Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/a275fe-86f0-41e9-8263-69db6a8f58d7/1/0sgbHQKPKvYeqbQiZ5pfjekFcuc.mft
File: 0sgbHQKPKvYeqbQiZ5pfjekFcuc.mft (raw, json)
Hash identifier: tHycTJsxCmb5FrvAOsIWqaCKzIgZ/pbX4GNIyQ5xsIo=
Subject key identifier: A2:7F:8E:D8:90:7C:0A:F5:7F:1F:D2:E3:12:CF:F9:86:2F:4B:E8:25
Authority key identifier: D2:C8:1B:1D:02:8F:2A:F6:1E:A9:B4:22:67:9A:5F:8D:E9:05:72:E7
Certificate issuer: /CN=d2c81b1d028f2af61ea9b422679a5f8de90572e7
Certificate serial: 019A4EF54BED73BF33E69F9AE8131C5CA4EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0sgbHQKPKvYeqbQiZ5pfjekFcuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/a275fe-86f0-41e9-8263-69db6a8f58d7/1/0sgbHQKPKvYeqbQiZ5pfjekFcuc.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 13:01:29 +0000
Manifest this update: Tue 04 Nov 2025 13:01:29 +0000
Manifest next update: Wed 05 Nov 2025 13:01:29 +0000
Files and hashes: 1: 0sgbHQKPKvYeqbQiZ5pfjekFcuc.crl (hash: Ho76ZovtgJZAd7C+bHjXYkuLkbvethjS9A83KFAejCU=)
2: KzJRm4blhpQ22QWdKYNtwSo9hec.roa (hash: VvdDpNHANgnzHXSd6NFNAPGvygHgdOqLpMuWRNVTc78=)
3: baZe32PKXIeppnY8Yaja4T-a3tY.roa (hash: tWsZkF/TWyoJvpRhiK8XSrqOZGwxm+EMQruE+7kHGHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/a275fe-86f0-41e9-8263-69db6a8f58d7/1/0sgbHQKPKvYeqbQiZ5pfjekFcuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/a275fe-86f0-41e9-8263-69db6a8f58d7/1/0sgbHQKPKvYeqbQiZ5pfjekFcuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0sgbHQKPKvYeqbQiZ5pfjekFcuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:4b:ed:73:bf:33:e6:9f:9a:e8:13:1c:5c:a4:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2c81b1d028f2af61ea9b422679a5f8de90572e7
Validity
Not Before: Nov 4 13:01:29 2025 GMT
Not After : Nov 5 13:01:29 2025 GMT
Subject: CN=a27f8ed8907c0af57f1fd2e312cff9862f4be825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:37:fb:58:1d:c4:ac:e6:7e:f6:8b:e1:00:c4:
e1:c0:98:76:aa:33:14:c1:29:e0:28:40:25:ee:bc:
75:e0:f1:97:b0:17:ea:f3:a9:7c:78:f4:f4:90:16:
b8:89:f9:e9:fb:20:71:42:bd:2e:f6:9d:aa:2d:51:
df:66:eb:16:82:03:59:3a:e8:b4:c0:62:05:d6:3e:
fb:84:0c:a4:e8:1e:4c:72:43:bc:ab:ab:18:85:9b:
03:75:65:3c:64:83:23:fb:b7:98:e7:fc:27:d9:e1:
6a:2f:4b:d9:05:56:5b:eb:bc:9e:c7:94:17:76:f3:
43:02:76:07:85:76:0a:7d:54:39:cb:c0:9b:c5:bd:
72:6c:f5:cc:a9:ff:83:a7:eb:3b:b3:67:1e:cc:8f:
e8:42:bc:a7:4e:73:59:d0:9b:84:f5:ad:81:5e:99:
9d:8d:c4:31:fa:59:f0:9c:4e:a1:de:97:81:bd:6d:
d7:f4:34:d5:6f:7f:65:27:c0:64:b4:b5:a2:c0:89:
7b:a8:c4:ed:77:eb:c7:25:6f:18:12:a2:7d:34:06:
a7:de:93:71:22:68:0b:57:50:fb:af:8e:70:28:11:
3c:a0:a8:9c:f9:34:c6:89:b5:f5:24:56:73:f4:0b:
ca:99:c8:79:5d:a7:71:60:73:d7:97:9a:8e:38:f0:
fd:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:7F:8E:D8:90:7C:0A:F5:7F:1F:D2:E3:12:CF:F9:86:2F:4B:E8:25
X509v3 Authority Key Identifier:
keyid:D2:C8:1B:1D:02:8F:2A:F6:1E:A9:B4:22:67:9A:5F:8D:E9:05:72:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0sgbHQKPKvYeqbQiZ5pfjekFcuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a275fe-86f0-41e9-8263-69db6a8f58d7/1/0sgbHQKPKvYeqbQiZ5pfjekFcuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a275fe-86f0-41e9-8263-69db6a8f58d7/1/0sgbHQKPKvYeqbQiZ5pfjekFcuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:02:54:e8:0a:3a:90:9f:e8:5f:58:88:4b:5a:fc:2d:6b:6b:
21:3f:bb:3a:7e:48:78:a7:a0:a3:7e:12:96:52:8e:98:23:be:
92:b8:f9:44:40:fb:67:e0:e1:ae:d2:69:5d:fe:83:e7:65:21:
41:b8:e4:c2:8e:1b:6a:b8:41:09:dd:fe:92:06:cd:7b:76:02:
4a:dc:d5:1a:bb:d3:15:27:9f:30:70:c9:08:97:f6:95:b0:bc:
db:05:6c:19:d1:64:d6:14:6f:9b:03:b8:7f:6a:73:e5:5e:bc:
d1:af:c5:63:67:69:66:06:35:aa:ca:dd:0c:87:ae:31:f8:93:
e7:5d:10:59:14:d1:08:5f:91:20:ae:ed:50:99:ec:f1:43:16:
a0:43:b9:4c:3b:5f:2b:f6:32:04:52:d9:c1:cc:d9:ed:24:80:
b8:85:7a:ea:56:c6:b7:b7:93:74:2d:79:f5:f0:fc:87:1e:12:
d1:00:e0:ba:6f:1c:75:f4:5b:ee:ae:dc:c4:08:bb:7a:16:b8:
f6:27:f6:cf:5a:a3:25:7b:52:82:27:a1:fc:10:78:51:ce:32:
49:66:85:72:2a:f4:98:53:b8:79:ae:86:2d:d1:e3:0a:d5:d5:
6a:65:99:b8:d9:7c:8e:8f:bf:4f:ff:7a:22:0a:45:08:67:a4:
4c:c4:81:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:36:36 2025 by rpki-client