Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.mft
File: 0SFb_EiHbDZRg1bv1uKAJVod7jw.mft (raw, json)
Hash identifier: cigu3mypF26ifA8OBeBNAdsaZ9QoUyjj1KSHCZnc9zI=
Subject key identifier: CE:CF:15:02:A9:E8:04:EB:13:BE:B0:37:12:F0:A6:65:80:7B:08:22
Authority key identifier: D1:21:5B:FC:48:87:6C:36:51:83:56:EF:D6:E2:80:25:5A:1D:EE:3C
Certificate issuer: /CN=d1215bfc48876c36518356efd6e280255a1dee3c
Certificate serial: 019A51F58DBB9F95CD483C640CD6DB0F5198
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0SFb_EiHbDZRg1bv1uKAJVod7jw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.mft
Manifest number: 0E8A
Signing time: Wed 05 Nov 2025 03:00:38 +0000
Manifest this update: Wed 05 Nov 2025 03:00:38 +0000
Manifest next update: Thu 06 Nov 2025 03:00:38 +0000
Files and hashes: 1: 0SFb_EiHbDZRg1bv1uKAJVod7jw.crl (hash: Kxy17bkxY0TR1eXUok/4e5VHWZjRfPltQwIiWg9mgKk=)
2: FC7m4zQkIo-WG8iUJPA7QdUwc2Q.roa (hash: qfDxcFq2nhIRONRYreU1JYZ6iv5WYCmTLK7iYYoio4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0SFb_EiHbDZRg1bv1uKAJVod7jw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:8d:bb:9f:95:cd:48:3c:64:0c:d6:db:0f:51:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1215bfc48876c36518356efd6e280255a1dee3c
Validity
Not Before: Nov 5 03:00:38 2025 GMT
Not After : Nov 6 03:00:38 2025 GMT
Subject: CN=cecf1502a9e804eb13beb03712f0a665807b0822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:5c:7e:e1:d1:87:d8:49:64:3a:71:93:4c:5d:
d5:b4:cf:64:04:f5:89:a0:ef:19:03:30:ba:af:cd:
e6:c7:3f:11:40:38:43:8a:8d:43:9d:34:f6:1c:45:
30:99:ec:1f:62:9e:8a:fb:eb:33:ca:1e:20:dd:d4:
d6:21:10:bd:7d:17:30:70:00:19:7f:65:3b:d7:71:
14:e4:b8:ce:d0:b5:e2:b3:2a:0b:ef:af:fb:3e:88:
32:5a:cd:d5:25:95:86:dc:63:5c:47:68:4a:86:c3:
6f:72:da:a8:87:9b:ac:2a:86:b1:84:12:39:ef:49:
11:2b:ec:b0:ea:8a:9b:7d:5a:9f:ce:ef:3f:0a:dd:
f0:45:96:24:9c:9a:31:ad:9f:a7:59:bd:0e:83:e1:
0d:4c:31:14:bf:2e:33:0a:57:51:ed:34:87:75:0c:
1f:3a:1b:fe:71:8e:10:fa:8d:e3:63:7c:11:1f:e8:
e9:67:4c:9e:38:54:41:3d:09:2a:fd:85:96:4e:98:
0c:35:85:4e:81:65:2b:cb:a0:bb:fd:94:c3:55:19:
39:dd:80:6a:b2:ee:ff:9b:7c:cb:52:4a:e3:b3:21:
f3:8a:3b:b8:8c:c5:17:26:62:9e:da:57:c2:c4:47:
1c:ec:50:a1:d8:3c:29:bd:e3:0a:ca:e0:76:9e:a7:
d3:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:CF:15:02:A9:E8:04:EB:13:BE:B0:37:12:F0:A6:65:80:7B:08:22
X509v3 Authority Key Identifier:
keyid:D1:21:5B:FC:48:87:6C:36:51:83:56:EF:D6:E2:80:25:5A:1D:EE:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0SFb_EiHbDZRg1bv1uKAJVod7jw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:08:0f:64:bf:ba:f4:ca:bb:11:2b:1b:9e:86:9c:ff:3e:27:
b1:15:f9:74:cd:ff:19:25:0b:ef:ae:89:79:ad:ad:21:a1:13:
9b:4e:05:8f:20:d0:53:c5:61:4e:c9:8b:d4:7e:3b:0e:fa:bb:
64:52:bd:79:07:71:09:be:17:ea:c9:06:86:f7:8f:2f:d5:2c:
e9:3e:b2:49:18:b4:14:00:6e:2c:c0:dc:d7:8e:aa:8c:c2:4f:
73:b7:3f:41:c6:a3:1e:6d:8a:4e:e3:c5:e9:25:6f:7a:63:cd:
88:27:a2:53:1d:a0:2b:6c:99:21:1e:b1:be:1b:40:e5:ae:71:
4a:74:69:d5:31:e2:53:55:39:66:48:eb:bf:6d:56:90:a2:2a:
10:61:8d:42:69:0c:5e:e0:4b:5d:3b:88:25:d0:95:0f:3e:47:
be:71:c7:d7:53:10:00:7a:b5:c9:f9:70:f3:91:90:18:c6:d2:
9a:e5:78:49:c1:44:a9:85:ae:64:57:05:4b:b1:bc:f4:14:0a:
68:0b:88:6f:c3:24:95:38:f5:7d:5c:81:fa:ca:e7:29:d5:61:
47:b8:f7:70:ae:f4:f1:44:77:a1:d9:a5:6c:fa:b7:3b:35:c2:
43:0d:b7:37:de:b4:48:3d:7b:e5:33:8e:72:e9:d8:16:62:b4:
99:3c:7c:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:35:31 2025 by rpki-client