Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/e9cbf3-3a5d-4b74-86d3-cb0f2455cbd6/1/0rtm-96q__Q7llCx9svk8p7a9Yw.mft
File: 0rtm-96q__Q7llCx9svk8p7a9Yw.mft (raw, json)
Hash identifier: m3Cpo7ZSLa+9zCBLtZhFEZwcGxeKQaUO6bSYmNF1xCc=
Subject key identifier: 8C:B1:C5:96:E2:00:D9:B5:95:91:4A:59:18:20:F2:88:7A:70:8B:E1
Authority key identifier: D2:BB:66:FB:DE:AA:FF:F4:3B:96:50:B1:F6:CB:E4:F2:9E:DA:F5:8C
Certificate issuer: /CN=d2bb66fbdeaafff43b9650b1f6cbe4f29edaf58c
Certificate serial: 019A4D7415A468A7136E0EB2B58A3BB00E94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0rtm-96q__Q7llCx9svk8p7a9Yw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/e9cbf3-3a5d-4b74-86d3-cb0f2455cbd6/1/0rtm-96q__Q7llCx9svk8p7a9Yw.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 06:00:44 +0000
Manifest this update: Tue 04 Nov 2025 06:00:44 +0000
Manifest next update: Wed 05 Nov 2025 06:00:44 +0000
Files and hashes: 1: 0rtm-96q__Q7llCx9svk8p7a9Yw.crl (hash: j4SPrCKmHfE/qS8wDmV/yHOUf6jGX9IX89tnvxyXkyo=)
2: irNcQLmJh11TGBELw5uQP7kOVJE.roa (hash: R7pIQc58X7S0CJk6seUtKX1n/5bjuhfl7ShC4vfuTCg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/e9cbf3-3a5d-4b74-86d3-cb0f2455cbd6/1/0rtm-96q__Q7llCx9svk8p7a9Yw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/e9cbf3-3a5d-4b74-86d3-cb0f2455cbd6/1/0rtm-96q__Q7llCx9svk8p7a9Yw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0rtm-96q__Q7llCx9svk8p7a9Yw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:15:a4:68:a7:13:6e:0e:b2:b5:8a:3b:b0:0e:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2bb66fbdeaafff43b9650b1f6cbe4f29edaf58c
Validity
Not Before: Nov 4 06:00:44 2025 GMT
Not After : Nov 5 06:00:44 2025 GMT
Subject: CN=8cb1c596e200d9b595914a591820f2887a708be1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cf:36:8d:5a:d6:32:e6:c9:55:a3:61:b7:f7:
60:00:4a:96:f5:6f:4e:10:15:64:1e:46:47:99:55:
82:a2:79:fe:72:e9:7f:6a:af:d7:64:83:29:ac:63:
c7:b4:65:1c:d3:08:27:f0:6e:04:e8:94:92:1e:5b:
53:e9:5d:6f:09:d8:a4:89:13:27:bc:d4:05:c2:d9:
f5:9a:df:54:76:a6:3b:2b:35:c5:88:fc:85:29:ec:
4d:8d:89:00:cf:60:c3:9f:b5:a7:10:c8:8e:f4:11:
d6:e7:c0:17:ca:9f:3a:a2:bb:b2:7f:8b:b2:95:ec:
44:4c:50:bd:53:ce:fb:29:a9:f6:80:d8:bf:c9:3f:
70:68:91:79:0a:a3:5b:4f:76:8a:46:e2:c9:fe:24:
cd:80:6b:09:b0:64:1f:8e:b3:60:48:e4:9f:5d:7d:
ee:5d:aa:da:f0:ed:80:6d:bc:be:c4:b5:fd:d8:cd:
2a:22:cf:a2:b3:12:4b:3e:c2:cc:8a:ca:65:68:e5:
57:80:b0:72:33:38:a7:95:ce:4f:33:21:df:6a:fb:
82:ad:31:41:c4:11:dd:4e:01:09:01:b8:27:cf:61:
de:b4:55:64:64:45:66:51:b9:8f:dc:4a:00:78:81:
40:b4:ee:0c:f9:1a:fd:0d:a5:83:c9:5c:cf:13:04:
56:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:B1:C5:96:E2:00:D9:B5:95:91:4A:59:18:20:F2:88:7A:70:8B:E1
X509v3 Authority Key Identifier:
keyid:D2:BB:66:FB:DE:AA:FF:F4:3B:96:50:B1:F6:CB:E4:F2:9E:DA:F5:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0rtm-96q__Q7llCx9svk8p7a9Yw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e9cbf3-3a5d-4b74-86d3-cb0f2455cbd6/1/0rtm-96q__Q7llCx9svk8p7a9Yw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e9cbf3-3a5d-4b74-86d3-cb0f2455cbd6/1/0rtm-96q__Q7llCx9svk8p7a9Yw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:d6:65:4e:a1:57:5b:dd:27:76:d3:e5:79:b5:7a:e6:ba:f0:
2d:4a:e3:a4:ac:6e:f3:5e:5b:2c:0d:c6:fc:a8:1c:23:ee:53:
f4:0d:7f:95:38:35:c3:8d:5e:16:01:10:2c:60:db:b3:a4:73:
da:cc:a5:8f:bd:56:d2:a2:b8:7c:88:57:a0:ae:83:f3:27:43:
f2:91:b1:0b:a2:65:a3:9b:22:a2:3f:72:d6:24:a0:96:0c:24:
cb:86:11:ea:51:ee:d9:1e:00:cc:60:e5:94:26:ef:ff:07:26:
2b:e8:6f:d9:0f:19:4d:79:17:4e:9d:c9:79:e7:da:8a:84:22:
ae:b2:f4:8f:49:bd:8c:7b:8b:a2:89:f3:7a:ed:ff:ce:08:1d:
b9:e5:ac:87:cd:f5:78:72:6f:ea:52:6a:6d:0b:e2:72:cd:00:
97:87:31:d8:e8:e4:52:02:5d:d9:e6:b5:1d:f7:56:21:e4:94:
c9:8b:92:ca:82:26:18:fa:b7:34:42:e6:6b:40:8d:bf:01:de:
7e:c4:dc:91:eb:35:f6:01:df:cd:fb:a6:74:04:8f:9c:c8:f2:
9d:fe:9d:da:55:b2:b4:4c:7f:8c:42:67:db:db:44:e9:94:fb:
3b:d9:e8:ca:f4:5a:7b:8e:6a:a3:59:30:23:4a:d4:4d:45:e2:
96:ef:0d:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:56:00 2025 by rpki-client