Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/0nXXqLrAR39VCd_xG5GVymDfh9o.mft
File: 0nXXqLrAR39VCd_xG5GVymDfh9o.mft (raw, json)
Hash identifier: J/oRPEcew/ileg+Umlg/c+EwKhBqKEfqcoeLtUL02is=
Subject key identifier: 93:66:FC:7B:2A:4F:8E:8F:D3:29:81:80:09:6A:63:7A:4B:63:7F:31
Authority key identifier: D2:75:D7:A8:BA:C0:47:7F:55:09:DF:F1:1B:91:95:CA:60:DF:87:DA
Certificate issuer: /CN=d275d7a8bac0477f5509dff11b9195ca60df87da
Certificate serial: 019A7149A94F3B8E8E1FA669494F8D36A0CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0nXXqLrAR39VCd_xG5GVymDfh9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/0nXXqLrAR39VCd_xG5GVymDfh9o.mft
Manifest number: 1722
Signing time: Tue 11 Nov 2025 05:00:44 +0000
Manifest this update: Tue 11 Nov 2025 05:00:44 +0000
Manifest next update: Wed 12 Nov 2025 05:00:44 +0000
Files and hashes: 1: 0nXXqLrAR39VCd_xG5GVymDfh9o.crl (hash: 0cMZevcA+mek7UWDMRjY7V0Pf9iIiwinJq2S6UdVMCA=)
2: 4UNPQAXZu9JxwT2Sc4WzpO3LENE.roa (hash: anoqLUvcJa2b/lCeb6nl+knhRinVk56BkYJL3ws+r4E=)
3: HMJLEkPGlr7x44aeMyDl-iD3-H0.roa (hash: L+qMMZpme30javZoQJKYZdKfiPeTzWKpuVRpIrhWgDs=)
4: YMTxPOuM97EplT8sh2WGlcFfkOw.roa (hash: D8L0sd2jitS16w93ripM0wnGDM02PZl2ly5UPGD5e0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/0nXXqLrAR39VCd_xG5GVymDfh9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/0nXXqLrAR39VCd_xG5GVymDfh9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/0nXXqLrAR39VCd_xG5GVymDfh9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:a9:4f:3b:8e:8e:1f:a6:69:49:4f:8d:36:a0:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d275d7a8bac0477f5509dff11b9195ca60df87da
Validity
Not Before: Nov 11 05:00:44 2025 GMT
Not After : Nov 12 05:00:44 2025 GMT
Subject: CN=9366fc7b2a4f8e8fd3298180096a637a4b637f31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:22:b2:d2:d3:0c:bb:8b:fd:dd:6a:2f:9d:31:
ef:de:4d:91:59:75:18:e2:08:82:17:71:3c:4f:ba:
17:2e:27:b1:47:cc:71:8f:b7:22:ee:36:46:d7:af:
21:d5:91:9c:5a:26:a1:fe:66:53:90:3a:31:e8:9d:
f2:65:c8:71:ca:fc:b5:cb:cf:0e:77:bb:14:5b:14:
ff:7b:f2:c5:7b:95:c7:d9:e5:3d:d8:63:77:45:cd:
c5:3b:26:fa:7f:5d:26:0f:08:07:bc:92:4d:1f:93:
fc:d0:a5:50:f7:82:19:dc:ae:d0:4c:e6:5d:ce:99:
fe:e2:1e:4c:6c:69:33:d1:90:73:7a:62:52:8a:ac:
9c:aa:08:48:af:1e:60:bf:66:02:62:69:84:5f:4c:
0a:ad:91:bd:2a:7d:9e:b9:13:50:ec:cd:76:18:83:
50:ea:68:f5:bb:99:c6:c4:8f:ef:bf:c1:ab:6a:0d:
28:3e:d5:f3:a6:96:b4:2e:02:a0:02:e9:1f:cf:de:
8d:43:31:ed:54:e3:64:84:9f:58:0e:eb:b2:78:8c:
f9:3f:c0:db:da:d8:45:ef:9e:aa:f0:6d:1b:e8:b6:
14:66:b1:da:84:0a:f0:b1:c1:25:3d:fe:5f:0d:6d:
ff:30:ad:d1:ad:4f:0d:1f:05:73:88:70:08:26:04:
42:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:66:FC:7B:2A:4F:8E:8F:D3:29:81:80:09:6A:63:7A:4B:63:7F:31
X509v3 Authority Key Identifier:
keyid:D2:75:D7:A8:BA:C0:47:7F:55:09:DF:F1:1B:91:95:CA:60:DF:87:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0nXXqLrAR39VCd_xG5GVymDfh9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/0nXXqLrAR39VCd_xG5GVymDfh9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/0nXXqLrAR39VCd_xG5GVymDfh9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:71:5f:f7:44:b1:5f:f3:a9:62:ae:c9:9c:c4:d4:9e:d2:88:
2e:23:09:10:4f:46:31:9b:36:5b:0f:55:97:d1:6e:bc:5e:ea:
50:2a:e2:3b:29:12:f8:45:a5:5d:04:bd:66:2c:2f:37:f4:91:
22:83:98:c5:e1:8d:f7:6e:7b:30:62:9e:b5:02:83:4d:86:a2:
96:76:8a:57:8b:ce:ce:fe:09:e8:e6:26:ce:e7:60:7f:de:cf:
e8:66:cb:16:9a:40:41:76:48:54:fa:04:92:cd:58:54:f5:a0:
90:18:bc:ed:56:84:57:92:10:55:56:8d:b8:77:32:85:9a:e2:
a9:81:f5:72:f6:6c:94:a7:1e:41:a4:27:cf:93:89:a2:c4:10:
d0:b6:6f:a0:09:a6:ea:11:20:06:3c:39:d4:e0:76:5f:ff:5e:
3b:40:7c:fc:1e:48:ae:a9:a0:57:69:7e:01:b4:6e:26:62:96:
1e:2e:66:e2:82:82:8f:b2:ab:a7:9f:ef:89:99:5a:47:18:0b:
55:fe:95:10:c1:d4:7c:15:1c:0b:c4:de:ff:d2:d4:41:cf:dc:
aa:63:43:ff:98:63:b2:df:6d:67:f2:a8:c9:11:a5:16:76:39:
01:a8:16:ae:18:41:c3:f0:8b:c5:9d:6c:9e:4a:88:2e:e6:0e:
a1:16:0f:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:05 2025 by rpki-client