Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/0vHIhC58-JGyNNOh4OLg73PoQqo.mft
File: 0vHIhC58-JGyNNOh4OLg73PoQqo.mft (raw, json)
Hash identifier: sXV70MHAkkpfle9PGI+9qChfg3Omwkc87kgwaAZ5Og4=
Subject key identifier: CE:2C:A9:C4:33:4C:14:7E:BC:6A:5C:CE:18:22:6B:AB:89:D0:FA:9A
Authority key identifier: D2:F1:C8:84:2E:7C:F8:91:B2:34:D3:A1:E0:E2:E0:EF:73:E8:42:AA
Certificate issuer: /CN=d2f1c8842e7cf891b234d3a1e0e2e0ef73e842aa
Certificate serial: 019A71B8ED3C97326C3C70082EE389AA6823
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0vHIhC58-JGyNNOh4OLg73PoQqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/0vHIhC58-JGyNNOh4OLg73PoQqo.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 07:02:15 +0000
Manifest this update: Tue 11 Nov 2025 07:02:15 +0000
Manifest next update: Wed 12 Nov 2025 07:02:15 +0000
Files and hashes: 1: 0vHIhC58-JGyNNOh4OLg73PoQqo.crl (hash: fvbQww4l0NjWGz5ltFHtKG+jpgSOItupbgiqZ9qps3s=)
2: l7vPco-uERFJMqFRkAMdbQ7Lr5E.roa (hash: TO5lGNkolgRHajeHI2wA6DsrdU/+GUsTcjWvGuJo2do=)
3: mizpW-CedPrysq20puaRplVzBas.roa (hash: ZhIE+FWiXGSht5bpIKov+Ga9kyrb4wRzjNebEuN3tlM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/0vHIhC58-JGyNNOh4OLg73PoQqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/0vHIhC58-JGyNNOh4OLg73PoQqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0vHIhC58-JGyNNOh4OLg73PoQqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:ed:3c:97:32:6c:3c:70:08:2e:e3:89:aa:68:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2f1c8842e7cf891b234d3a1e0e2e0ef73e842aa
Validity
Not Before: Nov 11 07:02:15 2025 GMT
Not After : Nov 12 07:02:15 2025 GMT
Subject: CN=ce2ca9c4334c147ebc6a5cce18226bab89d0fa9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c3:b9:29:a6:2b:4c:34:bf:9f:ee:9c:e0:dd:
a5:79:89:c6:b4:e1:59:b2:ea:07:17:e9:e5:a3:04:
f8:6c:51:db:93:d8:48:a9:5c:c2:32:09:d2:20:b9:
30:cf:e6:3f:91:86:6e:21:6b:bd:be:04:87:4d:ab:
23:0b:1b:82:53:25:03:0e:c0:5c:10:14:af:2b:06:
d1:e9:93:f5:eb:64:da:cc:77:a7:a7:ca:2e:7f:1b:
31:83:0e:81:e1:7f:ca:a8:ec:bb:40:ac:b4:19:37:
6e:29:d8:09:f0:88:35:87:68:0b:7e:02:18:b2:1d:
dc:ac:01:6f:89:46:15:b5:ff:a8:8b:26:eb:0c:cf:
18:c8:0a:63:53:5b:9a:6c:c8:2c:08:06:d1:23:b4:
89:b5:c0:84:79:bb:82:f7:bd:bb:c7:d6:76:a8:f4:
fb:18:d9:a4:df:32:cf:b2:48:f6:61:12:85:16:e9:
6a:16:7e:5a:22:2d:a3:1c:f4:ca:b5:6d:14:0c:fa:
d2:d9:bd:94:84:77:c6:9f:27:77:67:6f:9c:a7:91:
4e:a1:29:a3:be:68:14:1b:37:46:07:f5:c1:34:59:
52:cd:85:2c:56:0f:d5:3b:32:be:8d:1b:e8:8e:43:
df:1a:f6:0f:57:e3:ea:19:b5:1d:2d:ec:a0:d8:37:
ea:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:2C:A9:C4:33:4C:14:7E:BC:6A:5C:CE:18:22:6B:AB:89:D0:FA:9A
X509v3 Authority Key Identifier:
keyid:D2:F1:C8:84:2E:7C:F8:91:B2:34:D3:A1:E0:E2:E0:EF:73:E8:42:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0vHIhC58-JGyNNOh4OLg73PoQqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/0vHIhC58-JGyNNOh4OLg73PoQqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/0vHIhC58-JGyNNOh4OLg73PoQqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:95:3d:22:13:e3:9e:1d:42:d6:df:20:7d:ef:42:a4:d1:69:
f5:e9:29:63:09:55:74:20:46:01:e3:ef:50:64:d3:ca:98:e3:
64:31:99:0f:e9:67:07:16:08:be:a7:28:43:0e:40:aa:ee:31:
25:23:95:b5:ce:e5:02:76:53:76:c9:07:8f:de:90:67:38:2c:
ae:85:3d:cc:ab:b6:d1:c9:b9:d6:51:b3:3e:22:63:55:68:6e:
85:eb:7a:bc:29:aa:f0:a3:90:e2:de:5d:dc:c6:14:19:06:5a:
8f:b4:93:88:24:8c:db:c0:f9:e5:3e:65:95:44:d5:8b:cc:1b:
fa:65:b3:0c:21:ec:71:62:35:10:1f:fc:d9:db:15:fe:d6:39:
6a:4e:c1:9e:73:3b:ca:65:46:63:0e:72:9c:25:cf:83:8a:e5:
1b:9b:12:f3:ff:f1:ef:a4:58:aa:de:41:8c:22:1d:07:71:42:
a2:5d:93:a0:07:00:6a:4d:8b:ce:17:42:c0:96:16:23:08:9e:
11:9e:5a:2f:ce:f1:6b:00:8b:9d:ba:2f:eb:f7:91:3d:3c:7b:
b8:bf:72:06:e5:8c:96:d5:7f:55:98:fa:f7:e2:31:86:41:32:
d1:73:d2:6a:19:3f:50:26:dd:b2:df:fb:2d:6f:fe:1d:2b:b2:
11:b9:6a:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuO08lzJsPHAILuOJqmgjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyZjFjODg0MmU3Y2Y4OTFiMjM0ZDNhMWUwZTJlMGVmNzNl
ODQyYWEwHhcNMjUxMTExMDcwMjE1WhcNMjUxMTEyMDcwMjE1WjAzMTEwLwYDVQQD
EyhjZTJjYTljNDMzNGMxNDdlYmM2YTVjY2UxODIyNmJhYjg5ZDBmYTlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxsO5KaYrTDS/n+6c4N2leYnGtOFZ
suoHF+nlowT4bFHbk9hIqVzCMgnSILkwz+Y/kYZuIWu9vgSHTasjCxuCUyUDDsBc
EBSvKwbR6ZP162TazHenp8oufxsxgw6B4X/KqOy7QKy0GTduKdgJ8Ig1h2gLfgIY
sh3crAFviUYVtf+oiybrDM8YyApjU1uabMgsCAbRI7SJtcCEebuC9727x9Z2qPT7
GNmk3zLPskj2YRKFFulqFn5aIi2jHPTKtW0UDPrS2b2UhHfGnyd3Z2+cp5FOoSmj
vmgUGzdGB/XBNFlSzYUsVg/VOzK+jRvojkPfGvYPV+PqGbUdLeyg2DfqnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM4sqcQzTBR+vGpczhgia6uJ0PqaMB8GA1UdIwQY
MBaAFNLxyIQufPiRsjTToeDi4O9z6EKqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHZISWhDNTgtSkd5Tk5PaDRPTGc3M1BvUXFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9jOTlhZTctYjY3MS00MGI5LWJiMWUt
YTE5NDQ0ZjdhMzM3LzEvMHZISWhDNTgtSkd5Tk5PaDRPTGc3M1BvUXFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9jOTlhZTctYjY3MS00MGI5LWJiMWUtYTE5NDQ0ZjdhMzM3
LzEvMHZISWhDNTgtSkd5Tk5PaDRPTGc3M1BvUXFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi5U9IhPj
nh1C1t8gfe9CpNFp9ekpYwlVdCBGAePvUGTTypjjZDGZD+lnBxYIvqcoQw5Aqu4x
JSOVtc7lAnZTdskHj96QZzgsroU9zKu20cm51lGzPiJjVWhuhet6vCmq8KOQ4t5d
3MYUGQZaj7STiCSM28D55T5llUTVi8wb+mWzDCHscWI1EB/82dsV/tY5ak7BnnM7
ymVGYw5ynCXPg4rlG5sS8//x76RYqt5BjCIdB3FCol2ToAcAak2LzhdCwJYWIwie
EZ5aL87xawCLnbov6/eRPTx7uL9yBuWMltV/VZj69+IxhkEy0XPSahk/UCbdst/7
LW/+HSuyEblqow==
-----END CERTIFICATE-----
Generated at Tue Nov 11 13:05:08 2025 by rpki-client