Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.mft
File: 0H3_VH6svoHcNGVZhEbTsCfct20.mft (raw, json)
Hash identifier: zjiy2pNO2Pmxxcjp5BiZittj2boHg3/H5bfrUzeZo1c=
Subject key identifier: 9A:B3:12:E4:5E:57:05:EC:DB:D3:B6:E1:8B:B6:CC:B3:3B:6E:8C:04
Authority key identifier: D0:7D:FF:54:7E:AC:BE:81:DC:34:65:59:84:46:D3:B0:27:DC:B7:6D
Certificate issuer: /CN=d07dff547eacbe81dc3465598446d3b027dcb76d
Certificate serial: 019A4DE1A4D6923838C1E48F89628E18ED3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0H3_VH6svoHcNGVZhEbTsCfct20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 08:00:24 +0000
Manifest this update: Tue 04 Nov 2025 08:00:24 +0000
Manifest next update: Wed 05 Nov 2025 08:00:24 +0000
Files and hashes: 1: 0H3_VH6svoHcNGVZhEbTsCfct20.crl (hash: v0yKWaoJ7wE+FxUWnE4LYepK2QUpyRs+t3MQC9MbQAI=)
2: 7ZfxbTG5XE7d3U698g7DhphadTg.roa (hash: Pr0+WF0lvDtFnCz/0c70Eot8c7E9jRvKLuNSr3PuDSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.mft
rsync://rpki.ripe.net/repository/DEFAULT/0H3_VH6svoHcNGVZhEbTsCfct20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:a4:d6:92:38:38:c1:e4:8f:89:62:8e:18:ed:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d07dff547eacbe81dc3465598446d3b027dcb76d
Validity
Not Before: Nov 4 08:00:24 2025 GMT
Not After : Nov 5 08:00:24 2025 GMT
Subject: CN=9ab312e45e5705ecdbd3b6e18bb6ccb33b6e8c04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d0:f8:0d:0c:46:ff:b1:09:52:c9:e7:5a:8f:
de:99:56:3f:8f:85:76:4c:af:17:3a:f4:76:5c:85:
3c:40:4e:7a:57:ba:45:a9:ff:25:d2:70:fa:da:36:
6d:f4:87:4e:ae:5a:2c:97:15:07:40:4a:17:ca:5c:
90:d5:c3:1c:45:f3:97:39:ae:c1:d6:29:70:28:50:
c3:a3:64:d6:d2:04:1b:b1:30:ec:80:57:5d:d0:7e:
02:8b:37:50:45:7f:9c:1a:d2:ab:83:df:66:f7:a7:
f9:fb:9e:1c:d1:7d:1d:d8:1e:5e:87:e7:bb:00:09:
dc:30:ba:a2:85:1d:a8:66:9b:bc:93:ec:2f:ff:34:
41:ef:61:67:5c:61:75:38:57:c4:c8:06:e2:aa:e3:
94:94:ea:77:05:84:8c:1c:bd:40:76:b7:eb:56:1b:
01:7a:ed:69:e7:b8:80:32:39:a9:93:30:27:fd:fc:
3b:74:78:34:b9:60:7c:d1:43:96:c6:96:89:9e:00:
ed:ae:23:d1:c6:01:34:67:ca:25:63:3c:d5:ad:94:
fa:82:08:30:3a:a8:7f:96:26:90:c3:cd:ff:7a:ab:
da:de:9a:ea:0b:34:63:18:8a:29:3b:fd:7d:50:e3:
d6:5c:64:5f:f4:0b:82:44:a3:50:fd:5d:d9:36:de:
92:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:B3:12:E4:5E:57:05:EC:DB:D3:B6:E1:8B:B6:CC:B3:3B:6E:8C:04
X509v3 Authority Key Identifier:
keyid:D0:7D:FF:54:7E:AC:BE:81:DC:34:65:59:84:46:D3:B0:27:DC:B7:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0H3_VH6svoHcNGVZhEbTsCfct20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:a2:96:c5:1e:45:da:99:03:df:62:d0:1c:70:5d:09:83:df:
c8:f3:e3:d4:dd:25:39:57:d5:c4:fc:09:cd:27:98:47:46:7a:
4c:27:50:66:20:66:6f:83:f7:af:43:32:ef:72:00:de:14:06:
b0:a2:d9:a6:7a:9a:4c:c5:27:07:e0:9f:3d:26:7b:e7:52:0f:
05:cd:25:8d:eb:94:54:98:ab:3f:3b:6c:16:0e:f9:9c:ba:2d:
83:70:70:4c:fa:69:71:df:90:9a:fa:37:b3:07:aa:5e:28:e8:
9a:c5:b5:2f:e7:c4:1a:1b:69:20:27:87:a3:41:b4:7a:8e:4d:
ee:7d:35:7e:99:8d:96:78:d4:4b:11:28:72:85:ac:95:65:94:
51:66:e4:32:14:89:28:a8:3a:de:89:8f:d8:44:fa:c9:d3:f7:
3a:0c:03:6e:fc:be:b3:da:1e:c1:35:25:28:bf:dd:82:be:c0:
53:25:76:4a:45:e0:c6:1e:f6:42:58:94:c5:c0:98:8c:38:70:
e4:a9:b3:ef:ba:d9:fc:f5:7e:8c:b6:86:2f:9e:2f:76:a6:44:
1d:bc:fc:45:20:97:ba:ef:43:40:ac:65:a8:7c:34:4c:bf:ff:
41:53:02:98:33:30:e8:ca:58:36:41:d4:50:3b:63:95:cc:cb:
62:30:ab:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:54:54 2025 by rpki-client