38:4f:cb:af:32:6b:84:8c:24:0a:d6:
81:b0:28:8f:b2:a0:5c:26:c7:47:f0:b1:e6:7e:fd:38:cc:7f:
57:f1:4a:61:51:00:04:08:99:96:be:55:27:5e:3e:f5:aa:90:
14:27:bf:66:8b:43:f5:3e:01:b8:6b:1b:e4:1b:0d:69:19:45:
05:a6:6a:06:74:ec:dd:18:8b:b7:2a:a2:7f:4f:cb:20:6b:83:
83:cd:8f:c3:20:b5:c6:7e:4b:72:f6:61:48:49:db:f3:8f:bb:
bb:5f:5d:c4:5f:cc:31:a7:72:f8:50:e3:2e:f4:d1:28:4d:df:
69:f0:0a:e0:6c:48:3d:00:24:bf:87:7c:73:79:95:11:6d:49:
ef:c6:b6:b5:8f:a3:27:02:47:af:83:e8:fe:9b:46:2f:57:59:
76:14:5b:04:a9:30:44:87:d8:51:8e:29:78:dd:3f:8c:e4:a3:
55:44:dc:5f:2c:09:41:ae:dd:e1:0a:10:c1:3a:40:68:d1:64:
ba:8a:5b:f6:bd:77:d3:a1:13:a0:17:23:92:73:73:b6:9f:62:
93:fb:00:5c:00:0d:84:b8:b8:ff:91:58:fe:cf:6f:37:8b:31:
f0:03:c7:8a:dd:92:64:70:28:9f:95:5e:48:c4:5a:a5:02:52:
7f:4b:bb:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:52:43 2025 by rpki-client