Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.mft
File: 0EaHo-5jIrdX3oHn9TxdMu6-M6Y.mft (raw, json)
Hash identifier: weMiqbNnOH9EIi5olQI0RMvYK5aOVRQqra4x9MtGH2w=
Subject key identifier: 56:18:DD:AA:03:05:F5:66:9E:58:BC:C0:5B:C5:F1:D0:6B:69:80:64
Authority key identifier: D0:46:87:A3:EE:63:22:B7:57:DE:81:E7:F5:3C:5D:32:EE:BE:33:A6
Certificate issuer: /CN=d04687a3ee6322b757de81e7f53c5d32eebe33a6
Certificate serial: 019A7293A11E2C442CCADF07AFC4B30016AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.mft
Manifest number: 0FD1
Signing time: Tue 11 Nov 2025 11:01:08 +0000
Manifest this update: Tue 11 Nov 2025 11:01:08 +0000
Manifest next update: Wed 12 Nov 2025 11:01:08 +0000
Files and hashes: 1: 0E7XqwXvQw8zGg6cfEDvAxEUfw4.roa (hash: GEurlnwNp4FPEWbJDU+gHsQep+536ZgKzEj3iyCeYrM=)
2: 0EaHo-5jIrdX3oHn9TxdMu6-M6Y.crl (hash: jjqhO4HYHWqewG/h+eoNz61GqDAm7Cs/qRnJDEbf3Eo=)
3: 5YRtqk6Jp7Zam_D7fc_X7XfH8s4.roa (hash: X5F/YiS9H2WE1ZFG9REO1WI3BKWNsouj5lZWL1J+hoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:a1:1e:2c:44:2c:ca:df:07:af:c4:b3:00:16:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d04687a3ee6322b757de81e7f53c5d32eebe33a6
Validity
Not Before: Nov 11 11:01:08 2025 GMT
Not After : Nov 12 11:01:08 2025 GMT
Subject: CN=5618ddaa0305f5669e58bcc05bc5f1d06b698064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2d:9c:84:1e:71:b3:ba:bf:bb:c4:fe:bf:d0:
77:e4:90:81:90:f2:26:1b:af:90:75:63:d5:29:f7:
6e:9c:e9:e1:57:7b:0c:4e:ac:6f:54:63:1d:19:2c:
fb:fb:68:f4:5f:87:a2:99:12:e1:82:82:9d:17:7a:
54:72:17:7b:35:00:a2:2d:ed:2e:2a:d0:89:c6:b9:
10:60:6d:00:c2:0b:72:be:42:76:4e:c4:16:22:75:
ff:9c:3b:c9:1f:66:00:db:4d:db:ae:28:38:98:b2:
0d:50:87:c2:86:d7:9f:90:9d:30:54:38:23:ee:e1:
50:fe:18:9c:9a:85:e0:3f:37:7c:9f:52:31:80:68:
6d:39:ac:52:90:4b:a6:0f:92:99:52:52:0b:d7:ce:
fb:ac:96:ef:ef:e5:c7:d3:ce:b1:34:f2:12:13:bb:
01:02:98:1d:b0:18:41:e4:51:c0:31:fd:f3:87:33:
af:64:76:df:86:31:45:df:0b:40:d2:fc:07:bb:fd:
35:57:80:7c:34:48:e7:58:a5:98:41:2f:80:97:ec:
72:5b:c0:db:a7:d8:85:1e:9e:86:0a:7f:08:44:8f:
36:19:f6:ae:91:ab:58:fd:02:81:19:9e:a9:91:90:
14:40:ac:c6:85:25:bc:3d:29:b6:8f:1e:4c:1a:67:
6e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:18:DD:AA:03:05:F5:66:9E:58:BC:C0:5B:C5:F1:D0:6B:69:80:64
X509v3 Authority Key Identifier:
keyid:D0:46:87:A3:EE:63:22:B7:57:DE:81:E7:F5:3C:5D:32:EE:BE:33:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:cd:8b:eb:72:c5:8a:95:46:68:23:2c:fa:28:de:aa:02:db:
31:a2:e3:c3:5a:f4:a7:5f:74:dd:b8:f5:cb:37:ae:75:1c:4f:
ce:27:10:5f:28:56:53:4e:09:d1:e3:1e:96:2c:23:87:58:38:
d3:8b:1b:3d:76:de:41:12:2e:95:31:87:24:5e:f3:b0:25:1c:
0a:dd:bc:2d:7f:32:33:ba:58:d2:b6:71:26:e4:a7:1f:27:f6:
d1:fd:c0:ad:ca:35:04:39:0f:ac:c0:84:15:77:50:4a:bf:e7:
71:bd:37:b8:4d:1a:0b:86:c7:34:32:1c:d6:c2:6b:8f:71:9f:
d8:09:d0:11:fd:4b:f2:b1:01:f5:91:c3:a8:c2:65:df:a0:ad:
49:d5:55:52:48:d6:d7:99:d3:13:e6:e4:3e:5b:eb:49:98:28:
9e:e9:8a:3f:8b:90:e4:46:8c:88:da:c6:7f:74:f6:13:35:6a:
b7:a5:06:50:d1:da:ea:5e:c8:40:60:0e:62:15:e5:9b:90:24:
d6:30:89:78:1e:4d:67:f2:b9:83:16:6d:6a:94:06:ab:4e:73:
ac:b6:1e:5f:a2:ee:70:22:f1:b4:10:22:77:98:b1:ae:bd:c8:
eb:33:bc:48:c9:a4:72:28:c8:3b:76:7b:e9:84:4d:90:b1:b6:
7f:91:12:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:14:26 2025 by rpki-client