Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/04ef71-f122-47ce-8a40-cc0f9707140e/1/h94IWXXeZYjgf-0TVROqOKztt2M.mft
File: h94IWXXeZYjgf-0TVROqOKztt2M.mft (raw, json)
Hash identifier: O/wmQPQ2B04G+GNVNuJnXbD1wcBfq0rU3L79xCA7n68=
Subject key identifier: 0D:B8:46:59:51:C1:20:B3:DF:33:99:70:50:8D:6D:E6:9B:27:07:E1
Authority key identifier: 87:DE:08:59:75:DE:65:88:E0:7F:ED:13:55:13:AA:38:AC:ED:B7:63
Certificate issuer: /CN=87de085975de6588e07fed135513aa38acedb763
Certificate serial: 019A70DBFDC5B27152CAB4E2F95014358CD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h94IWXXeZYjgf-0TVROqOKztt2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/04ef71-f122-47ce-8a40-cc0f9707140e/1/h94IWXXeZYjgf-0TVROqOKztt2M.mft
Manifest number: 0B07
Signing time: Tue 11 Nov 2025 03:00:56 +0000
Manifest this update: Tue 11 Nov 2025 03:00:56 +0000
Manifest next update: Wed 12 Nov 2025 03:00:56 +0000
Files and hashes: 1: 2z5OP5uOUPeCHEZvOlemyfzgiqA.roa (hash: Hk782ryuX9Xc6GFCRAe62b1gzyY4Vb/jeKK1cnQhmr8=)
2: h94IWXXeZYjgf-0TVROqOKztt2M.crl (hash: XciQAORMSKjXzbuDKjeFPoyIzi2yDTuRLK5b//WP6mI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/04ef71-f122-47ce-8a40-cc0f9707140e/1/h94IWXXeZYjgf-0TVROqOKztt2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/04ef71-f122-47ce-8a40-cc0f9707140e/1/h94IWXXeZYjgf-0TVROqOKztt2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/h94IWXXeZYjgf-0TVROqOKztt2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:db:fd:c5:b2:71:52:ca:b4:e2:f9:50:14:35:8c:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87de085975de6588e07fed135513aa38acedb763
Validity
Not Before: Nov 11 03:00:56 2025 GMT
Not After : Nov 12 03:00:56 2025 GMT
Subject: CN=0db8465951c120b3df339970508d6de69b2707e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a1:25:fb:07:bb:ab:b1:92:c3:b4:4a:74:06:
d2:72:d7:e4:4d:09:79:75:74:9f:6e:cf:8a:09:c1:
21:00:7a:b1:da:51:c7:e8:af:dd:c0:c3:53:8b:49:
ce:40:49:30:0e:98:b5:dc:20:9f:96:73:52:ce:09:
d4:16:08:ad:77:86:d3:6b:52:f3:12:14:68:a4:7b:
e0:fb:4d:6d:a5:fc:3c:1f:a2:41:fe:c0:db:a0:77:
ea:24:4f:33:52:a9:6d:eb:e7:0a:f3:9d:d2:dc:6b:
19:2d:87:44:fd:03:55:3a:3e:ae:c2:8a:69:fb:af:
76:db:a2:1a:d5:ef:ef:6a:a7:bb:16:5f:6c:85:30:
a9:42:70:bf:f1:9f:a1:0a:84:bf:16:b3:00:e9:a5:
6a:35:94:9e:9a:a5:52:90:ff:ab:18:38:d7:bb:c4:
33:6f:31:fd:52:ee:5e:5e:d7:2b:b0:b5:ca:db:25:
6a:91:55:fd:4d:f0:cb:a9:8a:d1:6a:25:a9:d5:a6:
cf:f0:aa:07:22:9d:d7:fe:40:48:a0:6a:59:8f:56:
04:5b:56:25:f2:16:13:2b:cf:94:ab:52:80:d8:cf:
29:2e:90:7e:96:aa:dd:a7:b5:e0:a2:b4:84:37:c9:
58:55:c3:ce:f9:ed:0e:6d:ff:90:cd:df:b2:cf:8d:
02:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:B8:46:59:51:C1:20:B3:DF:33:99:70:50:8D:6D:E6:9B:27:07:E1
X509v3 Authority Key Identifier:
keyid:87:DE:08:59:75:DE:65:88:E0:7F:ED:13:55:13:AA:38:AC:ED:B7:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h94IWXXeZYjgf-0TVROqOKztt2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/04ef71-f122-47ce-8a40-cc0f9707140e/1/h94IWXXeZYjgf-0TVROqOKztt2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/04ef71-f122-47ce-8a40-cc0f9707140e/1/h94IWXXeZYjgf-0TVROqOKztt2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:4b:ac:05:4e:d2:af:1d:a3:36:d1:0a:3d:bf:50:d6:35:86:
d3:65:22:af:46:c0:41:17:26:55:e1:c2:57:0a:a6:50:20:22:
42:ad:53:79:c8:b2:0f:55:34:8b:d0:07:c3:b9:1f:b2:26:e5:
1f:58:93:ed:f1:c9:88:96:b5:d8:76:34:67:ea:77:d7:0e:9a:
2d:e9:ff:2b:d8:68:bf:e3:ac:bd:7e:be:37:aa:07:0b:7a:54:
0d:a5:09:fb:f7:b5:01:e2:32:cb:52:3f:01:aa:7b:21:f5:77:
70:bc:24:e5:62:d3:9f:0a:c6:5b:a9:d4:ae:3d:2e:bc:e7:32:
99:24:f2:a0:ac:fd:8c:b0:29:41:84:5d:05:9c:a7:de:58:2d:
6d:4b:29:4a:e6:bf:2e:3c:f3:ed:02:bc:67:4b:2b:58:24:87:
2d:3f:da:39:bb:63:79:7a:d0:fa:a8:68:8c:68:65:41:6d:0d:
87:60:10:70:23:2d:db:d3:e6:d6:65:76:45:86:dc:5b:b0:93:
c1:68:8c:9a:ca:82:a0:f6:a2:f1:85:14:e1:d0:3e:0f:ee:db:
e1:18:79:84:00:9c:22:ce:b9:61:cc:f0:d7:77:fb:7d:0f:a0:
92:e6:a5:1f:3a:4b:86:83:0f:03:c7:37:fd:79:ce:0b:9d:8f:
c6:03:14:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:53:32 2025 by rpki-client