Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/0d5f53-9653-47fb-a977-48f5e8767d02/1/0d9IA-VLCEqZy3uwRL95EydZS3M.mft
File: 0d9IA-VLCEqZy3uwRL95EydZS3M.mft (raw, json)
Hash identifier: dCALmlqEWhZYHW7YnjPlET5Q8OAbvrkk4oBkPNLq6Ec=
Subject key identifier: 30:D5:E4:FD:8A:93:0B:80:81:BC:9F:92:11:5C:E6:13:33:01:28:FA
Authority key identifier: D1:DF:48:03:E5:4B:08:4A:99:CB:7B:B0:44:BF:79:13:27:59:4B:73
Certificate issuer: /CN=d1df4803e54b084a99cb7bb044bf791327594b73
Certificate serial: 019A50E3AD22C2CFFEF4E51769C831EE5248
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0d9IA-VLCEqZy3uwRL95EydZS3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/0d5f53-9653-47fb-a977-48f5e8767d02/1/0d9IA-VLCEqZy3uwRL95EydZS3M.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 22:01:29 +0000
Manifest this update: Tue 04 Nov 2025 22:01:29 +0000
Manifest next update: Wed 05 Nov 2025 22:01:29 +0000
Files and hashes: 1: 0d9IA-VLCEqZy3uwRL95EydZS3M.crl (hash: R2I+pDXXYYC2aw23WRBvCIDJt74hFwwIqn87QMxDLCw=)
2: TOONOy5Q_RT0Xdkv1KFKuSIfrvU.roa (hash: TXGZC4gRCS30Z/KLMEQnuIwYUvM4xeHM8tIdbYo8vlk=)
3: XHMaLFAePq5JA6OnHRNtHIpFVio.roa (hash: D2PLJ8qBf8PPcZXfN8bgCyLTx+3FXCbn/4NCY4tEha8=)
4: uruDYSjJsQHtgQsmkfxJYvrLAmA.roa (hash: ugK90f7lpLYbl+ftnhcqa/fEdcHq1apLzUka+OcYLBc=)
5: xhEX51qp0YGYG_1Xjcz1FIDptho.roa (hash: S68nwmQ0GGVwMdWpSzCa8wmg/ndTObvviSDOIpAfn2U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/0d5f53-9653-47fb-a977-48f5e8767d02/1/0d9IA-VLCEqZy3uwRL95EydZS3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/0d5f53-9653-47fb-a977-48f5e8767d02/1/0d9IA-VLCEqZy3uwRL95EydZS3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/0d9IA-VLCEqZy3uwRL95EydZS3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:ad:22:c2:cf:fe:f4:e5:17:69:c8:31:ee:52:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1df4803e54b084a99cb7bb044bf791327594b73
Validity
Not Before: Nov 4 22:01:29 2025 GMT
Not After : Nov 5 22:01:29 2025 GMT
Subject: CN=30d5e4fd8a930b8081bc9f92115ce613330128fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:35:76:65:55:c4:9c:3c:2e:40:ef:24:9e:b0:
ce:a9:c4:6c:f1:3e:9e:f4:a6:88:2f:51:05:d8:1c:
50:3e:85:46:03:58:39:c3:ad:51:34:94:03:90:8c:
6e:e3:b0:6c:9c:94:a8:95:1a:75:ec:7c:8e:fe:69:
51:8c:5c:c1:8f:f9:db:74:d4:be:c6:e3:a9:78:cf:
fe:f3:f1:ab:dd:c4:da:74:86:83:c3:5b:e1:32:5f:
a9:64:41:0a:f3:b6:13:7e:0c:ad:80:81:08:18:71:
c0:75:1e:38:21:dc:a8:d5:e6:8c:30:6c:41:4d:a6:
74:9e:a1:77:6e:ca:ce:0c:5b:30:0e:dc:64:02:b2:
b1:86:b0:e0:e8:49:f9:8f:05:8f:2e:91:b1:01:9a:
75:ee:06:be:66:8a:2e:18:8e:a6:ee:5d:f3:f8:be:
1a:14:04:dc:b6:1b:30:c9:dd:7a:37:fa:25:0f:24:
41:b1:7e:d8:2a:ca:e1:88:58:35:52:e0:10:16:84:
3b:90:b5:a5:05:e6:a0:64:48:f3:25:8d:90:e9:19:
94:65:a7:07:6f:76:ab:09:dc:a3:9b:48:04:09:3d:
d4:54:b2:9b:ea:ab:a4:13:54:14:07:64:13:89:98:
cd:b3:89:55:cd:04:92:de:66:68:ca:0b:92:f3:4e:
34:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:D5:E4:FD:8A:93:0B:80:81:BC:9F:92:11:5C:E6:13:33:01:28:FA
X509v3 Authority Key Identifier:
keyid:D1:DF:48:03:E5:4B:08:4A:99:CB:7B:B0:44:BF:79:13:27:59:4B:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d9IA-VLCEqZy3uwRL95EydZS3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/0d5f53-9653-47fb-a977-48f5e8767d02/1/0d9IA-VLCEqZy3uwRL95EydZS3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/0d5f53-9653-47fb-a977-48f5e8767d02/1/0d9IA-VLCEqZy3uwRL95EydZS3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:48:cd:7a:bc:08:96:7a:30:73:5f:48:22:3f:83:e4:0f:ab:
76:f8:66:51:dd:7b:0e:f6:64:bf:43:eb:a7:bc:c0:32:ad:64:
fa:b4:7f:f0:73:a3:86:fe:f2:7f:b3:9c:0f:e5:54:78:26:42:
17:ba:a2:54:d5:63:f4:38:8d:54:83:b6:79:7c:3f:9d:d4:17:
c5:b5:1b:aa:43:09:3e:fb:63:29:f1:d0:82:5d:71:51:fa:aa:
5d:f0:90:2a:65:e1:78:9f:d7:4f:d0:d8:16:21:c9:5b:8c:7a:
ca:d4:26:58:4f:aa:6f:bf:0c:72:cd:3e:70:f1:8c:ea:8a:3b:
0e:a9:75:bf:0b:0e:4c:ae:48:26:75:2a:8b:e0:3b:33:63:e9:
6a:91:4b:ba:4a:90:dc:74:0c:43:35:ca:6e:b4:2f:cb:19:2d:
04:75:c8:f1:98:01:5f:19:5c:44:81:cd:64:b6:4d:9b:93:8d:
bc:98:c3:0b:f8:15:04:85:7d:43:e9:9b:e8:76:15:6c:d3:99:
40:74:11:6e:3b:7a:ff:0d:5a:d1:0c:af:69:3d:57:e4:3d:e2:
d1:87:df:ed:95:1b:48:5f:75:15:65:c4:2a:c9:e1:be:28:dd:
50:ef:f4:df:55:e4:d6:2c:bb:f2:16:10:a1:2f:02:5d:2e:f2:
4f:a5:97:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:50:17 2025 by rpki-client