Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/01a103-5b25-4442-a892-0fe8399de727/1/0o_L31cryvk-FUTeEKF2yzARBrs.mft
File: 0o_L31cryvk-FUTeEKF2yzARBrs.mft (raw, json)
Hash identifier: vLvnCUFeO/0sOK7DRcqYsZSn27fW3tYwBSjGr+OfJMw=
Subject key identifier: B3:A5:8A:45:2E:C0:07:78:29:FD:A9:32:5E:CB:2E:A1:1C:45:2D:78
Authority key identifier: D2:8F:CB:DF:57:2B:CA:F9:3E:15:44:DE:10:A1:76:CB:30:11:06:BB
Certificate issuer: /CN=d28fcbdf572bcaf93e1544de10a176cb301106bb
Certificate serial: 019A4EF5757A7140D8270841F025DDA9E88F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0o_L31cryvk-FUTeEKF2yzARBrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/01a103-5b25-4442-a892-0fe8399de727/1/0o_L31cryvk-FUTeEKF2yzARBrs.mft
Manifest number: 160C
Signing time: Tue 04 Nov 2025 13:01:40 +0000
Manifest this update: Tue 04 Nov 2025 13:01:40 +0000
Manifest next update: Wed 05 Nov 2025 13:01:40 +0000
Files and hashes: 1: 0o_L31cryvk-FUTeEKF2yzARBrs.crl (hash: MkoyZjiXVu6ucxkS5zk4kJRRyqteN35i+4ERnxzxX3Q=)
2: RoAvwASbb4l0ZFtVXgsI3PT0AVo.roa (hash: mZqoFIWYuSZ97LTT9lIF7CSJPGIZ96DKu7+NicnF+sU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/01a103-5b25-4442-a892-0fe8399de727/1/0o_L31cryvk-FUTeEKF2yzARBrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/01a103-5b25-4442-a892-0fe8399de727/1/0o_L31cryvk-FUTeEKF2yzARBrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/0o_L31cryvk-FUTeEKF2yzARBrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:75:7a:71:40:d8:27:08:41:f0:25:dd:a9:e8:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d28fcbdf572bcaf93e1544de10a176cb301106bb
Validity
Not Before: Nov 4 13:01:40 2025 GMT
Not After : Nov 5 13:01:40 2025 GMT
Subject: CN=b3a58a452ec0077829fda9325ecb2ea11c452d78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:94:23:73:1f:9a:9d:32:56:7e:bf:26:1e:31:
33:8e:3d:af:dc:3b:38:e3:86:0e:6f:11:e9:66:51:
77:00:ad:01:15:a5:4b:77:f4:2d:fb:75:e9:ae:98:
a8:d4:ed:75:7a:66:59:cf:50:26:ee:2f:0d:fd:3a:
0f:9d:33:a1:af:4d:6e:70:01:c4:39:5a:09:ab:73:
b1:4a:67:5a:5e:d3:0b:58:45:4b:ba:5f:01:71:f6:
3f:f6:42:c4:8a:b8:06:73:31:93:1f:aa:70:c1:11:
d4:5b:d5:8f:27:75:f0:90:87:82:fd:81:d3:74:58:
18:38:f6:a3:b7:f4:df:0a:4b:58:0c:ba:74:09:6d:
c2:02:0c:58:38:fd:dc:d7:64:b6:06:2d:12:78:5c:
ab:85:db:d9:16:db:26:9a:82:49:2c:73:32:15:b4:
8e:12:f1:ef:79:c6:17:b6:bb:df:41:35:de:73:3c:
45:63:84:44:bf:3f:5f:38:40:9d:fb:9e:8e:a8:36:
64:a5:21:5b:1a:f2:6a:13:5a:f4:5f:a6:da:20:9f:
df:80:41:ca:7a:dc:85:af:52:6f:ee:f0:ca:6e:11:
6b:db:ff:e6:92:38:20:10:fd:fa:fc:cc:75:f8:2a:
e9:4b:cc:9f:21:02:db:7d:ab:49:e4:bb:de:bf:37:
07:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:A5:8A:45:2E:C0:07:78:29:FD:A9:32:5E:CB:2E:A1:1C:45:2D:78
X509v3 Authority Key Identifier:
keyid:D2:8F:CB:DF:57:2B:CA:F9:3E:15:44:DE:10:A1:76:CB:30:11:06:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0o_L31cryvk-FUTeEKF2yzARBrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/01a103-5b25-4442-a892-0fe8399de727/1/0o_L31cryvk-FUTeEKF2yzARBrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/01a103-5b25-4442-a892-0fe8399de727/1/0o_L31cryvk-FUTeEKF2yzARBrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:a7:ed:30:ad:23:aa:60:6d:78:8b:91:b6:eb:5d:39:ac:b2:
5e:de:5d:b0:d9:8c:c3:6a:18:1b:94:ca:8a:68:c7:91:39:92:
a5:1d:16:36:9c:5f:6c:a5:e2:de:b3:99:9f:f7:50:fc:81:42:
4f:02:67:0c:cb:a7:8d:d4:26:1f:a9:ba:5a:1d:a5:d2:4f:d9:
d5:f4:cc:86:ac:73:c3:d9:ea:46:23:27:b2:59:53:71:04:a7:
ec:58:bd:17:80:74:be:0b:4c:04:1c:81:75:f6:f4:bd:06:9a:
fe:34:ac:b1:cb:1c:42:2f:ae:fc:8a:b0:18:1a:fe:83:22:72:
96:8a:78:07:a1:2d:06:4e:18:9a:63:f0:37:28:cb:6b:25:75:
85:d5:cd:04:46:ad:ec:24:93:65:cc:94:fd:67:02:bb:50:1f:
77:b9:e1:5f:d2:39:97:93:7d:70:8c:ef:2e:61:fc:b6:bf:8d:
53:0e:d9:e8:ee:bf:30:88:a2:b8:a9:a5:ad:1e:29:07:8f:ef:
80:49:c5:8d:79:c2:fd:67:22:fc:2d:09:57:c5:e3:c0:63:cb:
b3:52:e4:0c:36:40:c0:77:a0:79:69:af:82:a0:2a:ab:90:b5:
a2:70:e7:56:69:52:49:11:85:61:6d:bc:13:25:ed:de:b0:5b:
42:36:9a:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:40:51 2025 by rpki-client