Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/18d132-9951-4055-b5a6-dc0e1a725221/1/0DBG0Wz8ORsCi4h0N3POAFz5ex0.mft
File: 0DBG0Wz8ORsCi4h0N3POAFz5ex0.mft (raw, json)
Hash identifier: UGO2+hMrr2sHQQyspmKdn7dnCoTL1WfUKg4WVOFisAg=
Subject key identifier: 23:FD:AF:24:DF:2B:12:BD:50:B8:49:5F:C8:49:07:02:90:D3:C1:17
Authority key identifier: D0:30:46:D1:6C:FC:39:1B:02:8B:88:74:37:73:CE:00:5C:F9:7B:1D
Certificate issuer: /CN=d03046d16cfc391b028b88743773ce005cf97b1d
Certificate serial: 019A5007132CD7CFACEDCF2159FA0DE5C10D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0DBG0Wz8ORsCi4h0N3POAFz5ex0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/18d132-9951-4055-b5a6-dc0e1a725221/1/0DBG0Wz8ORsCi4h0N3POAFz5ex0.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 18:00:32 +0000
Manifest this update: Tue 04 Nov 2025 18:00:32 +0000
Manifest next update: Wed 05 Nov 2025 18:00:32 +0000
Files and hashes: 1: 0DBG0Wz8ORsCi4h0N3POAFz5ex0.crl (hash: tQ3p8c0HIMChI4JS6flb/3pXs6xDrJBh/87Js9Tk9Ec=)
2: 1-ZNTPcQUw8PaedWPij0FjBg6iOY.roa (hash: hVPLICluHooRq9Tlz1cpYKX47tdy3LL3+Q3QLkvNJ5E=)
3: 2Gw8QOnYAv2wXYmUeczArrriB1Q.roa (hash: scuEsz0Czk4jUI1o0fHWA1GaytybLeSIsLRXLL6rVAo=)
4: fXqeDNUF09E57BXRF0QIls-uZ44.roa (hash: hJ/0oVyr/hUhxK31bOGJWQ8EL165OcYQ6RwEzy2jKI8=)
5: uGd2svx2nM-ThRz4Z5ZLS4pryPE.roa (hash: miR6GHPuEFoodfHk/rc71EoG5Q+xZw/Ncoa5ppurE4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/18d132-9951-4055-b5a6-dc0e1a725221/1/0DBG0Wz8ORsCi4h0N3POAFz5ex0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/18d132-9951-4055-b5a6-dc0e1a725221/1/0DBG0Wz8ORsCi4h0N3POAFz5ex0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0DBG0Wz8ORsCi4h0N3POAFz5ex0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:13:2c:d7:cf:ac:ed:cf:21:59:fa:0d:e5:c1:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d03046d16cfc391b028b88743773ce005cf97b1d
Validity
Not Before: Nov 4 18:00:32 2025 GMT
Not After : Nov 5 18:00:32 2025 GMT
Subject: CN=23fdaf24df2b12bd50b8495fc849070290d3c117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7b:03:1c:11:a2:80:3e:33:88:33:c0:fd:af:
b6:b4:af:f4:19:b4:15:fb:2d:af:ce:b5:a9:77:f2:
16:d6:0c:38:f7:3e:9c:68:db:95:dd:56:91:d1:46:
f8:05:2d:f6:e5:e6:c8:1f:63:35:20:fd:1a:d1:6d:
56:59:61:ed:f1:61:ff:6f:19:93:fe:77:4a:44:53:
d4:f6:f3:9e:3b:45:25:e1:7b:23:f1:fe:29:be:81:
7c:a3:d2:7a:43:a9:bd:c2:25:49:08:70:ca:f4:23:
9d:69:6c:50:3b:15:7f:0d:4f:00:95:79:99:57:d9:
1d:e7:a4:b6:a1:ca:ba:75:82:6b:96:e7:20:84:ee:
6d:87:68:b5:08:2c:f0:7c:06:ab:eb:37:86:c6:ce:
22:44:34:e6:ed:06:10:b1:ed:af:92:79:04:0c:89:
7a:fb:76:4e:77:0f:0a:4b:2c:6e:18:b1:da:c7:e9:
0f:25:6d:09:6d:4e:26:2d:e3:67:54:49:96:28:c9:
b2:4b:73:d0:88:83:66:d4:bc:22:69:d4:7c:c1:03:
f0:da:4b:bf:dd:12:9a:9c:63:2b:49:2f:94:9b:0b:
11:9c:01:cd:5b:6d:8f:c6:5c:5b:6b:ac:5a:d4:a5:
64:da:08:c3:ed:11:90:c6:9a:22:bb:68:26:52:ab:
ef:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:FD:AF:24:DF:2B:12:BD:50:B8:49:5F:C8:49:07:02:90:D3:C1:17
X509v3 Authority Key Identifier:
keyid:D0:30:46:D1:6C:FC:39:1B:02:8B:88:74:37:73:CE:00:5C:F9:7B:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0DBG0Wz8ORsCi4h0N3POAFz5ex0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/18d132-9951-4055-b5a6-dc0e1a725221/1/0DBG0Wz8ORsCi4h0N3POAFz5ex0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/18d132-9951-4055-b5a6-dc0e1a725221/1/0DBG0Wz8ORsCi4h0N3POAFz5ex0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:aa:9f:05:48:0b:53:eb:63:e9:5b:79:08:8c:db:75:aa:73:
9b:ff:2d:92:9c:3e:55:5e:64:7c:97:8d:12:a3:6b:76:c9:3c:
a4:66:6a:58:c3:0f:a1:80:e2:59:02:e2:e4:70:7b:04:7a:ff:
e1:b6:ec:17:a4:80:57:22:68:c6:bf:9c:a7:3a:f7:be:92:18:
92:f9:2c:97:cf:65:e6:c8:5b:0e:56:6a:9c:b3:eb:68:65:e8:
f4:63:d7:1d:9a:4b:95:97:1a:05:61:31:6c:dd:30:1a:81:b2:
f1:38:85:42:85:c6:cc:86:85:97:38:a3:25:7b:8e:c3:9e:06:
a4:b1:ad:fa:d3:26:c6:5f:5e:19:fd:df:37:48:17:ee:d1:07:
1a:91:0c:56:74:50:8e:3e:ee:3d:da:8c:60:ac:db:65:7c:d7:
51:e1:60:28:53:08:f2:44:d8:d0:ad:c0:17:c6:7e:bc:4b:da:
69:5a:ad:6a:56:46:2a:06:ea:d5:33:fd:a4:26:a1:c3:e6:b2:
75:49:c1:85:12:60:d9:bc:71:64:fc:c9:39:e5:7b:6a:d4:58:
5d:68:24:42:bc:4b:45:f5:b1:8c:95:62:61:6c:16:cd:f5:e3:
0f:d4:23:09:ac:17:6a:1b:81:e2:85:52:7c:5d:24:40:8a:19:
a8:1d:3d:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:20:50 2025 by rpki-client