Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.mft
File: A0sO7SxaeHrYf7SfBNP989D0nUw.mft (raw, json)
Hash identifier: iGwCdyqHJ2OzAQJydSiLjPKiQxMMVzHgYOqUamWiHG4=
Subject key identifier: C5:3F:1E:4B:00:AC:8E:59:53:4E:E7:46:FA:A1:05:10:C3:8E:8D:22
Authority key identifier: 03:4B:0E:ED:2C:5A:78:7A:D8:7F:B4:9F:04:D3:FD:F3:D0:F4:9D:4C
Certificate issuer: /CN=034b0eed2c5a787ad87fb49f04d3fdf3d0f49d4c
Certificate serial: 019A7293DC8405EBA69E02487FC66411E2B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A0sO7SxaeHrYf7SfBNP989D0nUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.mft
Manifest number: 1724
Signing time: Tue 11 Nov 2025 11:01:24 +0000
Manifest this update: Tue 11 Nov 2025 11:01:24 +0000
Manifest next update: Wed 12 Nov 2025 11:01:24 +0000
Files and hashes: 1: A0sO7SxaeHrYf7SfBNP989D0nUw.crl (hash: AztIldeLseNcqwQSYptB+q7bjVBZvuHtLm34tJt/hLU=)
2: NbSHLJ18LUFyB0iCR0rBch7bc-U.roa (hash: m4WtwA746c9+1dEjftL5KY1wr7YjjqzoZ0GnddIoHLc=)
3: OblX778QtOOevvVmLppB6okYChg.roa (hash: RcRv1xji1xsemWDqjTtvWFuENOLwcxiNbuhjUnUsVAs=)
4: nrPgzgHDDtDxynx0QD9e2VIxNS4.roa (hash: zbB58fN/lRPGxPAWWtZWRRqfZ8FZqb3qnG/xrDyogwY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/A0sO7SxaeHrYf7SfBNP989D0nUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:dc:84:05:eb:a6:9e:02:48:7f:c6:64:11:e2:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=034b0eed2c5a787ad87fb49f04d3fdf3d0f49d4c
Validity
Not Before: Nov 11 11:01:24 2025 GMT
Not After : Nov 12 11:01:24 2025 GMT
Subject: CN=c53f1e4b00ac8e59534ee746faa10510c38e8d22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a8:5e:a7:7c:f6:64:9c:51:1b:bc:2f:a3:8f:
39:0d:8f:a8:0c:00:89:fa:93:89:d6:c4:43:ff:9b:
ed:1a:17:0d:05:e7:b2:42:01:54:8f:ef:a3:d8:18:
af:4f:e4:2d:ae:65:d5:5e:03:f3:fc:8c:0f:e3:c2:
c3:00:d5:a1:1b:dd:af:66:72:1e:14:b1:1a:af:d4:
e7:28:5b:65:22:f8:f0:46:ca:31:6c:8b:34:4f:84:
f2:38:08:90:50:15:5e:4f:78:27:22:03:91:6c:80:
c1:70:1c:18:08:b8:46:de:5d:78:9f:be:ab:65:67:
50:8b:12:01:0a:6a:84:5a:31:11:99:fa:c2:2a:d1:
28:89:e3:26:9b:36:af:5f:8d:16:16:68:39:a7:0f:
94:9d:d0:9f:eb:2d:cd:a3:c3:1c:bf:15:8b:90:18:
3c:ee:8c:d1:f1:be:c2:be:a1:a2:54:59:d9:96:d3:
e6:2f:dc:2c:b9:ce:83:c7:68:0b:75:a5:a2:3b:39:
62:8f:0f:2f:f2:c1:e5:a1:87:b1:9e:e6:12:64:0d:
19:c0:d3:76:17:70:60:0b:0a:4e:7a:a7:2d:59:fb:
dd:db:88:2e:05:ad:c0:4f:82:a1:45:e0:12:ff:09:
11:01:2e:ec:f7:ee:cd:2a:92:ea:7f:86:15:c5:f4:
4e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:3F:1E:4B:00:AC:8E:59:53:4E:E7:46:FA:A1:05:10:C3:8E:8D:22
X509v3 Authority Key Identifier:
keyid:03:4B:0E:ED:2C:5A:78:7A:D8:7F:B4:9F:04:D3:FD:F3:D0:F4:9D:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A0sO7SxaeHrYf7SfBNP989D0nUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:19:18:9d:65:82:ea:86:b1:9d:d3:54:a9:68:b1:05:ba:d9:
f5:a7:d9:f0:b4:5e:47:60:72:6b:73:86:35:16:78:ed:41:8f:
d2:a4:88:f7:6e:a1:cb:75:53:cf:cf:55:7d:39:7f:70:91:e5:
83:59:6d:ad:7c:e6:f5:21:1c:46:25:36:9b:5d:4d:6f:e6:24:
4d:ee:79:8d:58:16:8e:bf:76:36:49:58:4f:5b:ff:4b:8e:01:
7f:4f:60:a3:9e:c3:b5:88:81:5c:9e:67:2e:e0:9f:58:a8:6d:
de:57:2e:66:f0:5e:fb:d2:42:ae:fb:86:f6:64:cb:89:a3:6f:
b1:ee:b4:54:64:67:5e:68:c2:60:05:7d:ef:11:d1:7f:a5:f8:
91:ba:d7:a5:c1:79:93:72:a3:25:14:1b:07:20:55:97:a0:ba:
be:d1:d0:c9:9d:fc:40:dd:f9:b9:d9:a0:de:73:57:08:f0:ee:
19:81:86:73:76:ef:ee:ff:d7:3c:b2:99:df:a3:ec:43:81:24:
18:7a:8b:a9:8a:7e:1b:49:80:16:84:df:fd:03:c2:a6:f6:de:
c2:87:13:b1:5f:13:dd:02:5d:31:25:4b:b2:2d:bb:e1:1d:7b:
af:8f:42:f2:a9:1a:71:22:d9:ed:bd:0c:db:b0:58:f0:25:d4:
5d:b9:65:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:06:19 2025 by rpki-client