Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.mft
File: 08DVsQa4GpKSTqK8UTn7te4Rht0.mft (raw, json)
Hash identifier: ztML7981OFkpFXHQLWkRmhUZsqAwrMKpNQZh8m45icM=
Subject key identifier: E0:8E:C9:DA:81:0E:A1:E5:B1:BE:39:6B:E6:4D:B1:15:2D:80:39:21
Authority key identifier: D3:C0:D5:B1:06:B8:1A:92:92:4E:A2:BC:51:39:FB:B5:EE:11:86:DD
Certificate issuer: /CN=d3c0d5b106b81a92924ea2bc5139fbb5ee1186dd
Certificate serial: 019A71B8B64509FECA831BEC8258B2262587
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08DVsQa4GpKSTqK8UTn7te4Rht0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 07:02:01 +0000
Manifest this update: Tue 11 Nov 2025 07:02:01 +0000
Manifest next update: Wed 12 Nov 2025 07:02:01 +0000
Files and hashes: 1: 08DVsQa4GpKSTqK8UTn7te4Rht0.crl (hash: JhweO95VuhUYQYS57eBRSxdVodEZ0nehWc0WANb10Vc=)
2: vhpsA1QTyqlbOgTgwwiSOvjLosU.roa (hash: oOzCVm5vsYLrY+U1GpoNLtBM7Fbrqb31l0clRbwWzyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.mft
rsync://rpki.ripe.net/repository/DEFAULT/08DVsQa4GpKSTqK8UTn7te4Rht0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:b6:45:09:fe:ca:83:1b:ec:82:58:b2:26:25:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3c0d5b106b81a92924ea2bc5139fbb5ee1186dd
Validity
Not Before: Nov 11 07:02:01 2025 GMT
Not After : Nov 12 07:02:01 2025 GMT
Subject: CN=e08ec9da810ea1e5b1be396be64db1152d803921
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:06:75:54:0c:7a:a4:52:bc:8f:95:8b:0e:f7:
f8:5b:94:21:8d:73:3a:23:39:06:34:48:0a:57:e0:
49:6b:d8:9f:a7:20:42:fb:07:31:63:66:1a:8b:04:
40:a8:3c:ef:e6:cf:cf:90:52:59:69:96:a4:dd:80:
d7:0f:5c:59:c8:e4:eb:69:da:8e:28:c7:09:b6:5e:
a8:4a:9c:8a:73:45:1b:e9:e2:b2:17:36:00:5a:4c:
3f:b5:f9:9b:31:0b:6c:82:c8:88:b9:93:dd:5f:23:
1d:5f:59:6c:9e:bd:fb:36:f2:0c:61:0e:3b:8c:39:
84:8d:a0:91:c2:9f:1c:65:e4:05:57:a1:e5:d8:3b:
18:77:b6:65:21:d2:f3:15:cb:4f:dd:c1:6f:f0:2a:
02:62:0b:57:86:4b:05:3d:55:64:56:87:b9:f8:5a:
b4:7b:f0:c3:2a:ea:14:be:ff:82:88:5d:ad:94:92:
db:9f:58:09:d9:bc:ff:d3:38:bd:2d:19:9e:89:1d:
2d:38:87:a8:cd:28:8c:c8:2f:83:80:71:92:c8:f0:
fc:aa:eb:c2:29:de:99:c9:67:68:ba:a0:ef:89:f3:
a2:81:a7:25:d1:b8:1d:41:3f:fc:1a:d5:e1:9e:a8:
df:ea:a0:c6:5f:62:47:6b:08:4f:1c:a3:d1:ee:51:
95:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:8E:C9:DA:81:0E:A1:E5:B1:BE:39:6B:E6:4D:B1:15:2D:80:39:21
X509v3 Authority Key Identifier:
keyid:D3:C0:D5:B1:06:B8:1A:92:92:4E:A2:BC:51:39:FB:B5:EE:11:86:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08DVsQa4GpKSTqK8UTn7te4Rht0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:96:b5:e7:f4:f6:ee:7f:f0:f1:95:08:98:9c:cb:df:99:e8:
53:d5:9e:d6:46:48:e3:12:d2:3a:6f:b3:76:e7:c0:96:0b:b8:
74:b8:e7:d9:df:d0:13:99:c1:a4:76:76:bf:34:e3:57:85:b2:
66:8b:ca:43:a8:54:69:19:aa:bc:33:f4:b3:7c:5a:2a:6b:05:
da:80:47:79:44:36:f6:49:88:5e:22:d8:2c:0d:02:0d:65:e6:
dc:9f:ea:ed:c9:53:bd:62:2d:a5:5a:94:c6:71:a3:ed:6f:0f:
4e:31:cc:37:bc:65:b8:3d:9b:85:9e:c4:28:3d:aa:1a:46:41:
7e:94:84:c3:ae:4d:c8:b1:ec:2d:4a:44:f6:13:18:96:90:59:
f3:3c:77:2d:8a:6f:0b:78:ee:fa:68:ef:e3:c1:e0:78:84:98:
19:42:8a:b8:f7:94:3f:33:4b:36:cd:e0:cc:54:09:2c:42:63:
07:0f:0e:ae:23:8b:2a:f7:aa:b7:5d:1f:7a:fe:39:58:bb:01:
2f:d3:bd:ca:3d:3e:e8:d2:24:22:c0:d7:db:a6:f6:7b:d2:90:
04:c4:56:e4:94:86:67:94:a3:39:41:dc:ea:66:e7:cf:64:ea:
4b:6e:64:f0:49:e9:5c:bc:18:26:3c:ab:8a:45:7d:1f:a4:34:
66:58:e1:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:41:41 2025 by rpki-client