Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.mft
File: D96X7tTY6EXrn45_8ybj_lJIAPo.mft (raw, json)
Hash identifier: fnykDK2UG1AL969/vgbEKQYiXADzDuY1jYYzh04aLf8=
Subject key identifier: D0:7C:DB:2F:17:3B:A1:97:B8:80:DA:6D:D8:0B:D4:0C:68:91:76:1D
Authority key identifier: 0F:DE:97:EE:D4:D8:E8:45:EB:9F:8E:7F:F3:26:E3:FE:52:48:00:FA
Certificate issuer: /CN=0fde97eed4d8e845eb9f8e7ff326e3fe524800fa
Certificate serial: 019A52635DA121159FB4054248E3DFC21818
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D96X7tTY6EXrn45_8ybj_lJIAPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.mft
Manifest number: 160E
Signing time: Wed 05 Nov 2025 05:00:34 +0000
Manifest this update: Wed 05 Nov 2025 05:00:34 +0000
Manifest next update: Thu 06 Nov 2025 05:00:34 +0000
Files and hashes: 1: D96X7tTY6EXrn45_8ybj_lJIAPo.crl (hash: rDUqGkDjuYumue2J9JU3amwOEtXZBNqnIDWKPComBLw=)
2: Eer6xNymX3hjdLEe5t0VeQLmAtQ.roa (hash: tC0bkcDHkroTK3NaBXSh9RDfJ1UlKylYr53Yt+96KUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/D96X7tTY6EXrn45_8ybj_lJIAPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:63:5d:a1:21:15:9f:b4:05:42:48:e3:df:c2:18:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fde97eed4d8e845eb9f8e7ff326e3fe524800fa
Validity
Not Before: Nov 5 05:00:34 2025 GMT
Not After : Nov 6 05:00:34 2025 GMT
Subject: CN=d07cdb2f173ba197b880da6dd80bd40c6891761d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4c:3d:45:39:e3:1b:51:60:8b:82:de:9d:81:
df:c9:29:62:e5:1c:ce:31:0a:87:a4:3f:4d:9e:a2:
c3:9c:c6:85:38:03:e5:0a:66:1a:ff:90:b7:e7:97:
f3:c7:94:e7:1a:fb:00:a6:4a:21:db:11:02:60:30:
f8:e0:3f:1b:42:0b:9d:a2:f4:f0:5b:ae:34:94:b9:
2a:32:33:d7:f6:ab:56:d5:6e:75:a1:c9:95:ab:a2:
bb:f8:b9:bf:5f:03:70:b5:4e:7b:45:63:86:d3:c3:
87:b4:78:d3:e7:63:d9:ea:15:6d:46:49:39:a1:c6:
ca:7f:13:4b:1a:41:d5:08:55:69:85:13:74:e6:96:
68:0d:f6:d0:ae:69:ba:74:91:e4:84:01:2d:2a:cb:
88:51:bd:90:5b:73:26:47:81:02:f8:d9:68:9e:73:
a7:ce:fd:bf:0f:ef:13:6c:14:6b:33:e2:c2:cc:9b:
fb:21:62:fa:1c:06:33:f2:c1:4e:74:f9:ad:da:04:
05:72:7f:12:ae:76:5d:4d:f4:7a:ab:7c:0e:8c:07:
4c:53:73:b6:e8:77:b1:21:0e:cd:9c:f1:66:67:70:
6f:e6:7e:17:9e:c8:b5:f4:a3:54:af:04:49:70:79:
38:cd:d9:05:46:d2:8a:af:4d:3e:9f:7c:93:4c:70:
08:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:7C:DB:2F:17:3B:A1:97:B8:80:DA:6D:D8:0B:D4:0C:68:91:76:1D
X509v3 Authority Key Identifier:
keyid:0F:DE:97:EE:D4:D8:E8:45:EB:9F:8E:7F:F3:26:E3:FE:52:48:00:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D96X7tTY6EXrn45_8ybj_lJIAPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:ee:b0:38:89:61:06:b6:ae:e3:ee:a1:82:62:fc:ce:58:f8:
47:51:93:17:73:3f:57:d7:7f:cb:6f:9c:ad:93:a1:99:bf:cf:
48:8c:6a:5a:e9:d3:8e:ce:44:3c:a8:1d:31:e9:f5:d6:a8:e2:
6b:7f:d1:6c:cc:75:19:85:77:b8:23:c9:b7:0a:b8:d3:ba:ae:
01:64:5b:b9:73:35:57:83:c6:06:6b:26:a8:29:3f:43:7e:ee:
97:52:79:ee:c2:8d:59:fb:48:9d:c4:ac:a4:b2:8f:f6:c0:13:
a9:04:9c:f9:8e:67:44:cc:09:fd:d4:20:98:5c:12:9b:9a:e5:
d1:ea:21:e4:3c:61:e7:53:a2:ac:64:82:ad:f2:53:30:57:81:
54:63:bf:67:59:ed:ce:43:43:c4:1b:78:78:2f:81:ca:28:f9:
c5:4f:bf:22:33:0b:46:ae:9c:cb:c4:78:f7:8c:6f:4b:60:6d:
72:99:4f:75:ac:d5:7a:7f:7e:db:15:a7:d9:a1:da:12:5a:6f:
1b:1e:c0:a5:2f:8b:13:05:98:5c:f2:90:3c:f0:6a:1f:32:94:
07:37:17:da:3b:12:f9:6c:b2:d3:fd:9c:08:9b:13:66:fe:f3:
89:13:90:29:a6:50:0f:1d:01:5f:ed:be:2e:40:80:56:ad:d5:
cb:26:3f:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:56:44 2025 by rpki-client