Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/15fb8a-9261-462d-a5ac-d5a1ea9edb08/1/0IpNevM5v1JVcjk3VdHPszzdta0.mft
File: 0IpNevM5v1JVcjk3VdHPszzdta0.mft (raw, json)
Hash identifier: vHmR1pMQ0AFIp6Za4t2cmsATmfXVfHnWRnJtiLKkE6s=
Subject key identifier: B0:DA:7E:5F:23:7A:83:5E:29:47:65:8D:EE:7A:25:45:81:F0:5C:3F
Authority key identifier: D0:8A:4D:7A:F3:39:BF:52:55:72:39:37:55:D1:CF:B3:3C:DD:B5:AD
Certificate issuer: /CN=d08a4d7af339bf525572393755d1cfb33cddb5ad
Certificate serial: 019A4E4FBF1DF303218395E7FBD24DA1B417
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0IpNevM5v1JVcjk3VdHPszzdta0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/15fb8a-9261-462d-a5ac-d5a1ea9edb08/1/0IpNevM5v1JVcjk3VdHPszzdta0.mft
Manifest number: 1709
Signing time: Tue 04 Nov 2025 10:00:40 +0000
Manifest this update: Tue 04 Nov 2025 10:00:40 +0000
Manifest next update: Wed 05 Nov 2025 10:00:40 +0000
Files and hashes: 1: 0IpNevM5v1JVcjk3VdHPszzdta0.crl (hash: PIqSmxaS/9zRGdW8pbFMvHMOk3VP2yQvqI3RMnx1nk0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/15fb8a-9261-462d-a5ac-d5a1ea9edb08/1/0IpNevM5v1JVcjk3VdHPszzdta0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/15fb8a-9261-462d-a5ac-d5a1ea9edb08/1/0IpNevM5v1JVcjk3VdHPszzdta0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0IpNevM5v1JVcjk3VdHPszzdta0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:bf:1d:f3:03:21:83:95:e7:fb:d2:4d:a1:b4:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d08a4d7af339bf525572393755d1cfb33cddb5ad
Validity
Not Before: Nov 4 10:00:40 2025 GMT
Not After : Nov 5 10:00:40 2025 GMT
Subject: CN=b0da7e5f237a835e2947658dee7a254581f05c3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6b:b5:b1:78:4b:21:65:75:6b:e0:58:d7:45:
50:cf:56:bd:80:d1:cd:73:db:e1:ff:c6:fa:3c:a3:
b3:80:fc:3c:dd:91:fd:09:8f:6f:af:9a:66:6f:43:
bd:99:bd:2d:c1:65:e4:76:e3:62:11:1c:ed:cf:3a:
4d:30:20:b7:ff:6b:a7:1c:05:f7:81:4c:84:31:1b:
87:7f:63:9d:67:c8:03:85:84:bc:ab:5a:ec:09:c5:
eb:83:c6:29:c5:27:6d:4e:2a:39:68:7f:73:59:74:
b5:4b:1a:9c:f7:74:d1:08:38:ea:b1:1d:a6:84:66:
32:98:18:06:af:b7:a6:fe:ad:46:9a:70:a0:85:00:
8d:ad:e3:42:05:a4:44:17:30:cd:89:3d:8f:e6:0b:
e1:39:9d:fd:60:e5:fd:e4:d5:4a:56:2d:40:5d:6f:
ca:57:21:24:16:f1:c4:3b:b7:87:d1:e2:14:39:47:
de:03:84:aa:7d:17:2e:ad:af:92:42:15:2b:ed:ed:
f4:fe:ee:a6:2d:1b:a2:e4:b2:03:82:e1:e2:1d:51:
84:c8:3f:76:7e:13:d0:6a:dc:ab:62:91:b5:ed:41:
7a:2d:79:16:f5:20:9e:dc:f9:80:34:5b:c7:e6:75:
3e:14:39:f6:e7:89:f6:07:5d:64:b7:17:a1:83:5c:
f1:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:DA:7E:5F:23:7A:83:5E:29:47:65:8D:EE:7A:25:45:81:F0:5C:3F
X509v3 Authority Key Identifier:
keyid:D0:8A:4D:7A:F3:39:BF:52:55:72:39:37:55:D1:CF:B3:3C:DD:B5:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0IpNevM5v1JVcjk3VdHPszzdta0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/15fb8a-9261-462d-a5ac-d5a1ea9edb08/1/0IpNevM5v1JVcjk3VdHPszzdta0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/15fb8a-9261-462d-a5ac-d5a1ea9edb08/1/0IpNevM5v1JVcjk3VdHPszzdta0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:fc:48:53:db:a5:a7:ea:62:f6:54:f3:7e:2e:89:cf:61:04:
be:b7:dd:5b:dd:7b:cf:e9:01:15:6b:8b:1f:72:42:47:b4:4b:
3e:51:83:9d:32:f1:1a:02:55:1b:bd:5c:7f:f7:3d:d1:b8:8b:
a8:e9:60:13:0c:4e:65:86:79:48:59:2d:7e:6a:62:4f:47:66:
9c:67:20:42:fe:c8:b3:f1:74:e7:fc:6e:86:20:77:18:d5:ab:
1b:80:3a:c8:b0:16:94:a8:04:9e:3c:f6:ce:b6:21:55:75:cb:
59:1e:0f:9f:db:9b:21:ef:67:c0:6a:10:0b:39:c9:3a:9b:8f:
6d:2f:3b:0e:3a:de:3f:43:d2:3b:c2:2d:9c:82:9f:5b:75:a3:
04:18:8c:00:e0:3a:ec:67:2f:20:61:a9:cd:66:6f:bc:b8:ee:
af:22:5a:0a:f2:a4:b4:8c:79:27:7f:b4:b2:db:9c:09:b9:6c:
49:8c:4c:29:42:c7:b8:f5:b9:35:0d:b6:f2:1e:31:12:df:bd:
6d:45:66:2a:62:92:ed:3a:3b:ef:01:6f:25:16:af:2c:53:12:
c8:62:d0:4b:ac:e9:ef:3e:27:4e:c5:d1:51:d6:68:f0:65:55:
37:5c:cf:03:db:6e:70:03:df:c1:bc:84:a0:ff:04:6a:5c:8f:
f6:c4:e2:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:21:50 2025 by rpki-client