Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.mft
File: 0cSRMJSiEmjHOmdlOjc41z5cWac.mft (raw, json)
Hash identifier: uA/H+wKKoKF14XI/o60px79LdKhKsbov8ppMb6qY8Wg=
Subject key identifier: F0:6A:82:8B:7B:EF:AF:31:F3:57:26:84:74:BC:C9:E4:E4:EE:D3:56
Authority key identifier: D1:C4:91:30:94:A2:12:68:C7:3A:67:65:3A:37:38:D7:3E:5C:59:A7
Certificate issuer: /CN=d1c4913094a21268c73a67653a3738d73e5c59a7
Certificate serial: 019A71B926F76B354608292CF79AA10C2FD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0cSRMJSiEmjHOmdlOjc41z5cWac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.mft
Manifest number: 15F8
Signing time: Tue 11 Nov 2025 07:02:30 +0000
Manifest this update: Tue 11 Nov 2025 07:02:30 +0000
Manifest next update: Wed 12 Nov 2025 07:02:30 +0000
Files and hashes: 1: 0cSRMJSiEmjHOmdlOjc41z5cWac.crl (hash: Pln9TlGMf+Fd7S8wkmdnTZgmC6aI+nqUCRQPPgfShl0=)
2: FIvNNxujkeosaQmK-8zL99U8I-8.roa (hash: xdptKNwYHkOXesPFH1LxyuhIbU4UE4ZRfmuf1MyhTcI=)
3: Z5fcF5W7KXTPN2HuxSQd8ZQH4aQ.roa (hash: KQQ09ojl8xnv8sB90M9HtEN2nEY3TEzVcMAwOp9asR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.mft
rsync://rpki.ripe.net/repository/DEFAULT/0cSRMJSiEmjHOmdlOjc41z5cWac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:26:f7:6b:35:46:08:29:2c:f7:9a:a1:0c:2f:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1c4913094a21268c73a67653a3738d73e5c59a7
Validity
Not Before: Nov 11 07:02:30 2025 GMT
Not After : Nov 12 07:02:30 2025 GMT
Subject: CN=f06a828b7befaf31f357268474bcc9e4e4eed356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f4:86:fb:70:2f:3f:4e:c7:41:ff:a1:ea:f7:
31:38:de:d3:13:1c:e0:f7:a6:3d:06:f2:84:0c:b0:
b3:94:f5:f2:ee:bb:fd:5a:ec:79:e6:57:cc:75:ba:
32:34:49:90:6d:ce:0b:84:42:66:56:19:16:6f:92:
8a:24:a9:5d:61:d4:5a:d6:7c:d0:66:b5:40:be:f5:
0d:f7:bf:6b:ab:68:61:b0:4f:43:e8:56:80:07:b7:
ee:cf:80:5a:d7:78:94:ff:b0:9c:b7:b4:a2:d8:fa:
1f:c6:94:f4:fb:ab:89:12:dc:ab:44:51:30:d8:f8:
65:15:1d:fc:cd:40:6b:36:e4:cc:63:3b:0d:be:26:
ec:4d:80:6e:ac:12:29:83:1e:77:77:bd:48:c8:2b:
84:52:99:f2:46:6a:c6:7a:af:8e:b0:00:a0:ea:0d:
c2:51:0a:27:25:1f:10:56:81:f0:d7:90:64:b2:4f:
35:d7:4d:f3:78:fd:09:2b:ec:30:ff:74:d8:3e:a6:
f1:e6:ed:ec:c9:3a:c9:c5:83:82:02:9c:1a:3a:d6:
e2:e8:52:74:6d:39:ac:9d:b5:6c:5d:7f:58:82:a3:
d0:98:32:fd:22:c8:2b:71:47:fe:fc:b6:92:ba:b7:
b6:c4:fe:9d:59:92:74:44:e7:7c:46:1c:c4:ff:0b:
b5:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:6A:82:8B:7B:EF:AF:31:F3:57:26:84:74:BC:C9:E4:E4:EE:D3:56
X509v3 Authority Key Identifier:
keyid:D1:C4:91:30:94:A2:12:68:C7:3A:67:65:3A:37:38:D7:3E:5C:59:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0cSRMJSiEmjHOmdlOjc41z5cWac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:38:44:8a:ab:2c:c9:1f:03:c3:d9:28:99:c6:fb:9c:da:4c:
f7:ff:89:d0:5d:28:bf:de:e1:bf:33:c5:2a:80:55:ca:2a:28:
a7:f0:fe:5e:5c:63:92:bc:d5:4e:65:94:b3:3e:27:58:7e:a4:
53:1b:ff:9d:ce:4a:4a:b6:af:ff:45:7b:a9:63:38:c2:82:0b:
9b:26:c2:d2:78:72:38:20:82:5b:b8:88:35:b6:c5:93:86:dc:
a3:ec:4a:af:bc:45:4f:1e:9d:26:1c:cf:4b:e1:44:c7:5b:32:
49:a2:44:b1:5c:f5:a3:6f:08:fc:b9:f0:13:21:f3:a0:71:ca:
a4:12:81:da:c2:bd:99:57:0c:9c:37:3e:01:2c:03:8c:8f:89:
9f:0a:4c:e7:19:29:db:9e:c4:62:c4:16:68:8e:36:d8:10:8f:
86:55:f6:ac:b6:87:5f:39:07:e8:7d:79:23:b4:88:4f:ca:e3:
69:80:55:75:6e:67:87:26:86:f8:90:0d:31:19:07:b7:a2:e2:
c7:4d:46:c4:d7:3c:d3:b8:ca:89:ee:03:75:61:3d:9a:56:8a:
15:36:48:e3:5d:c6:42:77:a8:25:e6:93:9e:11:6e:a0:09:3b:
dc:3b:48:ee:1f:51:14:93:7c:8c:32:b6:b2:07:a6:e8:af:a4:
b1:3b:a7:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:47:31 2025 by rpki-client