Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/81024f-5171-47c4-b5ca-6b63331eff02/1/0Mo8Cxlv3gunTBSHvcucX6BTZks.mft
File: 0Mo8Cxlv3gunTBSHvcucX6BTZks.mft (raw, json)
Hash identifier: ES2p7/W7frj+/9NsiINdGVGl5STNT3uYibDf9dZ/XIk=
Subject key identifier: D4:5F:F1:DB:5F:35:E4:23:3F:FC:10:99:41:34:E8:40:79:B7:62:AF
Authority key identifier: D0:CA:3C:0B:19:6F:DE:0B:A7:4C:14:87:BD:CB:9C:5F:A0:53:66:4B
Certificate issuer: /CN=d0ca3c0b196fde0ba74c1487bdcb9c5fa053664b
Certificate serial: 019A4F2B3865A0874DAF2373EA32FCCD1D3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Mo8Cxlv3gunTBSHvcucX6BTZks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/81024f-5171-47c4-b5ca-6b63331eff02/1/0Mo8Cxlv3gunTBSHvcucX6BTZks.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 14:00:23 +0000
Manifest this update: Tue 04 Nov 2025 14:00:23 +0000
Manifest next update: Wed 05 Nov 2025 14:00:23 +0000
Files and hashes: 1: 0Mo8Cxlv3gunTBSHvcucX6BTZks.crl (hash: tTZ5Zpn2DnbbxZQDzXEQNVfQJj12ncnfylvu0k5mvc0=)
2: 5Iq99HGOQym0RGozEyZTnwgi5-c.roa (hash: 81JX76zEEyAwuma2A2j1xpYjvTQiYo/8wBvDbJx61DE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/81024f-5171-47c4-b5ca-6b63331eff02/1/0Mo8Cxlv3gunTBSHvcucX6BTZks.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/81024f-5171-47c4-b5ca-6b63331eff02/1/0Mo8Cxlv3gunTBSHvcucX6BTZks.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Mo8Cxlv3gunTBSHvcucX6BTZks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:38:65:a0:87:4d:af:23:73:ea:32:fc:cd:1d:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0ca3c0b196fde0ba74c1487bdcb9c5fa053664b
Validity
Not Before: Nov 4 14:00:23 2025 GMT
Not After : Nov 5 14:00:23 2025 GMT
Subject: CN=d45ff1db5f35e4233ffc10994134e84079b762af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d6:d4:75:02:4d:46:cb:2f:0a:07:4a:83:6b:
0d:68:fe:8d:bb:4d:25:ce:8b:8a:a8:e7:2b:27:a4:
bb:ef:5d:22:63:b6:e8:f5:97:cd:4b:ea:ee:f9:47:
f2:6c:90:5d:aa:ad:14:32:8b:17:f2:6b:c1:c0:7b:
2b:2d:b2:50:11:fd:0b:2f:ba:83:5d:0e:11:47:72:
28:7f:12:27:47:ef:96:52:a4:a0:40:50:1c:37:14:
88:f3:97:a7:b9:34:ea:05:8d:03:9c:52:ce:9d:9e:
7d:fa:2c:7f:3f:7d:e1:4d:da:5c:58:a5:22:05:a6:
a1:7d:6d:6e:da:bf:d9:59:89:7f:39:79:19:84:43:
bd:b7:75:62:5d:a9:ca:41:ec:85:1e:95:0f:df:8b:
b3:1e:5d:4c:43:d1:ce:de:78:16:85:49:f3:c5:00:
03:94:16:04:ac:d8:58:7d:94:9d:64:32:43:42:43:
98:38:4e:e2:c4:63:a0:3f:0a:f1:eb:ca:c6:c4:c0:
15:16:19:2d:97:89:c8:b1:76:84:7a:60:f3:cf:31:
6c:42:9e:1f:f0:a0:f8:8a:ef:d0:53:76:f9:bb:d6:
8d:c6:1c:0e:33:71:e0:34:ad:04:61:18:1b:1b:99:
14:0a:a6:55:67:04:7b:15:e5:66:8d:b5:c3:80:d4:
8a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:5F:F1:DB:5F:35:E4:23:3F:FC:10:99:41:34:E8:40:79:B7:62:AF
X509v3 Authority Key Identifier:
keyid:D0:CA:3C:0B:19:6F:DE:0B:A7:4C:14:87:BD:CB:9C:5F:A0:53:66:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Mo8Cxlv3gunTBSHvcucX6BTZks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/81024f-5171-47c4-b5ca-6b63331eff02/1/0Mo8Cxlv3gunTBSHvcucX6BTZks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/81024f-5171-47c4-b5ca-6b63331eff02/1/0Mo8Cxlv3gunTBSHvcucX6BTZks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:2e:a7:97:19:89:af:54:23:a0:15:78:f5:8b:db:21:16:c5:
7f:fa:1f:4b:b2:a4:ac:81:80:f1:cc:7d:6b:10:ea:57:ee:23:
5b:25:8a:7a:8e:7b:66:fa:40:ad:25:f9:8b:6c:38:35:4c:38:
55:79:d3:d4:7c:83:5b:7a:6d:2a:d1:e2:96:f2:30:69:42:1a:
cc:95:2a:9b:85:e4:ee:1c:bc:12:f5:ee:07:74:e3:62:a2:fc:
b5:b2:99:09:38:ab:42:2e:8f:d7:ee:b7:3e:6e:5b:44:42:c5:
40:b1:94:a1:4c:8e:b7:e0:55:65:d3:07:64:6a:86:ed:9d:d0:
f1:48:6f:17:03:e1:d8:56:df:a0:57:eb:e6:0d:c0:fe:7a:90:
85:46:6b:21:79:f5:45:91:69:20:78:a3:22:d0:92:0c:7b:b9:
08:61:96:d9:f4:1a:a1:c3:93:4d:41:85:45:db:2b:67:d8:ab:
d6:53:f3:88:58:0c:4c:72:e6:95:9e:21:a3:0d:62:d5:a8:b3:
85:7d:ee:3b:af:64:b1:6e:c3:5d:f2:71:0a:33:b9:02:24:b6:
c1:15:79:b5:74:b2:70:92:cc:f9:49:42:9f:04:71:ef:eb:5f:
cc:b8:b9:21:bd:89:ef:cc:ed:c6:a4:b5:4d:72:09:3a:da:fe:
7d:d0:b3:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:00:51 2025 by rpki-client