Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/0sTDgG4fiOmb2MXkkAd_jeXXzwY.mft
File: 0sTDgG4fiOmb2MXkkAd_jeXXzwY.mft (raw, json)
Hash identifier: wUg040j+HHAHiyho3AH2QReD29lr29jb0L+e49NS5S4=
Subject key identifier: 56:BF:5E:67:07:A5:5F:10:A4:02:A6:A2:DB:8C:EC:47:00:2E:B0:A3
Authority key identifier: D2:C4:C3:80:6E:1F:88:E9:9B:D8:C5:E4:90:07:7F:8D:E5:D7:CF:06
Certificate issuer: /CN=d2c4c3806e1f88e99bd8c5e490077f8de5d7cf06
Certificate serial: 019A7113604B67ECA0F556351AB2067198B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0sTDgG4fiOmb2MXkkAd_jeXXzwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/0sTDgG4fiOmb2MXkkAd_jeXXzwY.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 04:01:26 +0000
Manifest this update: Tue 11 Nov 2025 04:01:26 +0000
Manifest next update: Wed 12 Nov 2025 04:01:26 +0000
Files and hashes: 1: 0sTDgG4fiOmb2MXkkAd_jeXXzwY.crl (hash: uHk3vp2zykDAOkOW+cuX1io2fgICF9p2UMZmcHDebRk=)
2: 9-3CRoQW_QjusaOMGpyHscSTGa0.roa (hash: hSgLJd/C+rhopgNVHjf6fxNZLuf8+Okfp+V4kR/UeS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/0sTDgG4fiOmb2MXkkAd_jeXXzwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/0sTDgG4fiOmb2MXkkAd_jeXXzwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0sTDgG4fiOmb2MXkkAd_jeXXzwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:60:4b:67:ec:a0:f5:56:35:1a:b2:06:71:98:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2c4c3806e1f88e99bd8c5e490077f8de5d7cf06
Validity
Not Before: Nov 11 04:01:26 2025 GMT
Not After : Nov 12 04:01:26 2025 GMT
Subject: CN=56bf5e6707a55f10a402a6a2db8cec47002eb0a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:84:e1:25:25:48:fc:ad:5d:d4:11:47:b7:2b:
16:70:f5:e5:1c:af:d9:9b:d3:65:1e:db:70:44:d5:
a7:40:b2:bf:11:05:70:e3:e1:32:ce:55:42:1e:70:
33:73:d0:26:a4:68:e7:0c:41:2a:4c:46:db:17:76:
fc:f0:08:cf:4c:b0:d1:d4:79:da:6e:43:38:c8:e1:
a1:6d:f7:12:29:cd:6d:4a:45:5e:84:16:fc:6c:41:
b3:20:38:30:5a:c5:1e:60:39:62:78:51:f6:62:e5:
c2:a1:41:91:72:40:92:03:85:2b:dc:71:be:96:88:
44:e7:2a:6d:df:c6:ab:1e:b0:a7:c4:5e:a4:7a:c4:
cb:b5:5c:f3:ad:d0:7e:f4:c7:f3:95:8c:42:d8:49:
41:01:0c:94:41:06:7c:29:86:80:60:7b:bf:e1:23:
e5:10:bf:44:bd:36:fe:1e:91:cd:af:ec:67:b7:81:
71:79:76:df:67:2a:a5:b6:b4:a5:bc:20:89:89:90:
fa:c2:0d:90:6c:8d:7d:bc:06:ce:25:96:43:69:65:
47:8a:7b:bd:6c:96:af:75:79:15:67:90:76:3d:cf:
80:14:46:59:70:01:44:0c:7a:be:26:4c:86:77:43:
ef:23:07:db:6f:9b:d3:6c:60:fd:6f:7d:17:51:2a:
08:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:BF:5E:67:07:A5:5F:10:A4:02:A6:A2:DB:8C:EC:47:00:2E:B0:A3
X509v3 Authority Key Identifier:
keyid:D2:C4:C3:80:6E:1F:88:E9:9B:D8:C5:E4:90:07:7F:8D:E5:D7:CF:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0sTDgG4fiOmb2MXkkAd_jeXXzwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/0sTDgG4fiOmb2MXkkAd_jeXXzwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/0sTDgG4fiOmb2MXkkAd_jeXXzwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:37:81:ce:44:04:61:e3:97:d0:33:a1:21:8e:fa:f0:d7:c6:
4c:0b:b2:b3:fe:07:46:f7:2d:16:f8:81:91:38:7d:7a:cf:e9:
d1:eb:ba:a1:43:b5:80:73:9d:31:7f:4e:7a:1d:b2:bb:44:a3:
86:f1:0c:c6:f5:68:74:8a:57:ef:95:5c:bd:d7:94:05:e9:0a:
61:e9:c6:2e:32:fb:b4:80:0f:78:fe:0b:f2:5e:49:2f:21:f2:
a3:49:18:9d:28:86:95:8e:5c:03:b8:2b:ae:b6:a7:eb:b9:1f:
d5:c0:8c:95:36:2d:e4:57:30:07:2b:7b:22:1b:cb:6e:ed:d9:
af:eb:e5:b8:3f:15:62:6f:2f:c4:48:f2:4f:0b:8b:90:fd:e4:
74:fd:44:60:9f:1c:5d:95:0d:67:59:29:6f:d7:20:b7:4e:64:
00:1f:e6:26:6e:3f:6b:3c:1f:6f:d4:b6:1c:8e:e5:f2:b7:93:
ac:5c:ae:15:45:da:a6:11:45:de:a4:0b:89:fa:6b:24:13:f8:
40:22:33:f2:25:94:31:2f:77:d5:11:7c:82:9b:3d:21:9c:88:
44:ae:09:be:81:00:5f:ce:07:26:17:31:de:8d:52:a3:0b:5d:
e7:4e:37:6f:86:37:cf:54:e0:de:68:4a:b5:15:14:6e:c4:e7:
a2:1a:f9:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:44:28 2025 by rpki-client