Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.mft
File: 0d4HoaH2W9EW4R-fEQhgS26VzP0.mft (raw, json)
Hash identifier: oZ9/nE3HX1hYEsQts0vFSJRM8iLTTULSU70E43nwUFQ=
Subject key identifier: 0D:62:A7:CE:0F:DC:7C:A8:BD:74:BC:B3:62:1C:6B:BC:9D:8A:90:98
Authority key identifier: D1:DE:07:A1:A1:F6:5B:D1:16:E1:1F:9F:11:08:60:4B:6E:95:CC:FD
Certificate issuer: /CN=d1de07a1a1f65bd116e11f9f1108604b6e95ccfd
Certificate serial: 019A4EF4DF13C55E9EAAE6EFA19ADB14167C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0d4HoaH2W9EW4R-fEQhgS26VzP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.mft
Manifest number: 12A3
Signing time: Tue 04 Nov 2025 13:01:01 +0000
Manifest this update: Tue 04 Nov 2025 13:01:01 +0000
Manifest next update: Wed 05 Nov 2025 13:01:01 +0000
Files and hashes: 1: 0d4HoaH2W9EW4R-fEQhgS26VzP0.crl (hash: dWMeYcFvkm8ORbnCGQvuUHz2b4WievXbugpzQbzvioU=)
2: QEHZF8Tlk9QKI2YxEH34bnx0Z1c.roa (hash: 8+749rwNuEEuELLtmccQKg/as7h9BdIGWfJq5dqwT3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0d4HoaH2W9EW4R-fEQhgS26VzP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:df:13:c5:5e:9e:aa:e6:ef:a1:9a:db:14:16:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1de07a1a1f65bd116e11f9f1108604b6e95ccfd
Validity
Not Before: Nov 4 13:01:01 2025 GMT
Not After : Nov 5 13:01:01 2025 GMT
Subject: CN=0d62a7ce0fdc7ca8bd74bcb3621c6bbc9d8a9098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c1:b9:04:5c:49:0c:f2:92:83:d1:2b:4b:e8:
a0:28:2d:dd:e7:08:0c:19:a6:f2:ce:a8:a0:e6:ed:
91:34:70:64:ac:a8:45:cd:70:92:b3:8e:a1:d6:96:
2e:6f:90:4b:29:0d:84:18:67:83:54:91:a6:f4:c8:
53:14:e8:cc:bf:73:59:ca:bd:25:53:58:7f:41:8e:
5d:bc:ae:39:c0:f8:00:2e:84:3d:e6:e2:6e:33:d0:
ac:19:f7:8c:24:55:4a:fb:5e:bf:7d:21:ea:44:d9:
3f:f1:c1:9d:40:c1:17:f1:97:e5:8c:54:6d:8d:91:
55:3d:df:84:34:04:16:1c:e5:00:49:53:17:3a:ab:
1d:c4:c7:f3:b7:45:ac:14:dc:ee:86:74:d8:ce:ad:
6d:8f:c4:37:ea:18:e8:8f:f9:34:ff:62:76:65:53:
ea:97:06:5b:b2:8b:40:88:7f:f1:82:3a:3c:dd:b4:
ba:31:44:e6:14:89:e0:24:83:29:ea:e9:3b:e8:dc:
4a:fd:51:b8:e7:02:fa:8c:21:4e:96:0b:bc:54:35:
a0:c1:5b:fe:df:37:f0:e2:f2:35:ce:8c:1e:8e:c5:
42:32:01:8b:aa:60:33:88:19:23:c2:26:14:c6:8f:
47:11:d0:6a:d0:0e:ad:7f:85:02:c6:6a:f6:ba:0f:
cb:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:62:A7:CE:0F:DC:7C:A8:BD:74:BC:B3:62:1C:6B:BC:9D:8A:90:98
X509v3 Authority Key Identifier:
keyid:D1:DE:07:A1:A1:F6:5B:D1:16:E1:1F:9F:11:08:60:4B:6E:95:CC:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d4HoaH2W9EW4R-fEQhgS26VzP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:4c:d9:3e:1f:00:64:05:ac:09:0f:f8:7a:18:ac:bc:94:a6:
64:75:8e:46:7e:bf:91:ea:90:e1:2b:1b:eb:2b:05:17:a8:35:
4c:83:12:61:a7:59:70:67:25:cf:24:82:3f:13:06:ea:22:94:
22:aa:0a:60:12:ba:01:48:9a:b8:11:23:b8:ab:1a:df:4a:56:
95:e8:c0:38:6f:47:71:6f:59:f1:44:b4:e6:e9:35:ef:eb:7c:
df:01:a7:c8:a2:f6:cc:ad:25:0b:b9:d9:76:18:bb:e0:23:40:
75:f4:8a:9e:23:de:11:9c:0c:7c:3a:b5:ff:4c:64:d8:bd:f6:
2d:59:48:4a:12:b1:7d:0b:47:08:b1:83:f0:8d:34:8f:03:c6:
f1:5e:a4:75:a4:2f:1f:13:a8:24:bd:23:5c:8d:30:4c:18:d2:
fe:e2:13:7d:47:40:7a:29:d5:6f:ff:7b:83:af:8a:01:c0:f4:
ad:1d:0f:d1:0c:ae:b3:a8:ac:ed:05:b7:4e:b8:98:48:dd:bd:
4e:c8:07:ed:05:c1:cc:3c:2b:90:a4:7c:99:b6:08:62:eb:a5:
ce:28:5b:cd:b6:bd:27:a7:ff:e8:b7:24:40:ed:94:de:68:4f:
18:fe:27:aa:a4:5d:a8:e4:60:8e:45:93:9c:4c:28:d3:cb:10:
43:c4:04:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:32:19 2025 by rpki-client