Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.mft
File: 0KNDo37K0r-yw1vZsm1_SLy1dTc.mft (raw, json)
Hash identifier: 0Uc/zVo6GrWLy5qXFnCBcJW/7FyzVXwtVGBU2AzdbuY=
Subject key identifier: 3B:16:38:1A:36:2C:C0:FB:D5:D2:4D:E5:93:2F:82:B6:F1:6F:CF:72
Authority key identifier: D0:A3:43:A3:7E:CA:D2:BF:B2:C3:5B:D9:B2:6D:7F:48:BC:B5:75:37
Certificate issuer: /CN=d0a343a37ecad2bfb2c35bd9b26d7f48bcb57537
Certificate serial: 019A5150C0B23C9580CBFA6471FEA0C7B070
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0KNDo37K0r-yw1vZsm1_SLy1dTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.mft
Manifest number: 169F
Signing time: Wed 05 Nov 2025 00:00:37 +0000
Manifest this update: Wed 05 Nov 2025 00:00:37 +0000
Manifest next update: Thu 06 Nov 2025 00:00:37 +0000
Files and hashes: 1: 0KNDo37K0r-yw1vZsm1_SLy1dTc.crl (hash: 3twyet40aPFybCiODdgwrvKh0rElfVvNogG3hep9tUg=)
2: cednPNYKxfRsr4W4osQ0UxWr_xg.roa (hash: bAnClABodJAGvw6mOL61pHv3A1a0Gmryz3vjrqAKOxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0KNDo37K0r-yw1vZsm1_SLy1dTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 00:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:c0:b2:3c:95:80:cb:fa:64:71:fe:a0:c7:b0:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0a343a37ecad2bfb2c35bd9b26d7f48bcb57537
Validity
Not Before: Nov 5 00:00:37 2025 GMT
Not After : Nov 6 00:00:37 2025 GMT
Subject: CN=3b16381a362cc0fbd5d24de5932f82b6f16fcf72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:9f:37:67:7d:65:6f:20:df:3f:4a:9e:46:b2:
4f:ac:01:e4:78:c5:d9:52:c5:cb:da:5f:fd:44:20:
70:ce:41:7d:77:0a:e4:e5:b1:90:57:24:44:d3:83:
af:83:23:eb:d0:c6:56:fe:32:22:35:ab:da:83:c1:
e2:4a:49:06:08:66:d1:22:04:d2:fe:48:a0:92:dc:
67:57:c5:5a:c7:7f:08:d1:e0:14:e6:6b:b3:78:33:
57:84:99:86:a9:05:e8:3b:eb:fd:72:d0:42:25:7e:
2b:c8:25:3b:58:4d:03:35:ee:66:ce:77:7d:28:83:
14:1b:1e:c5:ac:c6:14:8c:66:50:1c:4a:08:d7:df:
ac:9d:c2:4b:50:9e:a4:a3:6b:4e:e2:f6:0c:b1:2f:
a2:93:a6:c1:ce:28:11:77:f3:75:ad:d0:c0:83:86:
2d:b2:90:87:3a:a5:73:97:7e:60:5a:48:91:85:d8:
23:9b:2c:5b:1d:f4:88:ae:73:ee:99:f6:25:02:ab:
5b:95:fe:b8:22:b3:d4:a2:55:9a:5d:ab:17:e9:2d:
3a:57:97:f3:82:69:4e:0d:84:7c:4f:cc:b2:c8:2c:
c8:b4:29:24:b6:85:03:68:7b:44:b4:83:02:0a:79:
b0:50:f1:15:f3:47:17:64:1a:f9:39:02:a5:ee:c8:
73:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:16:38:1A:36:2C:C0:FB:D5:D2:4D:E5:93:2F:82:B6:F1:6F:CF:72
X509v3 Authority Key Identifier:
keyid:D0:A3:43:A3:7E:CA:D2:BF:B2:C3:5B:D9:B2:6D:7F:48:BC:B5:75:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KNDo37K0r-yw1vZsm1_SLy1dTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:75:fd:14:c5:08:16:23:69:60:11:74:70:07:5c:f0:25:23:
0e:88:15:de:e4:2d:db:c7:e9:31:21:3a:bc:74:77:a4:aa:97:
c2:5c:c1:76:b5:0e:23:79:9e:5d:8c:40:9c:52:c6:62:79:0e:
ee:2c:11:08:40:46:0b:15:d6:91:4d:60:67:b0:2e:6b:0f:db:
f3:04:30:4c:e8:ea:b9:07:f9:1c:64:9c:f5:25:f1:6c:13:b4:
74:4a:7d:68:21:af:1e:25:16:9b:2c:d5:05:ce:ee:5d:96:1e:
ca:36:e1:88:0a:62:a2:32:13:ad:7a:90:78:9c:08:02:80:8c:
a6:bc:6b:59:3b:2d:85:44:1c:b0:f7:67:43:0d:aa:80:08:27:
2b:3d:49:02:1f:89:58:b1:de:6a:5b:b1:37:e1:f3:c9:36:ed:
2e:4b:67:68:dd:07:47:b3:98:de:25:db:6d:f1:d4:53:7c:09:
99:e1:f5:d9:3e:c0:4d:9d:62:f0:84:07:e6:a7:7c:30:8c:c5:
2e:6a:5e:6e:a4:57:a1:aa:52:f7:86:83:06:76:51:b5:51:3d:
2d:66:77:32:a8:7a:c3:b0:19:91:ec:21:b2:71:96:26:8b:aa:
f5:09:23:3f:f6:e3:71:b4:3d:3f:a4:2f:21:40:31:02:e4:a6:
4a:eb:3a:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:35:40 2025 by rpki-client