Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/855e35-87cc-448e-b7b7-07cb22bf424d/1/0rV_WXgvlBtdLrPUKG1ZEbF54AY.mft
File: 0rV_WXgvlBtdLrPUKG1ZEbF54AY.mft (raw, json)
Hash identifier: lqzzpVjQ6KkLQkfTLD7zaQxNMoNODKfVPl6xdHgT+PY=
Subject key identifier: 20:7F:64:2F:23:6F:5C:86:5C:3E:57:1C:7E:43:0B:70:FF:32:C0:01
Authority key identifier: D2:B5:7F:59:78:2F:94:1B:5D:2E:B3:D4:28:6D:59:11:B1:79:E0:06
Certificate issuer: /CN=d2b57f59782f941b5d2eb3d4286d5911b179e006
Certificate serial: 019A72935E3B1F3BE7B303431E9600594A1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0rV_WXgvlBtdLrPUKG1ZEbF54AY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/855e35-87cc-448e-b7b7-07cb22bf424d/1/0rV_WXgvlBtdLrPUKG1ZEbF54AY.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 11:00:51 +0000
Manifest this update: Tue 11 Nov 2025 11:00:51 +0000
Manifest next update: Wed 12 Nov 2025 11:00:51 +0000
Files and hashes: 1: 0rV_WXgvlBtdLrPUKG1ZEbF54AY.crl (hash: 4s3HFiIIhLRzzZ0R8MQKl489iWj+Bs1kF6KBASlTPms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/855e35-87cc-448e-b7b7-07cb22bf424d/1/0rV_WXgvlBtdLrPUKG1ZEbF54AY.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/855e35-87cc-448e-b7b7-07cb22bf424d/1/0rV_WXgvlBtdLrPUKG1ZEbF54AY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0rV_WXgvlBtdLrPUKG1ZEbF54AY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:5e:3b:1f:3b:e7:b3:03:43:1e:96:00:59:4a:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2b57f59782f941b5d2eb3d4286d5911b179e006
Validity
Not Before: Nov 11 11:00:51 2025 GMT
Not After : Nov 12 11:00:51 2025 GMT
Subject: CN=207f642f236f5c865c3e571c7e430b70ff32c001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e5:26:57:b4:1f:00:49:b0:ec:19:f7:34:8a:
4a:a7:60:4b:00:1b:7b:f4:92:65:85:9b:17:61:b0:
9e:a2:f7:1f:a5:18:58:96:7d:72:11:f7:f5:a8:00:
09:34:5f:51:fb:a5:63:a9:5e:13:fd:9a:36:86:7f:
0a:b7:b8:b3:82:19:94:a4:91:88:d6:ff:ea:14:12:
a2:4e:0d:bd:10:d9:4f:81:59:d9:69:59:bf:f6:bf:
8f:07:73:16:35:4e:ee:2f:6d:2f:66:1b:d1:da:2b:
ac:ff:a8:42:b3:be:be:90:3c:db:41:e9:73:f6:57:
df:ff:3a:35:84:50:5d:62:01:ee:f2:a4:71:72:3a:
e8:76:ad:b4:dd:16:72:e7:11:b6:21:80:b4:f2:4f:
5b:0c:3d:4a:e5:20:b6:a8:38:91:be:7d:7f:e3:9d:
c3:bd:e6:61:3c:d3:e9:d9:71:b5:5f:91:2e:81:6d:
b3:41:cb:c4:73:f6:ef:58:99:85:d0:8f:7e:b7:43:
b4:ac:54:27:fc:95:aa:4f:72:09:ea:8d:0c:30:75:
d2:6b:d0:c1:03:c9:74:80:7c:39:ae:02:94:87:99:
bc:ed:20:f6:a8:0f:77:2f:68:95:5e:e8:84:00:6b:
73:ae:87:90:eb:3d:f1:36:f2:f6:56:d5:28:8b:e0:
64:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:7F:64:2F:23:6F:5C:86:5C:3E:57:1C:7E:43:0B:70:FF:32:C0:01
X509v3 Authority Key Identifier:
keyid:D2:B5:7F:59:78:2F:94:1B:5D:2E:B3:D4:28:6D:59:11:B1:79:E0:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0rV_WXgvlBtdLrPUKG1ZEbF54AY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/855e35-87cc-448e-b7b7-07cb22bf424d/1/0rV_WXgvlBtdLrPUKG1ZEbF54AY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/855e35-87cc-448e-b7b7-07cb22bf424d/1/0rV_WXgvlBtdLrPUKG1ZEbF54AY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:7a:97:d3:22:2d:c6:7b:96:2f:7d:be:97:a5:89:a6:36:e2:
ce:b9:96:a0:51:9a:80:1f:81:31:df:9d:f1:fa:d2:96:20:58:
b9:e5:63:49:4c:d2:9a:bf:44:6f:a3:94:53:9c:36:f7:75:18:
50:15:8f:f8:d3:4a:3e:53:73:1f:4a:95:b7:16:f6:fd:7b:69:
6a:3d:eb:5a:fa:0b:38:ab:ec:69:d2:9e:ba:34:ea:14:78:68:
47:b4:83:78:6a:23:cf:4a:4d:86:f7:15:30:ff:4f:38:e1:b2:
84:af:e1:24:64:20:a9:ae:c2:24:95:84:a3:22:72:e7:97:7f:
91:1b:5b:d8:16:64:81:72:f1:0d:46:8f:32:d1:50:05:94:2b:
5c:08:71:29:f0:f2:c6:21:98:b7:ac:11:2c:c0:ac:fa:bf:5c:
e4:18:42:dd:19:0c:c7:af:f8:9a:56:be:87:4c:59:65:48:1d:
64:47:39:50:e6:bd:00:95:9a:bf:07:fa:b1:8b:5b:9e:16:c0:
08:b0:fb:6a:0f:57:bb:c0:1b:ad:be:b1:6f:4a:0d:f7:87:e7:
fe:46:78:74:c5:4f:f0:77:94:cb:64:5e:f9:ed:2d:3b:a9:9f:
61:ac:ae:a9:71:c8:d5:15:26:06:38:00:fd:47:78:a9:86:d2:
18:61:9e:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:15:24 2025 by rpki-client