Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/d097d3-d4ba-4130-8e96-ad95ebfaaae2/1/0EhQ-Aad9i3FFVwC7R5iv1HO28g.mft
File: 0EhQ-Aad9i3FFVwC7R5iv1HO28g.mft (raw, json)
Hash identifier: Ed76tscL+nVNNox07Whjt+8Bl6OcSuYNXBlkC1DaTZw=
Subject key identifier: 5E:9E:8E:40:64:70:C1:51:58:AF:FB:97:24:18:8C:FD:EB:67:A9:7B
Authority key identifier: D0:48:50:F8:06:9D:F6:2D:C5:15:5C:02:ED:1E:62:BF:51:CE:DB:C8
Certificate issuer: /CN=d04850f8069df62dc5155c02ed1e62bf51cedbc8
Certificate serial: 019A4F993C476ECE4CB453E12C6BEC6D9505
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0EhQ-Aad9i3FFVwC7R5iv1HO28g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/d097d3-d4ba-4130-8e96-ad95ebfaaae2/1/0EhQ-Aad9i3FFVwC7R5iv1HO28g.mft
Manifest number: 0392
Signing time: Tue 04 Nov 2025 16:00:33 +0000
Manifest this update: Tue 04 Nov 2025 16:00:33 +0000
Manifest next update: Wed 05 Nov 2025 16:00:33 +0000
Files and hashes: 1: 0EhQ-Aad9i3FFVwC7R5iv1HO28g.crl (hash: DGxkp6Af1X0utvOQ59m/Q5E/QgesoP74Dt57UJw3PQQ=)
2: vwZ3qyY8j7AihfGsWYtA6mwINxQ.roa (hash: VBbCuPYUO8ASQ+6MrnY57WOdr+3+R3PhClJszE/T/CI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/d097d3-d4ba-4130-8e96-ad95ebfaaae2/1/0EhQ-Aad9i3FFVwC7R5iv1HO28g.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/d097d3-d4ba-4130-8e96-ad95ebfaaae2/1/0EhQ-Aad9i3FFVwC7R5iv1HO28g.mft
rsync://rpki.ripe.net/repository/DEFAULT/0EhQ-Aad9i3FFVwC7R5iv1HO28g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:3c:47:6e:ce:4c:b4:53:e1:2c:6b:ec:6d:95:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d04850f8069df62dc5155c02ed1e62bf51cedbc8
Validity
Not Before: Nov 4 16:00:33 2025 GMT
Not After : Nov 5 16:00:33 2025 GMT
Subject: CN=5e9e8e406470c15158affb9724188cfdeb67a97b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:55:ba:a3:71:ec:d7:92:13:94:9f:84:fc:8d:
dd:b3:ed:90:2c:27:17:06:03:21:ac:46:1f:cf:1c:
75:28:e9:5d:03:92:c5:56:eb:00:44:f1:f8:54:f9:
79:a2:f3:98:78:64:72:08:ff:25:00:e2:ea:30:d2:
22:bb:f6:12:13:6c:99:2e:88:f1:94:72:2f:31:24:
42:0b:9d:1c:f0:f1:ca:16:5a:5a:3b:01:a4:a6:75:
ba:d0:7f:cc:07:da:35:e1:3b:d2:1c:ba:65:46:17:
8f:5a:c0:c4:d0:9b:e8:d5:aa:1d:cd:59:cd:aa:08:
4e:e8:78:ac:d5:3d:d3:92:23:ac:9c:90:bf:a0:2f:
80:ef:c8:7d:e8:80:05:30:e6:2f:1a:67:28:d3:89:
c3:17:23:ed:a7:f7:6c:15:27:f0:a5:5b:a7:88:5f:
0b:a0:0c:4b:fa:e6:9c:8b:61:4a:61:22:e8:ff:9f:
6c:91:11:59:e1:5c:fc:14:64:6b:f5:a7:5f:37:00:
80:2d:d4:84:7c:01:f4:53:f1:e5:64:b4:97:ad:5e:
f7:d6:93:9d:0f:f5:34:70:d9:a1:85:d8:9d:42:1e:
05:94:e1:2d:d7:3d:1d:70:52:18:30:7d:f7:da:54:
de:14:9b:d6:4a:e1:72:ae:1f:c7:a1:69:0d:86:25:
79:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:9E:8E:40:64:70:C1:51:58:AF:FB:97:24:18:8C:FD:EB:67:A9:7B
X509v3 Authority Key Identifier:
keyid:D0:48:50:F8:06:9D:F6:2D:C5:15:5C:02:ED:1E:62:BF:51:CE:DB:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0EhQ-Aad9i3FFVwC7R5iv1HO28g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d097d3-d4ba-4130-8e96-ad95ebfaaae2/1/0EhQ-Aad9i3FFVwC7R5iv1HO28g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d097d3-d4ba-4130-8e96-ad95ebfaaae2/1/0EhQ-Aad9i3FFVwC7R5iv1HO28g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:12:9b:65:5d:3e:dd:a6:d2:26:ea:c2:6a:b0:01:2b:a9:73:
f2:cc:a1:a2:3f:ca:20:30:90:da:87:15:fa:e3:82:64:7e:8a:
b3:15:17:de:04:23:5e:d4:2d:38:fc:84:b8:63:54:dc:a8:84:
9d:70:73:6f:0e:ef:c3:0e:3e:75:2d:5e:08:5e:8c:a0:31:60:
61:50:70:02:85:5e:c4:4d:71:4f:aa:8e:f4:c9:f7:db:2c:e4:
9e:78:f5:1d:65:01:07:ad:0a:b3:fd:59:bc:3b:b1:03:f3:89:
1d:cd:11:f0:81:84:cf:01:87:a1:99:2f:8f:97:0e:37:d4:a0:
7e:27:5a:4c:3b:d5:a4:c6:ac:09:dd:3e:34:f6:5c:b3:09:d6:
9d:7d:41:ee:2b:97:40:d6:8b:98:22:54:79:11:01:65:e8:2a:
e8:4b:e1:d9:b1:03:82:be:59:77:99:56:6a:eb:3a:6c:57:0c:
a9:27:1d:c4:49:73:0e:9b:61:48:42:83:57:4d:db:3f:a1:94:
23:6a:6e:04:2d:0f:8c:02:39:69:ec:eb:32:f5:3f:10:20:f3:
28:a8:cf:fc:36:80:03:c3:e9:ae:b5:0d:33:d1:eb:52:cc:2f:
ae:98:c4:90:49:0b:45:82:c5:5b:19:65:42:32:48:1b:be:28:
06:a6:b1:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:39:19 2025 by rpki-client