Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.mft
File: 0KHbRmz4CCBik9B-ZfISH-tJoz4.mft (raw, json)
Hash identifier: dlqit8oBZs0G3ayjA2NK6YiylgXS0iynr6zPhJC9YWI=
Subject key identifier: 95:56:E0:52:DB:7D:D6:FD:4E:E7:E3:47:06:4E:01:FD:4A:D8:6D:B1
Authority key identifier: D0:A1:DB:46:6C:F8:08:20:62:93:D0:7E:65:F2:12:1F:EB:49:A3:3E
Certificate issuer: /CN=d0a1db466cf808206293d07e65f2121feb49a33e
Certificate serial: 019A59E6409318F2452281F7CE9C74A11897
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0KHbRmz4CCBik9B-ZfISH-tJoz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.mft
Manifest number: 1501
Signing time: Thu 06 Nov 2025 16:00:53 +0000
Manifest this update: Thu 06 Nov 2025 16:00:53 +0000
Manifest next update: Fri 07 Nov 2025 16:00:53 +0000
Files and hashes: 1: 0KHbRmz4CCBik9B-ZfISH-tJoz4.crl (hash: rpABfSqKapoVHj8YnLNtAFvq0W7zK/Ghu8wFCHVI1Oc=)
2: wC7Ohmh2aveKOZ7_Cl4a1vLomLo.roa (hash: hPiN8yhRbkkwhBqX7IPJBoamojlDhfcUtcDIIbpri30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0KHbRmz4CCBik9B-ZfISH-tJoz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 07 Nov 2025 14:56:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:59:e6:40:93:18:f2:45:22:81:f7:ce:9c:74:a1:18:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0a1db466cf808206293d07e65f2121feb49a33e
Validity
Not Before: Nov 6 16:00:53 2025 GMT
Not After : Nov 7 16:00:53 2025 GMT
Subject: CN=9556e052db7dd6fd4ee7e347064e01fd4ad86db1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:6c:86:c4:83:5c:3e:10:65:a0:79:d0:5a:f3:
60:1e:0d:e3:16:48:3e:41:48:27:28:85:33:c6:41:
41:7d:f2:08:80:39:a2:ce:61:f9:5e:a6:34:e9:1f:
dd:98:4b:10:a2:3e:9d:ec:18:44:42:f8:2d:4f:00:
01:74:3e:cf:b8:3f:73:96:c8:53:a2:56:b6:aa:c3:
09:63:46:b7:91:ac:65:b9:4b:fd:25:74:56:d2:38:
d2:b2:f5:79:a6:c2:9a:53:2f:ae:d6:a0:79:80:3f:
47:e4:d7:08:4d:65:a1:33:26:b9:68:ad:e9:80:f6:
31:26:ac:d7:cd:5e:7d:8d:ba:96:44:4c:4c:21:6c:
93:a8:e0:e3:5e:9c:a8:a1:56:46:97:70:e0:68:57:
7a:2b:cf:c4:0e:4a:91:5b:fe:cf:dc:ab:bf:70:7e:
56:4a:52:dc:34:1a:97:ea:9e:39:42:7a:e3:56:d6:
2d:86:5a:fd:90:e7:c5:1f:03:30:e9:1e:99:f4:fd:
cb:73:ee:1b:19:78:43:19:b6:bb:06:42:a7:7c:89:
d2:af:3c:2d:8e:ef:8c:10:15:b4:e8:ec:f2:e4:1a:
3c:c4:89:8e:e5:96:c4:79:52:50:c9:70:8a:a5:aa:
fe:28:33:a0:f9:90:b0:eb:70:eb:f1:72:85:ff:d3:
71:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:56:E0:52:DB:7D:D6:FD:4E:E7:E3:47:06:4E:01:FD:4A:D8:6D:B1
X509v3 Authority Key Identifier:
keyid:D0:A1:DB:46:6C:F8:08:20:62:93:D0:7E:65:F2:12:1F:EB:49:A3:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KHbRmz4CCBik9B-ZfISH-tJoz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:e3:0e:ef:aa:2e:8b:65:33:73:0f:f0:a6:93:f3:4b:af:ab:
57:39:32:5b:7d:44:f3:7c:d8:f4:8b:a3:f0:4e:a2:c1:48:d9:
41:69:e0:6c:bc:60:3e:98:48:b4:7a:cd:a8:db:36:f1:a5:a3:
07:5e:ac:d0:e4:b8:da:29:a8:a3:4b:22:fa:4d:18:8d:f2:51:
15:59:bf:ce:44:79:41:57:b0:cd:8a:11:b8:f4:f0:27:6a:60:
e5:e8:d4:b4:77:c1:c3:05:92:04:ca:27:5f:50:6d:82:58:29:
c6:c5:a2:e8:69:db:05:f8:e5:4a:c7:41:c6:2e:f1:94:c0:72:
ff:3c:f2:e2:02:01:04:77:df:d6:60:12:e5:93:09:8f:69:89:
31:bd:f4:42:10:ec:e0:2d:fb:34:df:74:91:4d:d9:ea:18:c7:
7d:d2:5b:38:77:5e:85:04:55:cf:5f:fc:09:84:ab:74:a8:43:
d7:d1:8e:a1:83:d4:03:ca:46:f0:30:89:69:e0:3b:a4:83:12:
e5:5c:b0:ff:dc:b1:87:7a:7c:2f:be:10:b1:51:d1:dd:40:7f:
cb:f4:ea:34:a9:88:4e:29:36:24:1e:8b:bd:2c:a4:e6:9d:e6:
57:5a:4c:77:33:c9:df:45:13:2d:7d:18:ee:ee:35:d1:66:21:
f2:ec:97:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 21:23:06 2025 by rpki-client