Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.mft
File: D81k6vJZSCLz-aLrzRnbm3-nDZo.mft (raw, json)
Hash identifier: Z04H0PMPRSW3fk9bFBxD0/jVDqR6sbQ24iI8nR2vURw=
Subject key identifier: 04:E9:84:74:8C:19:F8:7D:5D:AF:63:40:7F:73:A8:A7:58:5B:42:FE
Authority key identifier: 0F:CD:64:EA:F2:59:48:22:F3:F9:A2:EB:CD:19:DB:9B:7F:A7:0D:9A
Certificate issuer: /CN=0fcd64eaf2594822f3f9a2ebcd19db9b7fa70d9a
Certificate serial: 019A4F98E29804F2E16CCBB19598E9C1150F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D81k6vJZSCLz-aLrzRnbm3-nDZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.mft
Manifest number: 0315
Signing time: Tue 04 Nov 2025 16:00:10 +0000
Manifest this update: Tue 04 Nov 2025 16:00:10 +0000
Manifest next update: Wed 05 Nov 2025 16:00:10 +0000
Files and hashes: 1: D81k6vJZSCLz-aLrzRnbm3-nDZo.crl (hash: QmfwkFwN7KLtHAZqxopIUSEUnoIXQUVp8atKLwE/s9s=)
2: tCQKTUl91gUF9YCakBjVvOmahA8.roa (hash: +o4wlq7VWOUaSft8SFBzstGqOiur0Xr8ur6qt9Ob1Nc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/D81k6vJZSCLz-aLrzRnbm3-nDZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:98:e2:98:04:f2:e1:6c:cb:b1:95:98:e9:c1:15:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fcd64eaf2594822f3f9a2ebcd19db9b7fa70d9a
Validity
Not Before: Nov 4 16:00:10 2025 GMT
Not After : Nov 5 16:00:10 2025 GMT
Subject: CN=04e984748c19f87d5daf63407f73a8a7585b42fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ec:92:3b:08:ed:bd:14:91:39:81:82:0c:9d:
96:9e:b2:86:42:68:69:29:d6:46:31:c4:b0:08:95:
8b:27:b4:2a:06:a1:86:7b:c8:50:c0:78:13:9d:dc:
2c:67:9a:f6:af:5f:8b:95:78:09:59:60:a9:5c:2d:
78:19:d5:6b:44:be:06:04:7b:8f:ee:06:56:67:ce:
b6:c1:a4:d2:3e:ad:5e:ec:8f:49:2e:a8:c5:1c:d9:
b3:7a:3f:4d:86:9f:16:ec:d2:37:a4:01:7f:1a:c0:
a5:55:84:15:17:5f:03:17:f6:b2:da:f6:c5:4f:7a:
dc:b2:54:27:49:48:dd:9b:10:ad:9d:6e:c1:b2:ae:
d2:5b:18:bd:30:f8:95:8f:34:68:67:4d:92:be:89:
ca:45:d9:f6:d7:9f:41:3a:79:19:04:1f:38:cc:c6:
85:24:01:17:d9:ca:c4:57:81:06:93:1f:90:23:f7:
95:05:61:46:eb:fc:76:2d:3d:ea:23:dd:96:2c:69:
59:52:65:1e:9f:af:05:37:d3:d9:98:bb:70:eb:0c:
50:9d:cf:cc:33:87:e3:f3:cc:a6:d6:a0:3a:05:b9:
11:84:bb:8b:3c:e1:d5:f8:3e:fa:bc:6f:19:4d:07:
b9:ff:f3:82:b0:ff:d5:dc:4f:0e:57:2b:e0:ee:b6:
98:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:E9:84:74:8C:19:F8:7D:5D:AF:63:40:7F:73:A8:A7:58:5B:42:FE
X509v3 Authority Key Identifier:
keyid:0F:CD:64:EA:F2:59:48:22:F3:F9:A2:EB:CD:19:DB:9B:7F:A7:0D:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D81k6vJZSCLz-aLrzRnbm3-nDZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:7c:1a:e5:64:17:d1:e0:91:89:7d:91:68:0d:c8:9f:8a:cf:
2d:c6:95:f0:f2:5c:79:17:25:c2:a8:83:ec:1f:d3:45:5d:b9:
74:12:76:7a:27:6d:dd:38:85:51:ad:f3:22:00:4e:05:9f:28:
a9:6d:26:4e:a1:eb:2f:03:82:b2:4b:ea:52:14:71:b2:7f:b0:
aa:82:9b:68:21:fe:10:89:a7:1f:d2:dc:c8:a2:3c:c1:6c:d9:
a1:c7:40:42:7f:4b:18:cd:5f:a1:46:04:7b:cd:78:4b:58:bc:
af:99:6d:9d:7a:3d:8d:56:e3:c3:43:a9:de:02:c4:92:78:1e:
b8:7b:7f:24:c0:cd:0f:f0:f6:d2:04:e1:1a:c1:2f:3b:79:65:
d7:af:12:4e:be:b2:6e:93:5f:a1:2d:5d:b6:26:8c:73:79:84:
d3:02:68:bc:90:fe:18:6d:ad:81:2b:1e:23:f8:75:11:91:03:
e7:30:d9:68:5f:e0:7b:1a:40:97:84:7e:51:23:2a:11:c6:dc:
bc:da:fa:e2:41:af:b9:78:52:82:de:67:74:69:80:2b:05:3f:
56:c6:c5:93:e2:8d:5a:5e:84:47:c5:61:39:ab:22:d6:fc:94:
cb:ff:1a:a3:7d:27:af:fb:15:09:a4:f1:a9:5d:41:8f:7c:d8:
3e:dd:5f:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:43:46 2025 by rpki-client