Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/7335d2-3c3f-4fca-8000-ccf9b89e22e2/1/0ubd2kDXglWe5l5Q-QjhaJplqAA.mft
File: 0ubd2kDXglWe5l5Q-QjhaJplqAA.mft (raw, json)
Hash identifier: uO45ZaIHOb2MVqMgO1VncV+apj06WiOgro1cNVFN6fM=
Subject key identifier: 86:8D:82:8D:B1:FD:C9:BB:60:26:D4:11:9C:7C:21:FC:A0:68:04:B9
Authority key identifier: D2:E6:DD:DA:40:D7:82:55:9E:E6:5E:50:F9:08:E1:68:9A:65:A8:00
Certificate issuer: /CN=d2e6ddda40d782559ee65e50f908e1689a65a800
Certificate serial: 019A71135FF7C8E2FA1978F0A93B9943FECB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ubd2kDXglWe5l5Q-QjhaJplqAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/7335d2-3c3f-4fca-8000-ccf9b89e22e2/1/0ubd2kDXglWe5l5Q-QjhaJplqAA.mft
Manifest number: 0C96
Signing time: Tue 11 Nov 2025 04:01:26 +0000
Manifest this update: Tue 11 Nov 2025 04:01:26 +0000
Manifest next update: Wed 12 Nov 2025 04:01:26 +0000
Files and hashes: 1: 0ubd2kDXglWe5l5Q-QjhaJplqAA.crl (hash: vrKpH4AMJsxlUy3feNtzo6MHUM/FvzIpTfToTtJQMOw=)
2: 2Bx_ZuBj3ywzIO5mlvk2Okv22hQ.roa (hash: guPg5C9izx8vPW7Ld4+sGxeIZUZPSLOzjQE1liVIecw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/7335d2-3c3f-4fca-8000-ccf9b89e22e2/1/0ubd2kDXglWe5l5Q-QjhaJplqAA.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/7335d2-3c3f-4fca-8000-ccf9b89e22e2/1/0ubd2kDXglWe5l5Q-QjhaJplqAA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0ubd2kDXglWe5l5Q-QjhaJplqAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:5f:f7:c8:e2:fa:19:78:f0:a9:3b:99:43:fe:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2e6ddda40d782559ee65e50f908e1689a65a800
Validity
Not Before: Nov 11 04:01:26 2025 GMT
Not After : Nov 12 04:01:26 2025 GMT
Subject: CN=868d828db1fdc9bb6026d4119c7c21fca06804b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:02:66:a8:4f:03:7e:ff:0f:37:1c:d6:11:1e:
a0:a9:a9:63:ad:bd:56:c5:9c:f8:8f:cc:2a:e2:95:
d3:59:63:9e:c0:5e:5b:5d:d2:41:2e:ae:02:b4:8e:
f6:13:6e:c1:1d:a5:51:0f:6f:9a:1d:c9:21:a3:6c:
2e:d1:44:d0:6d:a7:ad:1c:17:0a:f0:84:b3:e4:03:
80:f3:cc:d9:81:8e:8c:af:a1:9e:e1:ab:0a:53:07:
35:4d:c7:bc:f2:ca:73:13:71:1c:c2:85:61:e4:29:
39:de:ea:50:a3:5d:a4:27:e3:ef:19:5b:af:8f:68:
a8:6c:4b:a3:83:d8:79:1f:78:e7:02:af:96:3c:1b:
53:75:a6:ec:cc:df:7e:af:a6:75:8c:dc:a9:8c:0b:
0d:6f:eb:e8:c4:54:16:4c:68:35:24:f9:75:4f:c5:
3d:f1:10:5a:dd:8f:da:5c:0d:18:e4:25:a8:e1:63:
35:68:50:26:95:9d:38:3b:d8:95:d3:4b:c6:3f:ce:
ca:4b:7c:92:a4:ac:01:b8:02:e9:0a:87:af:3f:61:
6e:c1:d6:9e:b6:4d:eb:0a:57:72:01:19:79:a9:e7:
8d:b3:01:d9:e3:7e:b5:5a:32:4a:36:1b:99:03:99:
5d:c1:29:1b:12:29:72:a9:1c:41:f8:54:38:ad:8b:
99:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:8D:82:8D:B1:FD:C9:BB:60:26:D4:11:9C:7C:21:FC:A0:68:04:B9
X509v3 Authority Key Identifier:
keyid:D2:E6:DD:DA:40:D7:82:55:9E:E6:5E:50:F9:08:E1:68:9A:65:A8:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ubd2kDXglWe5l5Q-QjhaJplqAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/7335d2-3c3f-4fca-8000-ccf9b89e22e2/1/0ubd2kDXglWe5l5Q-QjhaJplqAA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/7335d2-3c3f-4fca-8000-ccf9b89e22e2/1/0ubd2kDXglWe5l5Q-QjhaJplqAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:f6:4a:31:2e:b1:53:83:78:fe:d7:20:a8:a9:9b:69:74:29:
09:5f:8d:f5:fe:60:49:5a:99:0c:3f:fc:05:73:c8:79:bd:a4:
0d:84:35:3e:e1:0f:f4:60:7d:4c:cf:3f:45:fb:b3:ad:c8:9a:
1f:6f:bc:c3:ad:1f:f1:17:1d:3b:f0:b6:f2:71:68:fe:12:50:
bb:07:58:81:a5:cf:e3:15:a4:7e:96:68:8a:d1:10:14:11:21:
c9:76:5d:10:35:62:74:2f:13:43:ba:bc:71:26:5a:57:34:95:
cf:b7:db:ca:5a:b7:21:3b:36:35:3f:ce:53:10:95:e2:f8:f7:
19:76:77:a6:8d:c4:dc:4b:30:bd:22:eb:27:f8:fa:66:9f:35:
d4:3e:05:79:0c:03:c8:e9:63:d5:0f:2a:83:14:2f:0e:9c:bf:
88:67:ad:80:98:34:76:1e:18:1d:b7:50:0f:24:4d:ff:29:a8:
39:82:01:39:59:bb:de:55:05:49:cf:1f:14:20:a0:a5:1b:55:
6d:d8:1a:b1:7d:d3:65:52:c4:0c:f5:bf:6e:2f:0c:0a:02:0e:
4d:b1:db:c1:69:f6:16:f3:5e:84:cc:1c:0f:54:19:c1:0b:4a:
d6:18:54:b2:03:12:0a:12:85:4f:da:66:b6:3a:95:1f:75:1c:
b8:54:87:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:42:48 2025 by rpki-client