Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.mft
File: 43HOIIaAX5EvhRK3nF5mqcn01NI.mft (raw, json)
Hash identifier: gzaKkm3s6tty7p/lOtN+sUs5c0Tb2KIeMetyI/4TvuA=
Subject key identifier: 0B:14:B8:9F:C5:76:42:2A:DC:8A:30:34:95:0A:DB:E1:C5:A8:C6:B7
Authority key identifier: E3:71:CE:20:86:80:5F:91:2F:85:12:B7:9C:5E:66:A9:C9:F4:D4:D2
Certificate issuer: /CN=e371ce2086805f912f8512b79c5e66a9c9f4d4d2
Certificate serial: 019A54F6C02399F04DF56CDD75860FE2AD4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/43HOIIaAX5EvhRK3nF5mqcn01NI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.mft
Manifest number: 0B69
Signing time: Wed 05 Nov 2025 17:00:48 +0000
Manifest this update: Wed 05 Nov 2025 17:00:48 +0000
Manifest next update: Thu 06 Nov 2025 17:00:48 +0000
Files and hashes: 1: 43HOIIaAX5EvhRK3nF5mqcn01NI.crl (hash: 2jf/15YsrLTg1v6GlHWbI6Eha41LSrytntF0SpMVF3g=)
2: oNzr7e9N0_nB7NG8uVVH1YFW8SA.roa (hash: E5UVvjB7YIozDhZ03PLtgPckm/pTCCT/ml1aJ8kENsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.mft
rsync://rpki.ripe.net/repository/DEFAULT/43HOIIaAX5EvhRK3nF5mqcn01NI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:f6:c0:23:99:f0:4d:f5:6c:dd:75:86:0f:e2:ad:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e371ce2086805f912f8512b79c5e66a9c9f4d4d2
Validity
Not Before: Nov 5 17:00:48 2025 GMT
Not After : Nov 6 17:00:48 2025 GMT
Subject: CN=0b14b89fc576422adc8a3034950adbe1c5a8c6b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:be:f4:1f:06:c5:03:83:25:d8:d4:af:2d:b7:
f9:7b:52:34:7c:23:89:7b:89:c4:65:27:8c:15:e5:
86:66:ca:da:8d:b6:31:52:ba:c8:33:e2:53:60:bd:
cd:ca:53:af:4c:49:71:4a:63:11:8e:0e:2d:f3:6c:
60:53:36:85:19:3e:4c:fd:e3:c9:b1:d1:46:1d:0b:
b0:f1:38:5a:cc:22:af:c2:4f:fe:f2:b0:b1:42:8d:
97:d4:01:24:0e:61:88:87:e9:2d:8f:f9:6d:fa:01:
f7:5b:85:39:fe:56:64:e7:d7:a1:62:78:e2:2c:1b:
5a:20:6e:46:a3:b4:2a:7d:bb:4e:0d:56:ad:fc:fb:
bf:be:78:5b:41:0e:d2:e5:3a:2e:44:b3:b1:7b:6f:
a6:4a:8a:88:39:63:f3:4c:2f:3f:f4:cb:ba:14:43:
f7:ca:26:16:17:94:9a:eb:8b:5d:35:22:54:75:9e:
53:c6:e8:a8:64:35:cb:98:f6:1b:30:0a:e9:b9:aa:
5a:5c:6d:7f:b4:27:f4:48:c6:2d:3c:44:97:c9:62:
55:94:e3:b5:97:11:a9:0a:35:f4:cd:81:76:e9:64:
3e:23:14:e1:ed:c2:f3:ac:e6:53:b7:04:74:01:26:
ad:3e:4d:39:59:8c:16:8c:ba:0c:ff:46:22:9e:9b:
04:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:14:B8:9F:C5:76:42:2A:DC:8A:30:34:95:0A:DB:E1:C5:A8:C6:B7
X509v3 Authority Key Identifier:
keyid:E3:71:CE:20:86:80:5F:91:2F:85:12:B7:9C:5E:66:A9:C9:F4:D4:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43HOIIaAX5EvhRK3nF5mqcn01NI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:82:83:37:4c:55:be:0c:56:8c:26:b4:85:aa:dc:d9:eb:3f:
0e:1e:ec:f5:a8:02:51:8b:d2:f6:3f:87:a7:eb:97:a9:da:13:
d2:a6:96:ef:11:a5:58:1c:1e:9d:af:43:f9:ba:2e:50:3a:f0:
dc:11:f6:7a:f7:2b:3f:73:64:2d:d8:ea:6c:d7:c9:45:da:8b:
55:67:83:b5:1f:5c:b2:78:8b:5e:a0:93:41:ca:21:ae:91:6f:
43:98:d7:65:7b:05:46:0f:92:84:67:ad:c2:09:e4:8b:82:ac:
1d:e4:9e:8f:97:fe:54:5c:71:ba:ee:18:70:ed:a6:f3:3b:8d:
f3:c4:a0:8a:d8:b5:2d:cf:5b:5a:52:4e:b8:1c:a6:86:3d:3c:
89:b0:9d:d7:ea:35:89:2f:93:cd:ac:ee:e8:59:84:50:eb:70:
3d:bf:15:6f:6f:50:d4:01:aa:4a:6d:a2:95:ba:91:26:ac:ce:
86:78:de:8e:32:b9:5b:45:e0:59:8b:fe:2d:34:7d:36:cc:41:
21:bf:80:a7:c4:4d:25:77:46:81:03:ca:49:d1:f0:54:e8:24:
3f:9f:83:e9:fd:3f:df:48:b7:d9:49:2f:92:64:17:48:6c:fb:
78:4f:e0:43:c2:df:b9:0d:99:ad:57:56:9e:dd:85:0f:39:66:
93:6e:6e:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:52:03 2025 by rpki-client