Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/5361cc-b04d-4465-938d-617a26327e98/1/0wmOXiDXj5TmlsE3K1Yj_6cdlNA.mft
File: 0wmOXiDXj5TmlsE3K1Yj_6cdlNA.mft (raw, json)
Hash identifier: m77EH3QawYB9Fqp/p72h9n2F/raDh111mKVV1B9emOo=
Subject key identifier: 2F:81:4D:41:88:C7:C2:32:15:77:D6:CF:40:52:26:0C:9F:7F:8F:31
Authority key identifier: D3:09:8E:5E:20:D7:8F:94:E6:96:C1:37:2B:56:23:FF:A7:1D:94:D0
Certificate issuer: /CN=d3098e5e20d78f94e696c1372b5623ffa71d94d0
Certificate serial: 019A72940DED10634838F2525DDA7353EA5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0wmOXiDXj5TmlsE3K1Yj_6cdlNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/5361cc-b04d-4465-938d-617a26327e98/1/0wmOXiDXj5TmlsE3K1Yj_6cdlNA.mft
Manifest number: 0CA2
Signing time: Tue 11 Nov 2025 11:01:36 +0000
Manifest this update: Tue 11 Nov 2025 11:01:36 +0000
Manifest next update: Wed 12 Nov 2025 11:01:36 +0000
Files and hashes: 1: 0wmOXiDXj5TmlsE3K1Yj_6cdlNA.crl (hash: EUTWwdItekaznCIrZ2r7Fnk3aYP0alNCiGfb207OE9w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/5361cc-b04d-4465-938d-617a26327e98/1/0wmOXiDXj5TmlsE3K1Yj_6cdlNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/5361cc-b04d-4465-938d-617a26327e98/1/0wmOXiDXj5TmlsE3K1Yj_6cdlNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0wmOXiDXj5TmlsE3K1Yj_6cdlNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:94:0d:ed:10:63:48:38:f2:52:5d:da:73:53:ea:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3098e5e20d78f94e696c1372b5623ffa71d94d0
Validity
Not Before: Nov 11 11:01:36 2025 GMT
Not After : Nov 12 11:01:36 2025 GMT
Subject: CN=2f814d4188c7c2321577d6cf4052260c9f7f8f31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:85:dd:8d:2c:68:1f:22:3f:25:e8:5e:39:a7:
98:5a:81:fc:5b:8d:e5:61:44:7b:80:72:63:0f:13:
64:be:9b:61:79:3a:50:b6:39:45:ec:9f:6f:c8:43:
f9:00:04:d7:f4:26:d3:63:74:e8:4e:86:7d:97:38:
28:99:0c:30:35:3a:65:24:c4:5c:b7:4c:63:e4:ad:
38:f3:60:46:8a:cb:a9:f8:87:66:f1:44:f0:6c:62:
0c:6a:ae:9e:64:5e:6e:91:1d:cb:e9:79:94:a9:34:
de:be:33:8b:66:ee:fa:5d:76:b6:7b:1f:7c:c0:70:
48:62:e2:4d:55:8c:7c:a7:5a:4b:d0:6f:e4:3c:65:
f3:ec:2b:05:0e:c4:6a:b8:75:ac:ed:f1:23:6f:14:
37:70:7e:00:f7:24:e1:cb:13:29:88:c9:ac:76:de:
9a:63:92:3d:67:67:e0:41:8d:49:f8:90:d3:85:b8:
a5:af:d0:39:86:85:44:2a:1e:9b:be:47:f7:f6:30:
01:a2:50:56:84:89:fe:09:46:21:54:d1:c2:68:ef:
df:a9:83:99:fa:4e:a0:28:be:02:ef:30:3c:37:dc:
2a:f8:23:3e:97:17:4a:1b:a0:91:4b:53:5f:05:b6:
f9:af:4c:41:dd:76:8a:1d:33:aa:b0:df:78:6d:9a:
b8:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:81:4D:41:88:C7:C2:32:15:77:D6:CF:40:52:26:0C:9F:7F:8F:31
X509v3 Authority Key Identifier:
keyid:D3:09:8E:5E:20:D7:8F:94:E6:96:C1:37:2B:56:23:FF:A7:1D:94:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0wmOXiDXj5TmlsE3K1Yj_6cdlNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5361cc-b04d-4465-938d-617a26327e98/1/0wmOXiDXj5TmlsE3K1Yj_6cdlNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5361cc-b04d-4465-938d-617a26327e98/1/0wmOXiDXj5TmlsE3K1Yj_6cdlNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:77:e5:ca:74:89:43:e7:af:dd:3c:96:90:f0:8b:64:c3:ac:
d5:01:06:04:74:7d:28:91:c1:46:a2:90:44:12:52:46:c8:35:
30:07:45:9a:f8:97:4c:8b:32:24:c7:14:76:d1:0d:22:9a:7d:
cb:79:77:a3:5f:d5:b5:02:3e:60:a0:a5:0e:49:39:40:e3:d8:
6a:ca:94:d1:66:23:07:52:1d:68:27:c4:6d:ae:79:5f:93:3f:
64:87:87:9c:ec:a5:37:4b:d1:3d:a4:39:3a:9d:65:d4:39:66:
2d:e9:d3:a5:60:28:a8:7b:10:da:7b:90:2e:2c:d1:30:26:6c:
0d:d2:cd:c4:e9:2a:de:05:a4:86:e7:7a:33:87:e3:67:b3:2f:
27:13:fa:85:e4:5d:39:4e:d8:29:83:34:15:ea:a4:59:4b:e5:
5e:05:0e:7c:05:45:27:7d:8a:14:ad:de:8e:b6:37:00:3c:a9:
3d:1d:75:a7:c8:bb:4b:84:3f:f6:08:2b:f4:41:7f:5d:23:f6:
ee:33:8b:71:cc:5b:79:85:ad:20:e4:f9:6b:5e:20:7b:d4:f8:
d2:9f:ff:e0:eb:83:b3:b2:d6:02:e1:00:ce:25:76:90:c1:18:
64:d8:1d:c5:ed:6e:c0:db:b8:57:de:2e:58:aa:12:5b:10:43:
84:b5:9f:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:51:34 2025 by rpki-client