Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.mft
File: 0i870LrmA6t5BgKpa7vEK1Mi6I8.mft (raw, json)
Hash identifier: aAbKUNHDEM1VitWQJRgxtjTmfLipy0GMvmhRmoRexSY=
Subject key identifier: A9:6E:2C:B1:10:EE:C6:A8:09:95:BD:AB:AA:79:00:22:FB:FF:0D:F8
Authority key identifier: D2:2F:3B:D0:BA:E6:03:AB:79:06:02:A9:6B:BB:C4:2B:53:22:E8:8F
Certificate issuer: /CN=d22f3bd0bae603ab790602a96bbbc42b5322e88f
Certificate serial: 019A56400324731F18EA2A5EA30E3136D6E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0i870LrmA6t5BgKpa7vEK1Mi6I8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.mft
Manifest number: 0D90
Signing time: Wed 05 Nov 2025 23:00:26 +0000
Manifest this update: Wed 05 Nov 2025 23:00:26 +0000
Manifest next update: Thu 06 Nov 2025 23:00:26 +0000
Files and hashes: 1: 0i870LrmA6t5BgKpa7vEK1Mi6I8.crl (hash: 7aOo9m6/98+IgXecshTlVRDBM+dxOrdiiXW1RWhP75Y=)
2: 1-Mnf3JnGm30D3TVdL8D8i-JJTg.roa (hash: FQArZOtG/iI5+2OZ+rGhEkabMbeYZiFVJ69aFAVvKUM=)
3: ViACi2znHcxjvEoTWJabRySlSug.roa (hash: /lKDXYbMBEGiN9zYRBMEKiyvRO0eOc45ePzpVSUQyuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0i870LrmA6t5BgKpa7vEK1Mi6I8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 21:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:56:40:03:24:73:1f:18:ea:2a:5e:a3:0e:31:36:d6:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d22f3bd0bae603ab790602a96bbbc42b5322e88f
Validity
Not Before: Nov 5 23:00:26 2025 GMT
Not After : Nov 6 23:00:26 2025 GMT
Subject: CN=a96e2cb110eec6a80995bdabaa790022fbff0df8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:e3:f6:59:83:2c:c0:81:79:87:67:66:2e:d2:
73:2d:13:de:2b:c5:c3:f2:92:1c:6e:2c:4e:35:bf:
f4:e3:27:bd:8d:ab:ef:d3:27:44:e1:6b:d1:23:96:
96:74:97:a8:0e:49:19:6e:00:c6:77:2b:b5:b5:fa:
bd:62:4a:e7:4f:a4:ab:4f:bd:a5:ea:cd:ef:3d:a1:
62:e7:4e:48:fa:46:9b:26:bc:3f:84:f7:cf:30:c2:
93:97:24:03:b2:31:34:67:f6:e1:06:65:29:b2:ad:
5c:36:9e:2f:c5:bb:2b:c6:0a:a0:77:96:7d:46:ac:
89:33:6c:f1:3e:08:3b:48:25:89:df:eb:35:6a:a0:
f5:78:2c:fd:af:bd:e7:64:2f:5d:9a:e2:82:f3:21:
67:30:13:fc:6d:bd:a0:c5:b0:39:b0:c8:b2:a3:b4:
73:bd:e8:15:5c:0d:35:87:26:b1:9b:31:2a:9f:65:
5e:15:c9:28:dd:f0:a3:49:b7:91:c9:fa:86:bd:48:
71:b4:82:08:83:fe:9e:0a:34:0b:67:3e:06:b9:bb:
28:a6:54:ef:a5:20:3b:30:ea:82:3b:3b:ab:ba:98:
95:50:d1:88:08:b0:96:78:2f:ec:9b:60:f3:fa:91:
79:dd:07:84:44:04:a0:a1:fe:bc:55:f6:fd:26:0d:
9d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:6E:2C:B1:10:EE:C6:A8:09:95:BD:AB:AA:79:00:22:FB:FF:0D:F8
X509v3 Authority Key Identifier:
keyid:D2:2F:3B:D0:BA:E6:03:AB:79:06:02:A9:6B:BB:C4:2B:53:22:E8:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0i870LrmA6t5BgKpa7vEK1Mi6I8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:a9:9f:be:36:92:bf:35:01:76:c0:7f:a8:54:37:bf:7f:a6:
b7:cc:61:f7:33:f4:6d:0a:52:91:96:0e:62:5d:84:3f:25:45:
fd:22:43:0c:c3:50:38:a5:e7:ac:67:b8:6b:f7:0d:79:78:c5:
0d:bb:52:df:d0:2e:82:74:65:02:25:83:20:e0:5c:76:7a:5b:
18:a1:89:ba:d8:1d:12:14:30:19:34:87:e3:ba:ba:2a:f4:c8:
85:ad:8e:6b:4d:16:ee:ba:5c:3e:ca:44:65:c3:5e:b6:d7:99:
a3:94:b1:44:63:76:e4:a9:b5:41:0b:7d:9f:2f:21:9b:b3:c6:
42:08:cf:1c:3d:0c:39:3d:23:5c:4e:dd:ad:41:16:f5:a4:0c:
21:e1:86:11:06:4e:bb:31:bf:0c:e4:92:dc:48:68:22:8d:b3:
b8:47:1b:dd:50:f7:a9:ec:90:f2:71:49:10:93:5a:e5:8e:82:
23:d2:dd:a0:00:0d:51:62:45:bc:bf:15:be:9b:cc:2b:77:4c:
ff:62:d3:bc:c3:c7:1e:b8:30:7f:59:5c:d1:b1:06:e3:52:ea:
4b:cc:ce:42:5d:1c:be:ca:44:e7:43:77:23:6f:70:ed:29:56:
0d:4d:ca:f1:c0:38:93:63:fd:d3:ba:d1:8a:9b:8d:c4:25:c7:
b5:25:8c:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 06:10:08 2025 by rpki-client