Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/12eadf-53b7-428a-81ed-9da2cf4e6065/1/0dXq4THDsQiP-wI3mA1u4YiWaMY.mft
File: 0dXq4THDsQiP-wI3mA1u4YiWaMY.mft (raw, json)
Hash identifier: HNpddb86Z/XE1rKZfgiiyijDSXLQPr0Xgdxz6jF3lU8=
Subject key identifier: 54:06:10:1C:70:BD:51:E1:3A:4E:7E:1E:3E:24:8D:1A:48:1A:54:5D
Authority key identifier: D1:D5:EA:E1:31:C3:B1:08:8F:FB:02:37:98:0D:6E:E1:88:96:68:C6
Certificate issuer: /CN=d1d5eae131c3b1088ffb0237980d6ee1889668c6
Certificate serial: 019A5640194F52867CE9FF84668BF9577180
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0dXq4THDsQiP-wI3mA1u4YiWaMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/12eadf-53b7-428a-81ed-9da2cf4e6065/1/0dXq4THDsQiP-wI3mA1u4YiWaMY.mft
Manifest number: 8B
Signing time: Wed 05 Nov 2025 23:00:32 +0000
Manifest this update: Wed 05 Nov 2025 23:00:32 +0000
Manifest next update: Thu 06 Nov 2025 23:00:32 +0000
Files and hashes: 1: 0dXq4THDsQiP-wI3mA1u4YiWaMY.crl (hash: xdAJ/N/l6mOzlxg2Ei/4iKVLX8LpOAtLMS4Z8Opn6p0=)
2: 6W2f7odCRZasTES13-ea8vAK_m8.roa (hash: okmw3ktsRXXv4R0y2S6qFif1SfGCGqe5Hb5ZPwgIWm0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/12eadf-53b7-428a-81ed-9da2cf4e6065/1/0dXq4THDsQiP-wI3mA1u4YiWaMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/12eadf-53b7-428a-81ed-9da2cf4e6065/1/0dXq4THDsQiP-wI3mA1u4YiWaMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0dXq4THDsQiP-wI3mA1u4YiWaMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 21:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:56:40:19:4f:52:86:7c:e9:ff:84:66:8b:f9:57:71:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1d5eae131c3b1088ffb0237980d6ee1889668c6
Validity
Not Before: Nov 5 23:00:32 2025 GMT
Not After : Nov 6 23:00:32 2025 GMT
Subject: CN=5406101c70bd51e13a4e7e1e3e248d1a481a545d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:56:42:02:1d:44:7d:9f:51:47:c6:77:40:09:
6e:e9:0d:94:26:05:3f:ea:8e:07:ee:7c:93:a0:a5:
db:a5:c8:0d:11:43:55:c6:7b:98:7f:cc:d4:7a:2f:
72:aa:64:55:06:6f:8c:c6:c0:ec:4d:81:4b:a3:8d:
0d:74:8b:d9:8e:bf:ac:11:9f:50:6b:72:87:21:b2:
50:15:ac:11:32:83:af:aa:bc:77:c2:8a:33:99:84:
81:8d:19:e2:66:10:07:33:92:ad:dc:4c:11:45:21:
eb:4d:43:3c:a9:60:28:e9:b4:2a:6b:d5:e8:94:96:
01:44:24:94:9a:ad:a9:86:a5:bd:03:25:07:ee:2e:
f3:33:2a:2a:81:57:a9:7c:18:32:f9:b3:3d:63:64:
3a:6a:58:95:05:c6:e1:48:34:23:58:40:a0:30:3f:
e5:84:f0:4e:95:44:e9:ba:8f:ee:84:0a:7c:99:5e:
72:9a:66:16:a7:2f:57:62:f9:ab:f2:6c:15:c5:6a:
f3:4d:ce:44:66:96:5b:91:94:15:91:97:6e:38:20:
38:5b:0a:08:43:9e:5d:b5:59:17:cb:31:72:d5:6a:
eb:86:f0:1a:bf:2d:7b:6f:13:fe:f5:e3:db:2f:2f:
01:63:d5:27:9e:78:2e:9c:74:04:ff:2b:ed:a8:05:
16:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:06:10:1C:70:BD:51:E1:3A:4E:7E:1E:3E:24:8D:1A:48:1A:54:5D
X509v3 Authority Key Identifier:
keyid:D1:D5:EA:E1:31:C3:B1:08:8F:FB:02:37:98:0D:6E:E1:88:96:68:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0dXq4THDsQiP-wI3mA1u4YiWaMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/12eadf-53b7-428a-81ed-9da2cf4e6065/1/0dXq4THDsQiP-wI3mA1u4YiWaMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/12eadf-53b7-428a-81ed-9da2cf4e6065/1/0dXq4THDsQiP-wI3mA1u4YiWaMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:fc:e0:ea:cd:d0:68:f2:d4:5a:7f:68:19:83:7f:1a:d9:0c:
a6:dd:39:83:38:70:56:3c:30:60:e0:47:b3:90:5c:aa:40:af:
a2:40:8e:1d:6b:00:6c:ab:bb:79:ce:8e:40:0d:7a:88:d0:f8:
91:0d:b7:fb:65:10:e4:ab:a0:94:b2:3f:d9:0b:05:ca:7e:11:
4c:35:25:16:6d:0e:15:4f:51:d5:64:c3:27:dd:0f:00:79:b4:
c2:35:7b:f4:b1:56:88:ee:22:8c:58:40:4e:66:24:7e:9f:ff:
27:ed:11:c7:36:7d:29:f3:f8:a9:ae:ff:af:d0:29:56:47:db:
01:5a:dd:2d:b0:b7:c9:d5:c1:7c:2a:14:9d:bf:85:c1:59:8c:
7b:d6:a6:3b:44:6d:da:5f:eb:1a:c6:75:2b:6e:03:b9:a5:f8:
ac:ad:61:33:8d:a1:02:16:0f:4f:34:e0:e3:56:1a:70:03:0b:
71:77:68:22:6c:47:d0:da:81:de:98:c1:c7:a9:99:2d:99:fe:
77:48:5f:94:ec:7e:0b:7b:ae:4f:15:18:31:7d:8e:0d:22:93:
43:78:f8:f4:82:8c:82:ae:e0:2a:50:5a:84:d9:37:8d:26:78:
59:a2:27:b6:59:26:8c:f6:8f:16:05:65:a9:3f:b6:82:0a:09:
18:b0:cf:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpWQBlPUoZ86f+EZov5V3GAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxZDVlYWUxMzFjM2IxMDg4ZmZiMDIzNzk4MGQ2ZWUxODg5
NjY4YzYwHhcNMjUxMTA1MjMwMDMyWhcNMjUxMTA2MjMwMDMyWjAzMTEwLwYDVQQD
Eyg1NDA2MTAxYzcwYmQ1MWUxM2E0ZTdlMWUzZTI0OGQxYTQ4MWE1NDVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFZCAh1EfZ9RR8Z3QAlu6Q2UJgU/
6o4H7nyToKXbpcgNEUNVxnuYf8zUei9yqmRVBm+MxsDsTYFLo40NdIvZjr+sEZ9Q
a3KHIbJQFawRMoOvqrx3woozmYSBjRniZhAHM5Kt3EwRRSHrTUM8qWAo6bQqa9Xo
lJYBRCSUmq2phqW9AyUH7i7zMyoqgVepfBgy+bM9Y2Q6aliVBcbhSDQjWECgMD/l
hPBOlUTpuo/uhAp8mV5ymmYWpy9XYvmr8mwVxWrzTc5EZpZbkZQVkZduOCA4WwoI
Q55dtVkXyzFy1WrrhvAavy17bxP+9ePbLy8BY9UnnngunHQE/yvtqAUW4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFQGEBxwvVHhOk5+Hj4kjRpIGlRdMB8GA1UdIwQY
MBaAFNHV6uExw7EIj/sCN5gNbuGIlmjGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGRYcTRUSERzUWlQLXdJM21BMXU0WWlXYU1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8xMmVhZGYtNTNiNy00MjhhLTgxZWQt
OWRhMmNmNGU2MDY1LzEvMGRYcTRUSERzUWlQLXdJM21BMXU0WWlXYU1ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS8xMmVhZGYtNTNiNy00MjhhLTgxZWQtOWRhMmNmNGU2MDY1
LzEvMGRYcTRUSERzUWlQLXdJM21BMXU0WWlXYU1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlvzg6s3Q
aPLUWn9oGYN/GtkMpt05gzhwVjwwYOBHs5BcqkCvokCOHWsAbKu7ec6OQA16iND4
kQ23+2UQ5KuglLI/2QsFyn4RTDUlFm0OFU9R1WTDJ90PAHm0wjV79LFWiO4ijFhA
TmYkfp//J+0RxzZ9KfP4qa7/r9ApVkfbAVrdLbC3ydXBfCoUnb+FwVmMe9amO0Rt
2l/rGsZ1K24DuaX4rK1hM42hAhYPTzTg41YacAMLcXdoImxH0NqB3pjBx6mZLZn+
d0hflOx+C3uuTxUYMX2ODSKTQ3j49IKMgq7gKlBahNk3jSZ4WaIntlkmjPaPFgVl
qT+2ggoJGLDPZA==
-----END CERTIFICATE-----
Generated at Thu Nov 6 00:19:25 2025 by rpki-client