Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.mft
File: 0SX6xKXZW0Ggcuu_TwNdCbOqWcc.mft (raw, json)
Hash identifier: 5e5hDxPSU7J8+rmgOjhVciRFNA/s5QhUDYC15AAMlp4=
Subject key identifier: FD:49:0E:9A:A5:87:2F:5C:FE:C0:CD:86:B8:A7:E7:07:99:72:44:C4
Authority key identifier: D1:25:FA:C4:A5:D9:5B:41:A0:72:EB:BF:4F:03:5D:09:B3:AA:59:C7
Certificate issuer: /CN=d125fac4a5d95b41a072ebbf4f035d09b3aa59c7
Certificate serial: 019A5006FBDDF2734DFEC22DCBAD4146056D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.mft
Manifest number: 0B12
Signing time: Tue 04 Nov 2025 18:00:26 +0000
Manifest this update: Tue 04 Nov 2025 18:00:26 +0000
Manifest next update: Wed 05 Nov 2025 18:00:26 +0000
Files and hashes: 1: 0SX6xKXZW0Ggcuu_TwNdCbOqWcc.crl (hash: fjOCf/esG6zDf5WJq/haLBPHZAL5CvOs9z1hcHkcDmA=)
2: sW1FbXnmMLs31PJCKJCZsxmeKF0.roa (hash: gPwTFuA8vjPg7PCIOrBM62Yfp57prUWNjPVJTmJKnuM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:06:fb:dd:f2:73:4d:fe:c2:2d:cb:ad:41:46:05:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d125fac4a5d95b41a072ebbf4f035d09b3aa59c7
Validity
Not Before: Nov 4 18:00:26 2025 GMT
Not After : Nov 5 18:00:26 2025 GMT
Subject: CN=fd490e9aa5872f5cfec0cd86b8a7e707997244c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:05:b1:1a:f9:fe:b1:d7:d1:cf:ff:f1:55:94:
d6:c1:47:c8:55:1e:a7:08:a6:9c:47:e1:66:f2:30:
58:fa:6e:a3:67:9d:57:a3:06:9c:c1:d0:70:0f:1b:
a0:5f:68:cd:80:e9:39:24:5f:cb:2e:ea:5c:68:fd:
e8:aa:33:80:cc:56:20:af:ee:60:77:08:5a:e2:8e:
5b:d8:d5:fe:37:f8:94:b1:04:a6:74:91:1d:f2:23:
75:07:2b:12:fa:16:36:0a:21:05:4a:21:d3:bb:de:
7f:5f:f6:dd:35:bb:b1:8e:09:81:ea:55:a9:b0:15:
01:82:fa:f2:b5:55:e3:15:64:e0:80:fa:e6:09:f7:
a9:4c:6f:f9:42:31:ef:03:fb:92:e5:b4:ae:6e:0f:
31:dc:74:76:47:88:38:17:92:0b:68:ef:42:8e:b7:
1d:c4:1e:dd:a7:5c:df:e8:83:8f:fd:dd:7f:23:b5:
d1:b0:cb:29:e3:9b:25:52:bc:3d:0b:3d:f3:40:28:
74:76:9c:d6:24:43:c4:5a:2f:9a:00:de:1c:7a:73:
00:15:ba:9d:f0:b6:2a:ae:f2:cd:72:74:36:e7:bd:
99:2a:4f:09:9f:af:ed:84:09:c4:f2:ab:72:17:2a:
c9:36:aa:98:42:93:8e:4a:31:42:d3:97:1b:60:41:
14:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:49:0E:9A:A5:87:2F:5C:FE:C0:CD:86:B8:A7:E7:07:99:72:44:C4
X509v3 Authority Key Identifier:
keyid:D1:25:FA:C4:A5:D9:5B:41:A0:72:EB:BF:4F:03:5D:09:B3:AA:59:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:6d:b4:30:8b:c3:9b:73:1f:2e:0f:af:e0:44:80:96:f0:d7:
ea:fa:70:1c:ec:27:66:17:56:f1:df:86:a3:6b:32:92:16:2c:
9f:5b:a5:26:1c:ba:65:0e:ca:9a:fa:d0:e7:a2:22:1e:5a:05:
4d:ec:96:51:fa:1e:cb:b3:10:24:43:dc:63:82:5f:d0:b2:34:
c3:5b:25:43:7a:30:6f:cb:ba:2d:42:5a:c6:ac:aa:3a:d2:b1:
f2:71:63:0d:83:5e:2b:28:ca:08:ef:ff:47:5c:1e:44:13:28:
41:5b:fc:58:c3:3b:f3:13:77:9a:79:af:6d:a4:7f:e4:65:d4:
02:ed:ce:bf:16:60:93:c2:66:60:30:cf:f2:23:78:d4:d1:44:
5e:9c:42:15:66:fb:a9:4c:d1:28:0f:1b:9b:e5:17:dc:18:ee:
56:3c:32:c8:89:df:90:8c:d8:0d:be:4c:d4:de:64:e2:f1:90:
93:6d:3d:11:e8:96:8b:a0:2c:81:49:1d:58:13:a9:f5:06:03:
d0:5d:8b:bc:08:13:80:39:db:3c:ce:20:9b:d0:d9:4c:56:b1:
ab:96:4e:c4:32:38:60:22:9e:13:c2:ab:a0:3d:1e:9c:76:7f:
6e:c7:da:bc:6f:af:49:00:ac:68:d5:ba:0f:a3:ee:73:2e:eb:
8f:0c:cb:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:44:43 2025 by rpki-client