Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.mft
File: 0RaDXQN3hmIKnp96DjYEmLtlQSc.mft (raw, json)
Hash identifier: RZmMoADUofR2m5V6j1KFtkKqLTeltGAavK5hKnnFE9g=
Subject key identifier: D2:67:0D:9B:92:AC:A4:36:12:D5:FE:FE:F3:C7:9A:DA:C7:5C:5E:51
Authority key identifier: D1:16:83:5D:03:77:86:62:0A:9E:9F:7A:0E:36:04:98:BB:65:41:27
Certificate issuer: /CN=d116835d037786620a9e9f7a0e360498bb654127
Certificate serial: 019A4EF5A3D553C5CF5CD6D374E00B6B6EF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0RaDXQN3hmIKnp96DjYEmLtlQSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.mft
Manifest number: 0B24
Signing time: Tue 04 Nov 2025 13:01:52 +0000
Manifest this update: Tue 04 Nov 2025 13:01:52 +0000
Manifest next update: Wed 05 Nov 2025 13:01:52 +0000
Files and hashes: 1: 0RaDXQN3hmIKnp96DjYEmLtlQSc.crl (hash: Dx6cMBmh5vDlbj4k9aWZQ9+0/jkzHMPTM7BR/iorW3Y=)
2: Ve2RrvNi_87VDfl21Lq8fKe-sYc.roa (hash: Bwg7wRCqbsHk5Pn4Ah5pnRiyg8rpwcrSFyOQ2YGllyY=)
3: nc0QnNEGuF1kLi9w3egLsBhEL6Y.roa (hash: KWBWDWBG7Sj1CyJ1paoXUYeG29P/pnqgE+4DRW4DIYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0RaDXQN3hmIKnp96DjYEmLtlQSc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:a3:d5:53:c5:cf:5c:d6:d3:74:e0:0b:6b:6e:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d116835d037786620a9e9f7a0e360498bb654127
Validity
Not Before: Nov 4 13:01:52 2025 GMT
Not After : Nov 5 13:01:52 2025 GMT
Subject: CN=d2670d9b92aca43612d5fefef3c79adac75c5e51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3f:c0:b5:4e:5a:fc:37:5d:ee:cf:49:2f:fa:
99:3a:5b:b4:13:ae:1b:ba:7b:2c:26:fd:b4:f2:03:
ab:55:1f:c3:0e:95:1f:69:d9:39:e1:88:37:15:51:
4f:11:09:bc:3f:82:28:8b:e2:e5:82:92:2d:c8:40:
aa:d5:19:0f:71:fe:8e:7b:12:69:b0:7b:d0:8f:48:
6e:ad:ac:3e:f3:4b:4e:1f:46:c1:56:f1:8f:06:8c:
7e:d6:d0:03:58:f4:43:ae:6d:d9:07:fb:13:84:3f:
21:b1:21:f3:8a:f2:7b:ed:f3:5e:75:db:c3:db:41:
2f:1c:17:ea:cd:f2:c5:89:60:a8:23:a0:7e:a2:34:
32:f1:dd:a5:dd:4a:88:7e:f9:10:73:f8:b2:c3:6a:
39:9d:5f:f0:25:fe:a0:85:aa:64:70:d5:67:dd:de:
ef:cd:c8:4d:da:a0:14:b4:a3:c0:cd:66:bb:d9:fb:
8f:8a:44:f8:29:6f:8c:b1:f2:27:ee:03:c6:9f:77:
78:67:90:9a:0c:de:0d:8c:6a:b1:9c:37:13:4c:51:
a2:c0:f8:c8:f0:75:85:97:65:c2:69:31:29:5c:6a:
05:bd:69:95:4f:ca:5c:c2:2c:68:e3:27:ac:df:b2:
c6:a7:2c:9a:52:b4:c3:77:60:33:83:06:86:76:0c:
e3:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:67:0D:9B:92:AC:A4:36:12:D5:FE:FE:F3:C7:9A:DA:C7:5C:5E:51
X509v3 Authority Key Identifier:
keyid:D1:16:83:5D:03:77:86:62:0A:9E:9F:7A:0E:36:04:98:BB:65:41:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0RaDXQN3hmIKnp96DjYEmLtlQSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:39:86:f2:f6:84:9e:4c:0f:e5:12:63:bc:7e:e4:94:ba:41:
75:f4:64:0a:2f:78:94:d4:68:d7:ca:56:ae:86:c9:36:f9:60:
6b:4f:40:05:32:a3:f0:13:6d:5a:a9:8a:7a:15:86:07:0a:c9:
6e:b9:a9:46:f8:6c:1e:03:47:ec:29:cf:e8:41:fc:46:b9:d5:
5a:56:5e:3f:18:19:77:23:4b:db:ec:94:cb:4b:3b:5c:04:25:
b7:29:7e:8a:cf:04:ad:6d:41:5a:20:0b:3a:1b:8b:02:a9:a2:
0d:f1:29:d1:4e:64:d9:1b:3f:4b:8f:7f:e8:ff:33:cd:d7:6e:
f7:e0:ca:fc:49:83:39:68:35:7b:86:7c:b6:1c:c5:88:b4:74:
ae:83:6b:a8:e2:5c:32:83:56:05:78:8a:87:72:bc:f1:b4:fc:
20:a3:75:ee:70:2a:92:98:52:49:c7:40:cb:18:e2:24:3f:96:
68:29:38:09:12:ec:62:24:3e:ea:60:ab:94:26:af:16:3c:d6:
32:d6:15:7d:2d:9e:d7:82:eb:74:23:a2:50:48:99:bb:6d:1f:
9e:20:33:f5:df:c8:f0:e5:b2:9b:ce:ac:6a:52:2f:95:65:3a:
fd:bc:94:43:37:8b:37:b6:22:78:ac:9c:a9:c3:a3:c7:4d:7c:
25:f0:1f:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:58:30 2025 by rpki-client