Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/b5939b-daa7-4f47-9873-64a27e977fd9/1/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.mft
File: Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.mft (raw, json)
Hash identifier: 3EtXiDsm7OQ6p1b8Epq6aNZNwCysfo1o5u+I9u2cxaM=
Subject key identifier: 1F:33:BD:11:5E:E2:65:7B:62:CB:C3:0A:05:A7:7D:B0:BE:30:E3:36
Authority key identifier: 0E:BD:5F:54:90:5E:E8:E4:D2:83:0C:6C:F5:0F:60:D2:64:20:1A:93
Certificate issuer: /CN=0ebd5f54905ee8e4d2830c6cf50f60d264201a93
Certificate serial: 019A71B80BAB84FD6F3D9617FED31888BCFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/b5939b-daa7-4f47-9873-64a27e977fd9/1/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.mft
Manifest number: 0B5E
Signing time: Tue 11 Nov 2025 07:01:18 +0000
Manifest this update: Tue 11 Nov 2025 07:01:18 +0000
Manifest next update: Wed 12 Nov 2025 07:01:18 +0000
Files and hashes: 1: Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.crl (hash: 0W+zmtMqeTOste0DCt22NgVfxMzQRpvNdJBLIuuhEHM=)
2: j5fTeizLnlg0u2Mo-sXKcy6aHzU.roa (hash: N7eKHafDgm+sPu3JQlpm/bB7Ce1uPT9byBM0H76oyj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/b5939b-daa7-4f47-9873-64a27e977fd9/1/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/b5939b-daa7-4f47-9873-64a27e977fd9/1/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:0b:ab:84:fd:6f:3d:96:17:fe:d3:18:88:bc:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ebd5f54905ee8e4d2830c6cf50f60d264201a93
Validity
Not Before: Nov 11 07:01:18 2025 GMT
Not After : Nov 12 07:01:18 2025 GMT
Subject: CN=1f33bd115ee2657b62cbc30a05a77db0be30e336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:13:af:74:a9:e1:41:c5:5f:2b:4b:0c:42:86:
bd:3d:db:5b:a5:34:62:02:a6:d6:d1:39:a0:41:2b:
fb:64:80:a3:be:a7:0d:ca:6b:46:70:f8:43:bd:55:
aa:96:e2:b0:2b:eb:8f:d7:94:8d:0e:d0:71:80:7f:
99:e5:9d:9c:7f:ff:72:93:0f:a1:a0:4b:45:76:4d:
a7:a7:5d:4c:f8:a8:3b:5a:d3:fa:cf:2e:a6:b3:ba:
51:d3:d2:2a:2d:82:95:6d:7a:14:8c:fd:72:52:dd:
4e:b3:af:05:54:07:ad:57:0f:5b:2b:30:93:cd:ae:
8c:01:73:a1:5f:be:1d:90:22:f7:10:10:de:13:1a:
de:d7:75:01:05:fc:90:5c:83:29:ec:9c:7a:53:af:
3b:41:59:85:23:7c:e2:e4:cd:9f:0b:d6:4d:e4:90:
47:eb:d9:43:1b:64:e2:18:fd:44:11:55:30:2b:fd:
7a:6a:a4:62:5d:8b:3f:63:39:3f:f7:ff:7d:5d:17:
32:40:e6:a8:0b:46:9a:41:15:b6:35:33:91:ac:ce:
18:22:dc:1c:4b:32:80:cc:32:66:c7:1e:a7:53:3e:
f9:13:be:ac:7c:b7:80:00:f3:79:1e:20:13:22:99:
24:32:97:b4:85:33:7f:6f:da:ff:19:1b:38:84:38:
9a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:33:BD:11:5E:E2:65:7B:62:CB:C3:0A:05:A7:7D:B0:BE:30:E3:36
X509v3 Authority Key Identifier:
keyid:0E:BD:5F:54:90:5E:E8:E4:D2:83:0C:6C:F5:0F:60:D2:64:20:1A:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b5939b-daa7-4f47-9873-64a27e977fd9/1/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b5939b-daa7-4f47-9873-64a27e977fd9/1/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:16:d0:2d:d2:fe:c6:22:55:b4:bc:62:bb:4b:2f:4e:f6:a8:
12:bd:ed:e3:d0:0b:00:55:54:4f:a5:7e:00:6d:cb:86:a7:ad:
ad:3c:fa:96:be:3a:4d:07:2d:03:ac:3f:84:0f:4d:89:be:c2:
7f:7a:65:b7:54:cb:39:26:e8:7c:ed:d8:bd:8a:de:e8:f3:7a:
ef:8c:86:5c:ac:44:91:3e:07:0d:b4:c7:01:ce:5c:0e:25:5a:
62:bf:51:9c:58:ed:d2:9f:99:e2:6f:71:a4:78:79:b9:3d:b7:
94:2d:0f:f6:c9:ec:e7:f2:d5:51:6b:bc:f1:61:31:16:15:4a:
69:f4:5c:2b:93:a9:e8:d3:0d:9d:4c:b7:23:a4:92:0c:ef:cc:
87:5b:36:c8:6d:2b:66:0a:13:ad:fd:69:a5:12:7d:ae:31:6b:
a6:7b:13:a3:6c:b0:5f:bc:1b:f5:ec:9b:c2:da:da:03:12:48:
2c:d1:c2:e4:4f:4a:04:37:d1:ea:a8:67:74:c4:8f:3b:c1:8e:
54:0d:bc:ba:e8:ab:88:bd:3d:01:25:ea:86:70:a0:ae:9a:49:
bd:51:8a:b4:7a:d5:09:38:89:ea:89:ba:3c:ce:b5:7f:44:6c:
61:ea:97:5f:fb:58:9a:d0:dc:8c:6a:dd:ab:7d:70:6a:22:08:
62:5e:5e:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:15:52 2025 by rpki-client