Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft
File: 0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft (raw, json)
Hash identifier: 6Eej5rXW5j91ByXU9eQMQYhRBvK3Dt0HpSenFJvCxXU=
Subject key identifier: F9:66:7B:C4:6C:99:87:53:45:B3:9C:EE:84:83:E2:1B:BE:FB:E9:3E
Authority key identifier: D0:31:65:50:23:BD:14:17:31:D5:6F:B8:45:3F:F0:51:4F:72:88:65
Certificate issuer: /CN=d031655023bd141731d56fb8453ff0514f728865
Certificate serial: 019A4D741B85976EE0E00099871082322B65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0DFlUCO9FBcx1W-4RT_wUU9yiGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft
Manifest number: 13C2
Signing time: Tue 04 Nov 2025 06:00:46 +0000
Manifest this update: Tue 04 Nov 2025 06:00:46 +0000
Manifest next update: Wed 05 Nov 2025 06:00:46 +0000
Files and hashes: 1: 0DFlUCO9FBcx1W-4RT_wUU9yiGU.crl (hash: RS82jhszAG+me8N1iANit+5Gv8+vZksxmbzO8POt3TA=)
2: l2z6jen0BvB90JFFcv4xMvXKDU4.roa (hash: 3LW90buItGbBk8vwyzdEvNmU4J6IAwriJoEjk0Q8hlI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0DFlUCO9FBcx1W-4RT_wUU9yiGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:1b:85:97:6e:e0:e0:00:99:87:10:82:32:2b:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d031655023bd141731d56fb8453ff0514f728865
Validity
Not Before: Nov 4 06:00:46 2025 GMT
Not After : Nov 5 06:00:46 2025 GMT
Subject: CN=f9667bc46c99875345b39cee8483e21bbefbe93e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:38:d8:a5:af:74:21:d5:63:71:ae:11:e2:9c:
26:86:80:52:6a:64:56:c6:74:b3:98:62:1d:0b:8e:
52:98:ea:e8:28:7e:18:4c:5c:4d:0c:b6:f2:8c:42:
d7:50:e9:c0:4f:61:7c:48:44:33:0a:e8:e7:3b:2b:
ab:51:de:dc:f2:08:20:12:df:34:5c:2a:ef:b7:7f:
20:c9:b1:6a:be:b3:da:92:84:2e:62:e0:7c:13:35:
e4:c5:ff:af:e0:24:38:32:f5:58:7d:6e:58:4a:25:
4b:d7:96:86:39:11:cc:05:07:cd:33:4e:6e:bd:ed:
8d:88:17:d0:90:2f:57:ed:50:fa:55:1f:da:4a:ee:
da:fb:96:b0:45:c3:11:d8:29:9e:6a:b3:bb:36:56:
1b:67:17:88:7a:16:38:d2:15:79:08:28:54:9a:cc:
3b:03:cd:c0:07:be:80:7e:05:b0:1f:b6:d0:84:49:
e8:7c:2b:4d:6b:b4:5c:b1:a1:11:b8:59:93:bf:6d:
a6:bb:16:72:5a:39:9e:64:52:8b:04:60:ee:8a:b8:
cb:f0:39:15:5b:81:f1:47:ea:39:6b:c0:e6:5b:28:
42:58:1b:8f:c6:09:35:df:d0:b5:b6:1e:76:0a:18:
7a:27:07:fb:e9:48:dd:9f:e5:b7:14:b6:89:8e:8e:
bc:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:66:7B:C4:6C:99:87:53:45:B3:9C:EE:84:83:E2:1B:BE:FB:E9:3E
X509v3 Authority Key Identifier:
keyid:D0:31:65:50:23:BD:14:17:31:D5:6F:B8:45:3F:F0:51:4F:72:88:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0DFlUCO9FBcx1W-4RT_wUU9yiGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:99:48:54:a4:a2:e8:af:2c:c0:be:ce:fd:3a:d8:d0:87:3c:
38:f7:5d:66:ee:be:19:aa:ec:c0:ff:a9:ad:df:b1:7f:eb:75:
ab:f9:d2:b6:2e:58:a3:29:d2:64:2b:00:2c:0a:df:7f:1b:e5:
60:3b:31:c3:42:fe:70:3d:25:1e:c8:66:42:52:45:d0:3d:fc:
14:c1:1d:91:fd:b9:05:af:d5:9b:76:57:1a:f4:b3:12:10:d3:
62:69:96:e1:a1:65:cf:b2:cd:74:d7:b5:fc:61:69:1f:d4:7e:
f5:0a:0e:79:75:8b:e3:d2:2f:f0:aa:5c:7c:32:5f:75:40:db:
89:4e:12:9b:45:e1:c7:6c:6f:b2:68:53:47:02:7d:ce:29:ee:
8c:6f:ea:15:d9:e1:4d:97:93:11:ec:9f:6c:c6:de:2a:61:0a:
29:1d:89:b5:88:0d:86:cc:fb:85:5f:89:5e:bd:8c:c7:9f:f6:
df:c6:40:e5:ba:2b:d4:fc:45:12:25:1a:68:4e:45:1f:65:14:
c3:ba:02:5b:09:d7:f3:24:0d:1e:1d:6c:51:97:30:e4:05:0e:
51:dd:49:35:54:67:d4:ca:92:02:02:38:87:66:91:c1:13:fd:
d2:82:2a:70:d6:01:45:1a:45:ea:47:bd:a5:f1:8a:94:f5:b2:
0b:47:ef:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:09:31 2025 by rpki-client