Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/ddaf47-4e6d-4994-877b-2a89df1af16a/1/0hNMcoigwXozuLX-jFgGa0RC8YM.mft
File: 0hNMcoigwXozuLX-jFgGa0RC8YM.mft (raw, json)
Hash identifier: Z8LiDyCrGWr8Lb6PG1ocmlBf3K40glvrPWrQrYqOKJM=
Subject key identifier: 8F:18:F2:98:46:9D:AC:46:30:00:89:38:7B:07:F3:EE:D1:7D:A2:36
Authority key identifier: D2:13:4C:72:88:A0:C1:7A:33:B8:B5:FE:8C:58:06:6B:44:42:F1:83
Certificate issuer: /CN=d2134c7288a0c17a33b8b5fe8c58066b4442f183
Certificate serial: 019A4D73DB567DA2B5448F4F95B80B4CB552
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0hNMcoigwXozuLX-jFgGa0RC8YM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/ddaf47-4e6d-4994-877b-2a89df1af16a/1/0hNMcoigwXozuLX-jFgGa0RC8YM.mft
Manifest number: 053D
Signing time: Tue 04 Nov 2025 06:00:29 +0000
Manifest this update: Tue 04 Nov 2025 06:00:29 +0000
Manifest next update: Wed 05 Nov 2025 06:00:29 +0000
Files and hashes: 1: 0hNMcoigwXozuLX-jFgGa0RC8YM.crl (hash: 9LndDl7g2h6mv03FUNLG67TRm0hoPx3BlOXoqMVq5+M=)
2: IjuOSUk_7icZW2FOsDmStZ5tc0Y.roa (hash: /4IVw0ESBk+fPfscovcApWNjH6K3fkBcjRs0stf1FDw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/ddaf47-4e6d-4994-877b-2a89df1af16a/1/0hNMcoigwXozuLX-jFgGa0RC8YM.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/ddaf47-4e6d-4994-877b-2a89df1af16a/1/0hNMcoigwXozuLX-jFgGa0RC8YM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0hNMcoigwXozuLX-jFgGa0RC8YM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:db:56:7d:a2:b5:44:8f:4f:95:b8:0b:4c:b5:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2134c7288a0c17a33b8b5fe8c58066b4442f183
Validity
Not Before: Nov 4 06:00:29 2025 GMT
Not After : Nov 5 06:00:29 2025 GMT
Subject: CN=8f18f298469dac46300089387b07f3eed17da236
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:82:c6:a1:1c:27:b0:8c:82:7c:b2:4d:a6:52:
8c:c2:8c:27:94:7a:ba:ed:e7:c2:78:6a:76:5c:6a:
ec:7a:e6:64:74:18:92:5a:a1:03:ac:d1:01:b8:b9:
3f:91:a9:96:8f:25:2d:41:e4:68:6c:20:1a:6c:ec:
58:80:4d:ba:90:ec:02:ca:72:15:a0:60:97:67:bf:
ae:1c:15:a0:b2:72:58:c5:e9:f9:d4:c7:a8:f4:8b:
ef:1a:9a:d7:2e:8e:6d:3f:d6:2a:ad:70:13:12:41:
91:e7:00:fa:88:18:d1:fd:e2:72:89:8f:74:ea:45:
60:b5:8c:48:de:87:3d:5d:d9:4f:0d:6d:2a:58:8c:
be:0e:db:87:c9:c2:bd:69:83:8b:f1:87:3b:a5:69:
77:77:70:13:59:98:16:65:10:cd:2f:49:b0:76:4a:
0d:c6:cf:b0:03:ec:5f:6b:22:32:cb:04:80:f1:bc:
e9:d4:c4:7e:6a:91:7f:85:2d:cb:9c:b4:a3:2e:ae:
e4:c7:b6:47:2d:02:c9:10:2f:77:6a:2f:f9:0e:92:
ba:5d:ca:39:c0:2b:e1:d8:5b:f0:8e:08:8c:bb:43:
32:dc:6d:82:8b:cd:3d:76:61:a0:d7:6a:30:d5:11:
ef:35:b7:fb:ef:2b:4e:e3:ad:a5:03:e0:a1:ff:88:
96:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:18:F2:98:46:9D:AC:46:30:00:89:38:7B:07:F3:EE:D1:7D:A2:36
X509v3 Authority Key Identifier:
keyid:D2:13:4C:72:88:A0:C1:7A:33:B8:B5:FE:8C:58:06:6B:44:42:F1:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0hNMcoigwXozuLX-jFgGa0RC8YM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ddaf47-4e6d-4994-877b-2a89df1af16a/1/0hNMcoigwXozuLX-jFgGa0RC8YM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ddaf47-4e6d-4994-877b-2a89df1af16a/1/0hNMcoigwXozuLX-jFgGa0RC8YM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:cf:d8:48:51:28:d2:1f:e5:00:52:30:e6:cb:29:b3:f4:a7:
f4:69:d2:9c:d6:9a:3e:ae:09:07:c4:f4:2a:1c:ad:a2:e0:2d:
a3:fe:78:bc:65:b8:c1:68:eb:ca:23:78:57:74:6b:7c:d7:ba:
c3:cc:63:46:81:b3:2a:af:1d:e0:0f:bb:8f:fb:f3:bf:9f:4f:
72:91:4e:cc:f9:46:d0:62:6e:54:88:20:90:9e:f0:95:95:2b:
82:66:d9:83:c3:f7:03:76:52:43:08:0f:66:ea:cb:5c:5b:f0:
c7:d6:d4:6f:4d:ee:78:f6:f1:bb:c0:ae:d9:25:4f:81:3e:26:
ac:76:ad:95:0d:c1:1e:7e:18:c6:92:2d:8f:bb:a7:75:17:3e:
b7:23:53:d5:2e:fd:9b:a9:55:26:cf:4f:4b:99:9f:33:bc:67:
f3:4f:52:0c:b1:e7:7c:4d:73:4b:19:14:e1:1e:be:7d:6d:1d:
ea:74:c4:f4:0a:b1:32:a6:e9:d8:58:42:44:17:1f:ed:9f:1d:
bb:ab:70:86:59:f1:72:36:48:f4:c5:f7:3c:99:47:84:ff:a2:
d7:e1:df:7a:ce:80:a5:66:b9:90:9d:dd:76:1b:5c:1c:bf:7a:
d2:6d:04:2f:5e:de:cb:ed:ea:8c:4d:98:1f:10:f4:96:3e:be:
ab:1a:3f:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:06:18 2025 by rpki-client