Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/cbca0b-6453-494c-8727-57e08f61f2ec/1/0mF9FdtY_jBi0brb4E0wwZSd1f8.mft
File: 0mF9FdtY_jBi0brb4E0wwZSd1f8.mft (raw, json)
Hash identifier: TKot/9FZq3Dk90hlnQMwJ2NqP3DiVGXlD6TAkNHEYkA=
Subject key identifier: 1E:C2:97:BC:BB:0B:22:82:99:4C:E9:F0:DC:B4:74:98:68:B8:2B:7B
Authority key identifier: D2:61:7D:15:DB:58:FE:30:62:D1:BA:DB:E0:4D:30:C1:94:9D:D5:FF
Certificate issuer: /CN=d2617d15db58fe3062d1badbe04d30c1949dd5ff
Certificate serial: 019A52D124B9DA64BC10A3A51C9037FABAB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0mF9FdtY_jBi0brb4E0wwZSd1f8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/cbca0b-6453-494c-8727-57e08f61f2ec/1/0mF9FdtY_jBi0brb4E0wwZSd1f8.mft
Manifest number: 170A
Signing time: Wed 05 Nov 2025 07:00:29 +0000
Manifest this update: Wed 05 Nov 2025 07:00:29 +0000
Manifest next update: Thu 06 Nov 2025 07:00:29 +0000
Files and hashes: 1: 0mF9FdtY_jBi0brb4E0wwZSd1f8.crl (hash: Eg27DptlhYKv7pHbeAPu/82axeLHFii0BLF6ZCvIIGg=)
2: j-Iupp3EcWQfbMD2aDvdXh5buVM.roa (hash: vNF4TPFh0oVURLAenwqLDdq2RvvuTpEILFtX5lE+Y4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/cbca0b-6453-494c-8727-57e08f61f2ec/1/0mF9FdtY_jBi0brb4E0wwZSd1f8.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/cbca0b-6453-494c-8727-57e08f61f2ec/1/0mF9FdtY_jBi0brb4E0wwZSd1f8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0mF9FdtY_jBi0brb4E0wwZSd1f8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 07:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:24:b9:da:64:bc:10:a3:a5:1c:90:37:fa:ba:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2617d15db58fe3062d1badbe04d30c1949dd5ff
Validity
Not Before: Nov 5 07:00:29 2025 GMT
Not After : Nov 6 07:00:29 2025 GMT
Subject: CN=1ec297bcbb0b2282994ce9f0dcb4749868b82b7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:3d:af:1a:ca:d6:0a:be:cb:e2:9a:a5:67:21:
1f:c2:be:b2:22:e6:5c:21:e0:b9:6c:94:db:72:d4:
c9:e0:63:85:2a:1f:36:6c:40:26:e7:98:36:aa:cb:
91:36:a4:61:1b:c1:3c:5a:8d:da:e2:79:73:10:f0:
98:06:8d:5f:64:48:07:8c:3e:69:18:a3:8c:47:dd:
e4:c5:80:cb:18:b7:76:cd:a6:81:ee:d6:e6:ec:3f:
24:89:5f:3d:e0:37:b7:a2:9f:76:a8:24:11:58:95:
4d:74:c7:2b:6b:b6:6f:5c:9f:84:89:c4:d8:f0:c4:
1b:34:1b:fd:c9:cb:97:00:77:70:f4:e4:56:c4:58:
c9:43:23:c1:44:25:fb:54:b1:43:e9:f3:ec:5c:c8:
3f:0f:a9:5c:ef:61:8c:19:b7:75:e0:b3:5d:a9:d1:
da:a7:53:ae:36:5a:ef:58:6a:07:f4:fe:66:90:a6:
68:e1:74:84:fa:67:91:22:09:80:c7:12:78:64:04:
20:6a:5e:97:e3:4b:16:9d:b3:fd:c8:a7:c1:8b:2a:
08:1a:b5:ca:09:d3:1e:b7:6e:1f:14:9f:c8:68:95:
df:ba:68:0d:bc:58:b7:79:91:72:25:84:75:51:98:
40:c7:ad:f0:5c:ce:e5:06:22:03:d6:69:22:51:b3:
09:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:C2:97:BC:BB:0B:22:82:99:4C:E9:F0:DC:B4:74:98:68:B8:2B:7B
X509v3 Authority Key Identifier:
keyid:D2:61:7D:15:DB:58:FE:30:62:D1:BA:DB:E0:4D:30:C1:94:9D:D5:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mF9FdtY_jBi0brb4E0wwZSd1f8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/cbca0b-6453-494c-8727-57e08f61f2ec/1/0mF9FdtY_jBi0brb4E0wwZSd1f8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/cbca0b-6453-494c-8727-57e08f61f2ec/1/0mF9FdtY_jBi0brb4E0wwZSd1f8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:5b:1b:20:d4:54:96:cc:fa:5c:de:c4:fe:ce:d5:24:5b:05:
6f:fa:c9:17:f0:6e:52:6e:64:19:81:44:45:79:96:75:c8:b6:
11:76:fe:c5:53:6a:f1:f6:0b:1e:f1:2f:48:22:12:6f:30:ec:
e2:f6:27:35:22:94:60:68:3f:9e:be:3b:52:66:07:48:3b:a2:
59:e0:ad:75:d1:0e:95:8f:5c:97:2a:73:64:20:d0:d8:61:88:
41:d3:e2:b8:a8:86:aa:ff:c1:fb:14:1a:25:f7:1e:9d:18:9c:
4a:a1:9c:05:df:58:d4:06:c8:d8:a7:22:d3:37:f3:19:ed:ad:
0f:0c:c1:78:cf:ce:bd:3b:11:7c:5d:fa:62:24:bc:ba:54:17:
d1:a9:d4:82:89:18:f5:ff:76:a9:18:4a:7c:93:d3:47:74:39:
1f:00:14:e4:ab:44:e1:0c:9f:2b:6e:91:dc:87:69:af:fa:ec:
0a:bc:19:22:c3:34:53:70:ab:bc:67:66:4e:6b:25:85:50:51:
6d:85:ad:88:10:73:a2:5d:b5:b7:22:5d:42:59:68:3a:bc:76:
65:de:4a:b0:99:67:bb:55:f5:99:6d:36:cb:b6:5b:72:f7:71:
5a:7a:81:33:cd:c4:6e:82:64:c9:7f:aa:d9:72:89:c9:8b:dc:
ae:62:6e:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:04:57 2025 by rpki-client