Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/5ea569-f174-45c5-9db7-2af095ffc9bb/1/0fmHr1rbIwTUJvVA3l1lBUUjHlA.mft
File: 0fmHr1rbIwTUJvVA3l1lBUUjHlA.mft (raw, json)
Hash identifier: +JTKzTnT0PFays1r4JPHjkXNasph4XY2B+iGdvZcQh8=
Subject key identifier: 08:B5:F9:5B:05:0E:A4:E1:63:D7:76:82:0B:5A:4A:CC:BA:03:01:13
Authority key identifier: D1:F9:87:AF:5A:DB:23:04:D4:26:F5:40:DE:5D:65:05:45:23:1E:50
Certificate issuer: /CN=d1f987af5adb2304d426f540de5d650545231e50
Certificate serial: 019A5150CE13A066C3D642FED07BD20D3C2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0fmHr1rbIwTUJvVA3l1lBUUjHlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/5ea569-f174-45c5-9db7-2af095ffc9bb/1/0fmHr1rbIwTUJvVA3l1lBUUjHlA.mft
Manifest number: 0BF6
Signing time: Wed 05 Nov 2025 00:00:41 +0000
Manifest this update: Wed 05 Nov 2025 00:00:41 +0000
Manifest next update: Thu 06 Nov 2025 00:00:41 +0000
Files and hashes: 1: 0fmHr1rbIwTUJvVA3l1lBUUjHlA.crl (hash: nasDmn46t/Nb0wV5+G3kIlM/6fggTlsFQfi91yU7or8=)
2: 5LrP6fsEeipB-xjaCGTQi9KsiHU.roa (hash: IUrzC+/E4lKM4F7rtTCN//MYlbyHBk9E/FLwLHHLeZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/5ea569-f174-45c5-9db7-2af095ffc9bb/1/0fmHr1rbIwTUJvVA3l1lBUUjHlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/5ea569-f174-45c5-9db7-2af095ffc9bb/1/0fmHr1rbIwTUJvVA3l1lBUUjHlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0fmHr1rbIwTUJvVA3l1lBUUjHlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:ce:13:a0:66:c3:d6:42:fe:d0:7b:d2:0d:3c:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1f987af5adb2304d426f540de5d650545231e50
Validity
Not Before: Nov 5 00:00:41 2025 GMT
Not After : Nov 6 00:00:41 2025 GMT
Subject: CN=08b5f95b050ea4e163d776820b5a4accba030113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7e:57:97:1f:89:1b:b0:71:d1:80:1d:43:0a:
8e:b8:63:61:2d:8d:18:2a:ef:b3:b0:09:d7:d5:2a:
00:92:8c:cb:b5:7f:24:b3:9c:30:bb:f8:4d:be:d4:
9e:8e:0e:b5:a2:28:90:5b:cb:8b:48:0c:05:c3:92:
03:b6:5d:7f:50:24:1c:4f:2d:86:fe:02:f8:1a:13:
b4:06:ab:bc:00:bb:19:d8:33:6f:51:1d:0f:fb:e5:
a6:c4:ee:fb:b6:d5:c5:f3:9e:8f:49:be:51:65:b6:
c5:da:0c:2b:e5:aa:3e:fe:64:78:aa:6b:9b:d4:10:
e9:b2:b5:25:f7:3a:d0:75:45:d7:d4:f9:21:4d:51:
59:ea:0f:3c:95:ca:f5:20:15:15:29:bd:c3:c4:b5:
f5:b6:99:68:b5:10:1b:8d:25:28:01:e4:ee:af:58:
73:bb:12:cf:1f:88:9f:f1:d7:a5:c0:bc:e1:9a:ed:
5e:0c:45:e7:cf:3c:c9:26:dc:b4:37:19:77:ce:8b:
7f:0c:99:32:7c:43:cc:98:69:34:35:48:50:e0:f0:
f5:78:a6:85:ef:7c:62:54:1c:81:42:54:dd:c0:2d:
6d:a2:bc:ad:31:6b:b7:ef:ef:4f:e9:be:7e:5c:d7:
a1:16:35:c1:cc:62:91:3e:50:75:c4:df:f2:45:cc:
9d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:B5:F9:5B:05:0E:A4:E1:63:D7:76:82:0B:5A:4A:CC:BA:03:01:13
X509v3 Authority Key Identifier:
keyid:D1:F9:87:AF:5A:DB:23:04:D4:26:F5:40:DE:5D:65:05:45:23:1E:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0fmHr1rbIwTUJvVA3l1lBUUjHlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/5ea569-f174-45c5-9db7-2af095ffc9bb/1/0fmHr1rbIwTUJvVA3l1lBUUjHlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/5ea569-f174-45c5-9db7-2af095ffc9bb/1/0fmHr1rbIwTUJvVA3l1lBUUjHlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:81:8e:9d:a1:e8:77:d1:a5:f5:27:9b:33:a1:5d:17:17:6d:
1c:18:50:55:11:9d:d1:82:26:fe:58:4a:3c:4e:70:e6:c2:15:
3a:e4:78:2f:41:12:cf:ab:d7:aa:82:2d:5e:35:89:e0:8b:76:
0c:82:4b:4d:f2:93:03:89:1d:ce:22:39:51:e8:de:bb:3c:19:
f4:42:dd:bd:60:fd:cb:24:f0:ca:3a:9d:c0:4f:ab:35:3f:f0:
4e:9d:af:e7:4d:a4:a7:7e:03:a7:85:95:43:96:83:77:f1:36:
47:ca:b1:61:3c:74:70:55:11:c5:40:c0:65:a0:a9:5d:0f:f1:
96:e4:5d:84:d3:06:ab:91:ce:cd:e7:8e:b6:3d:12:a2:b3:b2:
8b:ec:d3:94:35:52:6c:42:3e:aa:4a:75:ea:d5:e9:13:cc:47:
db:10:88:e0:be:5e:40:46:26:b7:cc:0b:4a:a8:34:de:12:8a:
52:24:a9:04:ea:14:3e:53:7e:b0:e4:98:f7:1c:f8:3a:cf:99:
cc:42:a8:27:8b:14:d0:c8:4f:40:31:ad:95:9f:2e:75:64:3f:
69:55:28:f7:42:41:f4:c9:ac:69:28:e4:30:9c:84:f4:c1:e1:
fb:ac:40:3d:00:6b:9c:9e:23:22:71:6d:72:76:be:92:ee:23:
92:6d:ce:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:37:26 2025 by rpki-client