Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.mft
File: 0VK0wfXUhO78KxWX9FUAOrZUsFU.mft (raw, json)
Hash identifier: O6YqBD/NwEEoPK5zVVPUoCRjo4k0XZWNki7Ah50/vxk=
Subject key identifier: C1:AF:A6:60:59:9C:63:34:8D:6C:68:EF:97:50:AA:F0:18:CA:0D:04
Authority key identifier: D1:52:B4:C1:F5:D4:84:EE:FC:2B:15:97:F4:55:00:3A:B6:54:B0:55
Certificate issuer: /CN=d152b4c1f5d484eefc2b1597f455003ab654b055
Certificate serial: 019A7112A435122BA1F43819F032ED040417
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0VK0wfXUhO78KxWX9FUAOrZUsFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 04:00:38 +0000
Manifest this update: Tue 11 Nov 2025 04:00:38 +0000
Manifest next update: Wed 12 Nov 2025 04:00:38 +0000
Files and hashes: 1: 0VK0wfXUhO78KxWX9FUAOrZUsFU.crl (hash: Y8hMVSpoEzh2hh7rllQy103EDpfuUG3JmB7E2Lr8Dz4=)
2: IjvsoBUG9ktBfZ3shBFq4X7nJnE.roa (hash: ZOvBCy3Gp00mtEZBuX+IHu80U1fpsi2/qrYNX8CCasY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0VK0wfXUhO78KxWX9FUAOrZUsFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:a4:35:12:2b:a1:f4:38:19:f0:32:ed:04:04:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d152b4c1f5d484eefc2b1597f455003ab654b055
Validity
Not Before: Nov 11 04:00:38 2025 GMT
Not After : Nov 12 04:00:38 2025 GMT
Subject: CN=c1afa660599c63348d6c68ef9750aaf018ca0d04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f4:0e:ae:40:f6:c1:b5:61:d9:6d:73:ad:24:
75:b4:fe:50:98:b8:93:38:3c:d5:f2:57:df:cb:84:
84:52:05:a9:95:40:87:4c:fe:20:ce:50:78:46:5a:
30:a3:5d:0c:af:6e:33:75:28:0f:5b:be:da:90:16:
fd:4e:ef:d0:db:e7:47:31:a8:18:60:d9:0d:1b:dd:
65:81:da:11:f2:fc:6d:2b:6b:c6:89:87:99:c5:f8:
4a:20:bd:dc:3d:71:34:59:20:3e:5c:69:02:3e:65:
84:5f:d7:96:e2:92:77:d8:da:bd:94:f0:ac:d7:32:
e3:d5:01:d9:21:51:78:f9:8f:02:47:fc:c4:a3:00:
30:b5:3b:f6:28:93:3d:1a:4f:7e:94:4b:b5:10:de:
aa:16:16:f9:24:ec:37:2f:e2:8e:9c:c0:d0:b6:49:
3e:f3:cd:ac:0f:bf:59:b5:5f:6f:78:6b:a7:b9:e7:
a0:17:e2:d4:1f:4a:1a:1e:c7:66:b4:85:d8:1c:44:
b7:19:c0:9d:fd:f1:77:5f:79:fd:92:a2:7b:1c:bc:
83:b8:0c:a6:5b:80:b3:6e:53:1a:4b:75:71:44:9c:
f1:71:be:6c:b5:d9:b3:da:63:91:9f:6b:52:98:e8:
89:07:49:2e:3b:0d:a0:e8:ad:2c:42:d8:19:9e:fc:
ab:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:AF:A6:60:59:9C:63:34:8D:6C:68:EF:97:50:AA:F0:18:CA:0D:04
X509v3 Authority Key Identifier:
keyid:D1:52:B4:C1:F5:D4:84:EE:FC:2B:15:97:F4:55:00:3A:B6:54:B0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0VK0wfXUhO78KxWX9FUAOrZUsFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:4a:50:44:be:be:a8:9f:92:ca:01:0e:76:2e:a3:c8:5f:cf:
bd:2b:81:22:da:93:6a:68:11:81:5f:81:42:78:0d:45:12:02:
68:ce:29:5b:21:69:05:9a:fd:dc:52:6b:8f:be:59:06:00:8e:
93:1f:73:a7:7f:ca:a9:e0:4e:46:c0:77:8a:6d:70:bb:01:98:
ff:f6:03:c4:d7:3c:af:4d:80:ad:8c:64:35:3e:b7:ec:7e:26:
d2:9f:bb:43:7e:23:07:a7:2f:fd:88:d1:00:b8:bd:75:be:2f:
0e:06:4e:b2:af:00:a5:4e:af:47:1e:7c:ab:a7:b1:6a:cb:94:
b8:d8:b4:1e:c1:e5:be:a5:e8:11:7e:af:d3:0b:86:75:3d:de:
6c:11:4c:d5:92:07:de:8d:3a:3c:c1:86:3f:ce:3a:d8:60:1e:
81:9a:e1:a5:e1:6a:ff:3b:ab:2a:f4:29:c3:fe:a7:b9:b2:c3:
aa:37:da:92:9a:34:f2:1f:26:b9:a7:46:4f:a0:29:af:73:29:
f2:6b:4a:22:33:55:2c:df:a4:1b:d8:fa:60:71:43:76:b9:6d:
2a:0e:11:71:1e:e9:30:e1:33:4b:78:20:75:50:ce:1e:5f:02:
54:f8:12:a5:23:2d:c4:85:9a:53:bc:ef:42:e8:51:c3:64:02:
e3:a3:c0:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:15:19 2025 by rpki-client