Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/dc1318-c330-4b4d-94ae-f1b00c8428ed/1/A83mT0Foo_OZt3SU2Urqdyksm88.mft
File: A83mT0Foo_OZt3SU2Urqdyksm88.mft (raw, json)
Hash identifier: 3jCVK35lwf9X/Rk6F/aSCppwQ19h789+/X1L3VDHh+k=
Subject key identifier: 36:8C:0D:1E:DB:C5:C6:74:5E:96:04:18:2B:E9:53:EB:F6:62:A8:2D
Authority key identifier: 03:CD:E6:4F:41:68:A3:F3:99:B7:74:94:D9:4A:EA:77:29:2C:9B:CF
Certificate issuer: /CN=03cde64f4168a3f399b77494d94aea77292c9bcf
Certificate serial: 019A72CA17C70E46DAFA23810692192BF00D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A83mT0Foo_OZt3SU2Urqdyksm88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/dc1318-c330-4b4d-94ae-f1b00c8428ed/1/A83mT0Foo_OZt3SU2Urqdyksm88.mft
Manifest number: 1285
Signing time: Tue 11 Nov 2025 12:00:38 +0000
Manifest this update: Tue 11 Nov 2025 12:00:38 +0000
Manifest next update: Wed 12 Nov 2025 12:00:38 +0000
Files and hashes: 1: A83mT0Foo_OZt3SU2Urqdyksm88.crl (hash: 9//36BDzWlyR7+pfaKB/lq8ImICvSA2/qccw/3FYi/w=)
2: e11Y1BzeTv89ORv01AAdP5K30II.roa (hash: N7EMAlCoADAa7ySQW7940rPsHLZnRpbv9iF4uLAj9Lw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/dc1318-c330-4b4d-94ae-f1b00c8428ed/1/A83mT0Foo_OZt3SU2Urqdyksm88.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/dc1318-c330-4b4d-94ae-f1b00c8428ed/1/A83mT0Foo_OZt3SU2Urqdyksm88.mft
rsync://rpki.ripe.net/repository/DEFAULT/A83mT0Foo_OZt3SU2Urqdyksm88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:17:c7:0e:46:da:fa:23:81:06:92:19:2b:f0:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03cde64f4168a3f399b77494d94aea77292c9bcf
Validity
Not Before: Nov 11 12:00:38 2025 GMT
Not After : Nov 12 12:00:38 2025 GMT
Subject: CN=368c0d1edbc5c6745e9604182be953ebf662a82d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:90:35:01:3a:a9:64:e0:17:dc:f6:dc:30:6f:
6c:1a:c6:b8:dd:35:d4:c9:25:2f:c5:5c:85:11:25:
ec:52:83:9a:e1:bf:65:30:a6:aa:f0:90:2d:e5:dd:
81:54:11:dd:ba:bd:3a:f6:d0:16:7e:71:e4:1b:e3:
5b:88:b4:2e:24:ae:da:bb:bd:7b:62:2a:25:5f:8a:
e0:d3:37:1c:52:d5:5b:00:c4:14:0d:7b:63:c0:25:
a9:27:23:11:d2:7a:7f:43:b5:61:10:08:b4:fa:fc:
cb:aa:74:50:42:26:36:7c:73:a8:af:79:30:3c:e9:
f3:83:13:85:44:62:03:a8:73:bc:d4:b8:a1:2e:ee:
a2:fc:ad:6f:97:c1:aa:b8:d5:b1:6c:c0:af:90:ed:
45:6b:ff:ce:bb:97:a1:4c:ca:60:e5:31:9d:de:e7:
54:3b:13:be:ba:50:df:48:71:b8:9c:59:fb:fd:b8:
7d:87:cd:08:0f:bf:51:42:cc:06:3c:4d:36:1f:6e:
7d:75:1a:e8:42:5a:7e:5a:4b:67:c1:05:b1:06:19:
79:be:26:16:00:47:48:bc:f4:13:1e:57:b0:2a:6c:
24:a9:71:33:59:ac:a3:79:c1:ca:c0:5f:79:8d:b9:
6f:d3:a1:50:5c:ca:0d:21:90:a5:e3:7d:c8:f2:dd:
41:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:8C:0D:1E:DB:C5:C6:74:5E:96:04:18:2B:E9:53:EB:F6:62:A8:2D
X509v3 Authority Key Identifier:
keyid:03:CD:E6:4F:41:68:A3:F3:99:B7:74:94:D9:4A:EA:77:29:2C:9B:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A83mT0Foo_OZt3SU2Urqdyksm88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/dc1318-c330-4b4d-94ae-f1b00c8428ed/1/A83mT0Foo_OZt3SU2Urqdyksm88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/dc1318-c330-4b4d-94ae-f1b00c8428ed/1/A83mT0Foo_OZt3SU2Urqdyksm88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:89:61:db:b6:55:b6:58:8b:4b:02:d9:7e:a4:d8:30:dd:50:
69:52:61:d2:6b:43:8f:ec:63:79:a9:d7:11:d7:c5:9c:92:6c:
f5:17:45:b2:b8:5f:7c:e5:15:fc:bd:05:81:9a:3e:3b:63:16:
92:1f:d2:8c:fe:d2:4f:c3:c6:67:f1:5b:78:c3:78:06:5e:78:
5b:a7:a5:6f:ee:73:dd:65:a3:08:3f:b7:9c:ed:dd:38:1e:cf:
25:35:a6:a6:8c:7e:ea:ff:8c:6c:fa:89:41:e5:bf:96:49:e2:
ad:d1:c0:68:e2:88:82:9e:1a:8e:13:13:38:2b:ed:0e:cf:74:
dc:37:e5:67:8a:a3:96:c6:39:ea:4d:c8:cc:55:f6:a3:05:23:
85:ac:8b:0a:f5:98:40:c0:80:31:61:e7:ff:56:df:ba:18:29:
68:d8:88:34:19:f5:23:7f:26:a0:9b:ea:e3:bc:ee:7b:6e:a4:
a1:60:f3:33:20:d2:98:df:3d:a6:2f:ca:81:1c:ce:7e:0d:9a:
6d:5a:c8:b0:f6:ba:50:1e:c8:9f:fc:0f:3a:9e:8d:d6:6c:43:
9b:93:50:2e:92:1b:6b:f7:e6:33:16:83:66:0c:bd:e0:24:f1:
86:a3:49:f8:5d:da:8e:66:74:dc:c4:84:fc:2a:99:b5:80:02:
b7:7f:70:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:16:55 2025 by rpki-client