Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/65fa3c-0175-4cee-9930-59cfd453dd17/1/0eXrdTZiC1hX0b9ZAYPWUMojIn8.mft
File: 0eXrdTZiC1hX0b9ZAYPWUMojIn8.mft (raw, json)
Hash identifier: EfIBOJZj22uxJUSnE1ym5dFkDJz4z0fwCbE+aHDEnBk=
Subject key identifier: 99:BE:C0:CA:9B:C0:3A:17:71:AF:96:55:04:F2:19:A6:82:7E:16:E0
Authority key identifier: D1:E5:EB:75:36:62:0B:58:57:D1:BF:59:01:83:D6:50:CA:23:22:7F
Certificate issuer: /CN=d1e5eb7536620b5857d1bf590183d650ca23227f
Certificate serial: 019A71134CE0A2EC5DCAFA51FC5BC0823D8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0eXrdTZiC1hX0b9ZAYPWUMojIn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/65fa3c-0175-4cee-9930-59cfd453dd17/1/0eXrdTZiC1hX0b9ZAYPWUMojIn8.mft
Manifest number: 03D9
Signing time: Tue 11 Nov 2025 04:01:21 +0000
Manifest this update: Tue 11 Nov 2025 04:01:21 +0000
Manifest next update: Wed 12 Nov 2025 04:01:21 +0000
Files and hashes: 1: 0eXrdTZiC1hX0b9ZAYPWUMojIn8.crl (hash: JOeS9CYjtx/W9rdsQamAQyjd0R8ltxubXU5dad+BAw8=)
2: GqXg2NC5IUxRI1mWcJNsyZxesng.roa (hash: wIFPJcYLl1DLySOyYumJerZ6TcbUU8g29XL5Yzwhz2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/65fa3c-0175-4cee-9930-59cfd453dd17/1/0eXrdTZiC1hX0b9ZAYPWUMojIn8.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/65fa3c-0175-4cee-9930-59cfd453dd17/1/0eXrdTZiC1hX0b9ZAYPWUMojIn8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0eXrdTZiC1hX0b9ZAYPWUMojIn8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:4c:e0:a2:ec:5d:ca:fa:51:fc:5b:c0:82:3d:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1e5eb7536620b5857d1bf590183d650ca23227f
Validity
Not Before: Nov 11 04:01:21 2025 GMT
Not After : Nov 12 04:01:21 2025 GMT
Subject: CN=99bec0ca9bc03a1771af965504f219a6827e16e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:3b:ba:87:8f:2f:45:90:d3:4e:13:4a:8e:b8:
97:80:21:d8:95:93:f4:79:e7:5f:72:b4:dc:ba:16:
04:6f:66:08:2b:c1:33:77:e9:33:6a:40:09:77:4b:
c7:17:a6:26:98:85:83:64:88:ad:71:11:10:44:be:
cf:74:af:9e:39:55:43:ef:c8:f9:8f:3a:06:3f:bf:
0f:f5:33:1a:5f:25:9b:68:8c:8e:8c:b6:0d:1a:13:
43:de:b2:b4:63:82:2c:54:e4:8e:1c:23:3d:10:1a:
f5:27:f7:19:84:1f:e2:6c:5e:25:ab:14:b8:3f:34:
95:a4:ea:f4:b6:ad:1e:18:88:0a:ab:4e:ba:05:95:
9f:47:f8:73:0a:90:11:30:a0:96:67:67:0c:83:de:
c9:87:33:07:84:c1:e1:7a:90:da:d0:52:d9:08:67:
5e:bf:b1:d6:f2:4c:ff:44:43:f1:4f:db:ad:32:91:
bf:ca:b8:01:aa:dd:c2:79:6a:dd:56:d0:cf:93:9e:
ac:76:e3:e4:60:ff:a5:1b:73:58:ac:28:e5:95:07:
11:da:b9:58:b2:de:bf:cb:85:f5:36:42:03:e0:2e:
21:aa:9d:9e:a7:94:e9:32:53:45:5e:49:cf:3d:8f:
11:d5:41:48:7b:96:a8:82:03:9e:af:f8:ee:a8:e0:
4d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:BE:C0:CA:9B:C0:3A:17:71:AF:96:55:04:F2:19:A6:82:7E:16:E0
X509v3 Authority Key Identifier:
keyid:D1:E5:EB:75:36:62:0B:58:57:D1:BF:59:01:83:D6:50:CA:23:22:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0eXrdTZiC1hX0b9ZAYPWUMojIn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/65fa3c-0175-4cee-9930-59cfd453dd17/1/0eXrdTZiC1hX0b9ZAYPWUMojIn8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/65fa3c-0175-4cee-9930-59cfd453dd17/1/0eXrdTZiC1hX0b9ZAYPWUMojIn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:40:47:f7:2d:42:ea:8e:2d:60:01:82:c2:be:8a:d2:ce:9a:
e6:25:88:15:7a:f6:92:8a:28:58:54:f7:30:a7:83:e4:f0:4d:
c8:d1:7f:ad:fc:f8:48:79:63:61:b4:c0:b3:9a:88:d8:19:32:
8d:73:2b:25:eb:f9:d6:52:6d:1f:f6:a1:90:9d:da:b2:ed:54:
d2:2f:83:13:79:1b:55:34:ef:28:61:82:75:e6:bb:e6:4d:f5:
a9:07:32:e3:ad:e7:3d:db:d3:77:73:d3:0b:b3:e8:17:83:ca:
ae:b6:2e:32:16:b2:8f:42:98:18:5b:62:3d:22:24:b0:40:66:
8d:4a:6a:c7:9d:f3:95:6d:a7:a9:3d:c1:02:4b:9d:01:b1:15:
b0:4a:9b:00:66:a0:20:b0:d0:b8:43:38:55:c5:eb:d4:0c:ae:
51:6f:45:5b:74:8a:f1:1b:37:ef:43:5b:37:36:eb:d0:e5:11:
3b:8e:10:fe:24:e6:93:32:71:45:11:d2:34:21:9f:09:35:83:
54:5c:81:10:f8:57:87:75:20:be:33:e3:ed:d7:77:f3:e4:08:
5d:75:e4:ab:05:09:27:08:da:f5:cf:f6:20:6c:44:e2:39:eb:
27:00:28:46:7e:8f:e1:5e:7b:22:0f:28:0c:2c:9a:6c:54:98:
dd:54:56:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:11 2025 by rpki-client