Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/1c718d-e7a0-40ac-a181-cbaa42a62727/1/0H3DXrzYjdDiqNs6WghlS8O-AmI.mft
File: 0H3DXrzYjdDiqNs6WghlS8O-AmI.mft (raw, json)
Hash identifier: YYLxvlyfcM/Ii8EZF+2YY0qv48+fJb/R1QBlPwxDTJI=
Subject key identifier: 85:B3:39:E5:8B:BC:65:28:04:D9:1F:CF:28:E4:D2:AE:15:EC:15:2E
Authority key identifier: D0:7D:C3:5E:BC:D8:8D:D0:E2:A8:DB:3A:5A:08:65:4B:C3:BE:02:62
Certificate issuer: /CN=d07dc35ebcd88dd0e2a8db3a5a08654bc3be0262
Certificate serial: 019A4E8631DB98A2080772E4944B8D3F6A97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0H3DXrzYjdDiqNs6WghlS8O-AmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/1c718d-e7a0-40ac-a181-cbaa42a62727/1/0H3DXrzYjdDiqNs6WghlS8O-AmI.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 11:00:08 +0000
Manifest this update: Tue 04 Nov 2025 11:00:08 +0000
Manifest next update: Wed 05 Nov 2025 11:00:08 +0000
Files and hashes: 1: 0H3DXrzYjdDiqNs6WghlS8O-AmI.crl (hash: Bkb6NsEowNjkQKxMn38Ozm7+zTD7ffJ9T2HFv/GSylo=)
2: UtfGmlfffX0cIYFRWQAmKmCxHBQ.roa (hash: eIoevFtzl4KgjvBzeT/oQJHdGPIhlQ4d3q4XFG6eYig=)
3: pkGGNBdhq4ZpQRqIZMsggNSolf0.roa (hash: y34zQyNQE6Dt9rgo+TKZCABmiXucQM6cXI6cZVCrI5E=)
4: qMKz0iOTV-AipsqG6OSykAqBmcw.roa (hash: evn2bcSDR90liMyPkIBPgdH2fICEje6rbDEpXsqQ5bo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/1c718d-e7a0-40ac-a181-cbaa42a62727/1/0H3DXrzYjdDiqNs6WghlS8O-AmI.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/1c718d-e7a0-40ac-a181-cbaa42a62727/1/0H3DXrzYjdDiqNs6WghlS8O-AmI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0H3DXrzYjdDiqNs6WghlS8O-AmI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:31:db:98:a2:08:07:72:e4:94:4b:8d:3f:6a:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d07dc35ebcd88dd0e2a8db3a5a08654bc3be0262
Validity
Not Before: Nov 4 11:00:08 2025 GMT
Not After : Nov 5 11:00:08 2025 GMT
Subject: CN=85b339e58bbc652804d91fcf28e4d2ae15ec152e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2a:61:56:84:20:97:4b:d1:50:1a:62:4e:4d:
13:3f:2e:ca:bf:58:c8:fc:25:60:5c:d9:73:6d:c3:
de:5e:99:5a:e8:e1:b9:e7:4e:70:dd:72:91:69:1b:
14:34:e5:23:04:c8:22:25:f0:4a:58:90:80:a5:26:
48:cf:15:92:14:b0:1b:9a:a3:2a:4c:72:bc:58:dd:
9c:a0:a8:47:46:df:d7:a7:33:8d:88:c9:d4:5b:d3:
b6:eb:22:62:e4:16:87:97:a7:48:5b:0a:ce:97:b2:
82:b5:ef:fb:4d:14:04:7b:8d:18:aa:a0:59:48:86:
26:64:51:f3:79:18:cf:42:91:88:a6:89:58:3c:b0:
d8:c9:03:8a:38:37:30:20:8d:6b:41:da:62:1d:eb:
aa:c9:1a:f6:88:6e:32:a0:f1:99:ef:ec:a7:9f:77:
4c:3c:10:10:c6:6a:bb:18:fe:7b:ea:1e:06:13:24:
f4:36:e8:c8:dd:b8:2b:c2:49:be:43:51:08:1f:98:
03:c4:91:c0:8f:48:80:21:c0:a7:57:f0:8c:32:19:
e4:fa:b6:b2:e6:a6:a0:19:70:4b:c6:96:a3:64:60:
32:5b:7d:d2:e1:03:2f:de:00:9b:10:fd:d2:69:04:
48:e1:95:4a:65:a6:78:4a:e5:d6:4f:bb:2d:84:e7:
aa:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:B3:39:E5:8B:BC:65:28:04:D9:1F:CF:28:E4:D2:AE:15:EC:15:2E
X509v3 Authority Key Identifier:
keyid:D0:7D:C3:5E:BC:D8:8D:D0:E2:A8:DB:3A:5A:08:65:4B:C3:BE:02:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0H3DXrzYjdDiqNs6WghlS8O-AmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/1c718d-e7a0-40ac-a181-cbaa42a62727/1/0H3DXrzYjdDiqNs6WghlS8O-AmI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/1c718d-e7a0-40ac-a181-cbaa42a62727/1/0H3DXrzYjdDiqNs6WghlS8O-AmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:85:1f:e7:0b:7b:86:06:62:f2:f5:e9:e1:38:b3:30:3d:4f:
41:57:a1:54:f4:45:bc:a5:bb:24:8e:99:13:d6:01:d7:ed:cd:
e7:e3:90:91:a1:12:10:3d:c1:0e:64:fa:f7:30:77:e0:74:a3:
dd:93:69:0c:04:4a:be:ac:9f:05:0f:da:7f:51:5d:e9:60:6e:
bf:ac:20:58:b2:01:82:d9:22:4c:45:ae:d2:ed:07:81:c8:c2:
ee:6a:13:45:db:74:c8:c6:a6:bb:b7:3f:ed:36:75:6d:91:7e:
1b:81:6c:52:91:72:5d:98:bf:9b:00:0b:42:25:c8:a9:bb:a2:
5e:e9:d0:a7:7c:f2:e5:3c:f3:16:0f:29:87:8b:56:6c:38:b9:
eb:a2:db:63:8c:06:f1:81:ed:11:15:e8:55:cf:8e:a4:14:4f:
56:22:51:3c:ff:df:24:80:70:90:b3:4e:99:26:5f:a8:4c:51:
5b:20:15:a5:d7:8e:b6:a0:08:54:48:15:79:0a:de:f1:15:9a:
90:f0:18:5c:b0:1d:40:5c:81:2c:f2:25:ef:10:92:19:c8:9c:
fc:1b:74:5e:e8:fc:ba:79:af:08:40:da:a7:6b:b7:9f:09:ab:
72:5a:7c:4d:61:45:aa:cd:17:88:00:92:7d:41:76:0a:4a:70:
f4:02:1c:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:38:14 2025 by rpki-client