Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/87f973-ea6e-47df-b1b0-df3138b434c8/1/0cgcYtOUIDPQp0BEsMWk8RPkPfM.mft
File: 0cgcYtOUIDPQp0BEsMWk8RPkPfM.mft (raw, json)
Hash identifier: DDVBrqq+e6OlMymUPrayk1207xweUr8BILThUWUVkWI=
Subject key identifier: F2:5D:21:3C:E4:E8:5A:79:FE:1F:AC:CF:06:0A:6D:20:51:10:70:D5
Authority key identifier: D1:C8:1C:62:D3:94:20:33:D0:A7:40:44:B0:C5:A4:F1:13:E4:3D:F3
Certificate issuer: /CN=d1c81c62d3942033d0a74044b0c5a4f113e43df3
Certificate serial: 019A4EF4074668633E6F8EB535A2E25685E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0cgcYtOUIDPQp0BEsMWk8RPkPfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/87f973-ea6e-47df-b1b0-df3138b434c8/1/0cgcYtOUIDPQp0BEsMWk8RPkPfM.mft
Manifest number: 0AE4
Signing time: Tue 04 Nov 2025 13:00:06 +0000
Manifest this update: Tue 04 Nov 2025 13:00:06 +0000
Manifest next update: Wed 05 Nov 2025 13:00:06 +0000
Files and hashes: 1: 0cgcYtOUIDPQp0BEsMWk8RPkPfM.crl (hash: vTPb2hNydIXS2jKLGo9OBRVMkbYkAeH/rdcCTa1QA1Q=)
2: p_TDMyzlQ5zmtlyOFxztvJEw2HQ.roa (hash: fmxxB5F2kwLUu456RKJpssuFKFMbicdIEkOy2yPaKKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/87f973-ea6e-47df-b1b0-df3138b434c8/1/0cgcYtOUIDPQp0BEsMWk8RPkPfM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/87f973-ea6e-47df-b1b0-df3138b434c8/1/0cgcYtOUIDPQp0BEsMWk8RPkPfM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0cgcYtOUIDPQp0BEsMWk8RPkPfM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:07:46:68:63:3e:6f:8e:b5:35:a2:e2:56:85:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1c81c62d3942033d0a74044b0c5a4f113e43df3
Validity
Not Before: Nov 4 13:00:06 2025 GMT
Not After : Nov 5 13:00:06 2025 GMT
Subject: CN=f25d213ce4e85a79fe1faccf060a6d20511070d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:aa:1d:8b:a0:e3:69:fa:c3:aa:f9:b8:42:80:
9b:1a:e5:3c:59:f2:b8:50:97:43:e1:92:f6:01:5a:
69:b9:c6:c2:4e:39:49:52:17:e8:76:3d:b8:aa:76:
bc:58:0f:77:30:db:75:f3:b2:01:e4:25:85:f1:c7:
48:7c:c6:08:81:57:d5:1d:d2:0d:31:3c:c8:a9:a8:
0a:04:f6:b3:5d:64:ac:ca:5d:d3:4a:d5:c3:0b:0f:
f0:44:a5:c3:2a:02:9a:b3:10:d5:b2:db:c2:7e:19:
31:d1:ad:05:ff:c3:15:42:9f:11:05:84:80:fd:5b:
b8:2a:3b:7e:fc:cf:72:7a:cb:b5:86:4a:d6:64:db:
94:8d:ef:c8:01:01:11:7a:28:40:83:33:cf:a8:c8:
28:ee:75:13:3d:03:6f:4c:82:56:14:12:c4:1e:a2:
18:a0:48:08:55:5f:e9:92:8b:e5:de:8f:14:6b:57:
22:e3:d0:85:87:ae:91:97:a5:a9:c2:72:82:6a:9a:
5f:08:ca:31:91:0b:5b:a4:8c:35:da:ba:0d:17:bf:
90:9b:97:57:ac:51:36:70:f0:32:df:65:ad:fa:1d:
03:09:f0:d0:a1:12:fb:4c:31:5e:c5:d8:5e:16:28:
51:3c:c7:77:20:04:43:6d:eb:9a:b7:c2:81:9a:c4:
d0:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:5D:21:3C:E4:E8:5A:79:FE:1F:AC:CF:06:0A:6D:20:51:10:70:D5
X509v3 Authority Key Identifier:
keyid:D1:C8:1C:62:D3:94:20:33:D0:A7:40:44:B0:C5:A4:F1:13:E4:3D:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0cgcYtOUIDPQp0BEsMWk8RPkPfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/87f973-ea6e-47df-b1b0-df3138b434c8/1/0cgcYtOUIDPQp0BEsMWk8RPkPfM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/87f973-ea6e-47df-b1b0-df3138b434c8/1/0cgcYtOUIDPQp0BEsMWk8RPkPfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:d6:99:0f:58:ca:83:4c:2d:52:0c:d2:f7:61:c7:28:6a:7e:
b2:e5:ff:b4:2f:a1:ec:08:92:cc:f6:fe:fd:04:08:49:00:3c:
48:d5:b6:30:0f:4d:36:d7:66:25:98:c8:a0:74:b3:ad:ee:8d:
53:07:84:22:10:57:b3:5d:68:76:2e:fd:20:cf:3c:7e:68:37:
2c:45:bf:a7:67:9b:d6:a5:05:71:e1:71:e3:1d:67:89:ef:76:
20:8b:7c:52:f3:2b:45:70:ab:ea:83:e2:ee:f7:e6:f8:b3:98:
19:05:af:87:f1:fb:6e:5b:bc:60:14:f2:cc:27:a4:6c:c0:03:
6f:96:21:b7:e0:f3:60:a9:99:f4:f7:75:da:cd:e1:18:6d:bf:
e4:27:53:05:0c:21:b7:69:71:38:c2:ab:e5:68:21:0e:8b:6d:
36:97:77:1e:6b:e0:0c:41:b3:a6:f4:4b:86:f5:d6:5c:ed:8d:
11:44:62:11:b7:9b:db:48:44:27:2d:d2:bf:13:d4:eb:f7:8a:
6f:f6:ec:f7:de:7a:54:78:a8:05:9b:1b:51:5b:d2:ee:d6:2f:
06:d3:42:40:4a:89:ae:a2:78:80:a9:9c:6a:97:aa:d2:9d:e2:
72:ef:ff:9f:cc:6b:f7:3a:b9:5a:ed:8c:cd:f5:44:45:3f:7d:
a0:6d:d9:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:48:40 2025 by rpki-client