Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.mft
File: D4MsEBROTX9qZCxg3OrhQ2_JnKE.mft (raw, json)
Hash identifier: 8aG+7fR6vLT0AGVozxiaXx6i4tnWflLST8UwxFpYqoc=
Subject key identifier: B0:9D:86:FF:B6:2A:66:FB:46:13:07:05:4C:90:23:17:BB:59:F1:5C
Authority key identifier: 0F:83:2C:10:14:4E:4D:7F:6A:64:2C:60:DC:EA:E1:43:6F:C9:9C:A1
Certificate issuer: /CN=0f832c10144e4d7f6a642c60dceae1436fc99ca1
Certificate serial: 019A4F2B6028C372C58D05AC2423F30E9A3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D4MsEBROTX9qZCxg3OrhQ2_JnKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.mft
Manifest number: 0DA3
Signing time: Tue 04 Nov 2025 14:00:33 +0000
Manifest this update: Tue 04 Nov 2025 14:00:33 +0000
Manifest next update: Wed 05 Nov 2025 14:00:33 +0000
Files and hashes: 1: D4MsEBROTX9qZCxg3OrhQ2_JnKE.crl (hash: IaaAI5orSm9kEziroyclm+jtakrTRfVXtT6gwHmAnxA=)
2: H2kmwp7spfqcIMI0clIF2k1Rvg0.roa (hash: zHi445ArIHvkJpCdV0dHlskzjilRLemFqJLsU1rnf8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/D4MsEBROTX9qZCxg3OrhQ2_JnKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:60:28:c3:72:c5:8d:05:ac:24:23:f3:0e:9a:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f832c10144e4d7f6a642c60dceae1436fc99ca1
Validity
Not Before: Nov 4 14:00:33 2025 GMT
Not After : Nov 5 14:00:33 2025 GMT
Subject: CN=b09d86ffb62a66fb461307054c902317bb59f15c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:1c:63:86:41:71:f6:23:8c:77:dd:39:92:3e:
bd:90:bd:55:51:98:7b:1f:fe:28:7b:bc:92:9d:2e:
54:af:02:bd:69:d9:8b:74:0c:6d:ae:5d:f8:8b:fb:
4d:01:06:27:32:c4:2a:7d:ac:9e:2f:bc:90:c2:63:
40:b7:8a:18:6e:d6:d2:21:8c:ab:36:20:f8:1f:3c:
9e:1c:c4:0a:2d:4c:55:6d:5a:50:4d:02:0d:6c:ab:
db:10:d4:c7:ac:e4:26:ff:ee:6f:e8:8b:81:8e:15:
2d:06:b0:6a:0f:18:bf:84:ca:23:cc:c0:84:00:9e:
5e:d1:c1:9b:e0:a3:a9:46:ec:68:70:ee:6c:3f:ad:
d6:4b:fb:de:f0:27:02:20:0e:97:4b:a3:c0:eb:21:
37:69:c3:a0:2f:5c:83:47:e4:f9:4c:7a:da:7b:46:
61:ad:71:d3:10:75:7d:f7:37:40:57:28:ff:51:c4:
07:3f:35:14:c9:7c:d9:0c:c8:16:7d:f8:a6:9b:f2:
40:97:cb:6e:b5:cf:8b:30:6f:86:53:8b:6b:22:c5:
1a:4e:f4:5d:a2:c4:39:1a:0b:2c:62:f9:d3:02:5d:
d2:31:d1:15:20:9f:32:e3:95:b8:1e:8c:4f:81:ca:
f6:f3:af:05:97:30:aa:2d:ff:04:dc:a2:cd:20:bf:
d6:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:9D:86:FF:B6:2A:66:FB:46:13:07:05:4C:90:23:17:BB:59:F1:5C
X509v3 Authority Key Identifier:
keyid:0F:83:2C:10:14:4E:4D:7F:6A:64:2C:60:DC:EA:E1:43:6F:C9:9C:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D4MsEBROTX9qZCxg3OrhQ2_JnKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:d4:8e:9e:4d:db:4b:91:f3:d3:58:34:05:6d:f7:50:37:cb:
c5:cb:66:23:ee:ee:f3:03:1f:33:99:1a:8e:27:48:48:95:81:
7c:2f:20:a4:f1:2d:1b:d2:0a:d1:f9:74:7b:65:7a:4d:c7:54:
a1:ca:b2:fb:1c:d3:96:e1:c4:aa:0c:a4:f8:e1:e9:9f:4b:d8:
fd:8b:85:0e:ac:b9:45:59:2d:1c:d3:a2:0d:da:28:67:f4:3d:
7b:65:77:24:bb:06:38:38:e3:9c:31:5f:8a:15:d8:84:35:60:
0b:54:43:ba:1c:61:6d:11:30:a1:57:44:47:e7:e3:89:4c:74:
ce:0a:2a:a0:21:70:c8:4e:40:e7:97:8c:3e:46:b1:21:7e:45:
98:b5:c3:b8:f9:d5:31:7a:dc:8b:49:14:4b:f6:6b:d2:fe:3d:
8b:df:61:98:ce:26:03:af:75:80:af:66:fc:31:4b:2d:ac:3f:
fa:61:20:51:1a:72:86:63:ef:dc:69:97:0e:66:70:25:4d:01:
45:da:9c:cf:8e:c3:a9:64:e4:31:03:50:b0:90:5c:29:25:1e:
35:dd:2d:c0:9a:ca:45:31:08:4e:a0:fd:fc:37:c9:0d:3b:07:
92:80:7d:56:cc:78:17:a2:ba:d5:7f:df:ef:e7:0d:15:c7:04:
41:6c:43:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:02:12 2025 by rpki-client