Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/0TAReuHNwt8cWIFuAOVFH4fvs3A.mft
File: 0TAReuHNwt8cWIFuAOVFH4fvs3A.mft (raw, json)
Hash identifier: wMhf9WQ3OuZBP6bw+bA9sCxQRnrJUnV2WLi/5k+uBY4=
Subject key identifier: 05:FB:80:6E:EB:90:BF:8D:10:9D:1F:83:98:14:38:75:2E:41:62:C5
Authority key identifier: D1:30:11:7A:E1:CD:C2:DF:1C:58:81:6E:00:E5:45:1F:87:EF:B3:70
Certificate issuer: /CN=d130117ae1cdc2df1c58816e00e5451f87efb370
Certificate serial: 019A7113588227BA727B83225F942214035B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0TAReuHNwt8cWIFuAOVFH4fvs3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/0TAReuHNwt8cWIFuAOVFH4fvs3A.mft
Manifest number: 07AD
Signing time: Tue 11 Nov 2025 04:01:24 +0000
Manifest this update: Tue 11 Nov 2025 04:01:24 +0000
Manifest next update: Wed 12 Nov 2025 04:01:24 +0000
Files and hashes: 1: 0TAReuHNwt8cWIFuAOVFH4fvs3A.crl (hash: 3t7bfWccxt9JHL/kw//c+/tF/Ca/EMtXBLtjJkRg1L4=)
2: lzWZkqskGdmxyou0z2qQw2KTqoY.roa (hash: AeWymtaVk051Pxp8CZX6BkiYok3D+PBMltMiLV1wiVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/0TAReuHNwt8cWIFuAOVFH4fvs3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/0TAReuHNwt8cWIFuAOVFH4fvs3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/0TAReuHNwt8cWIFuAOVFH4fvs3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:58:82:27:ba:72:7b:83:22:5f:94:22:14:03:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d130117ae1cdc2df1c58816e00e5451f87efb370
Validity
Not Before: Nov 11 04:01:24 2025 GMT
Not After : Nov 12 04:01:24 2025 GMT
Subject: CN=05fb806eeb90bf8d109d1f83981438752e4162c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cf:1e:f9:92:1a:79:bb:55:64:f8:72:88:da:
06:1c:b6:58:fe:fc:72:9b:ff:b9:72:b0:5f:31:6c:
31:aa:97:79:e2:ec:6b:3d:c2:c6:9e:4b:1e:ce:e9:
08:70:35:45:d1:de:7b:99:96:b2:6e:ad:ec:8c:71:
28:f3:31:21:53:63:af:53:61:18:98:cb:7b:86:7a:
3d:ad:88:18:2f:a2:52:a4:f4:27:c5:0b:6b:61:21:
b0:be:bf:e8:c3:81:67:61:21:84:4d:49:3d:68:94:
33:ba:a7:f6:d1:3c:d0:e4:b9:45:a6:c0:8a:9c:58:
95:f5:f1:ac:7e:3f:71:11:2f:5c:25:3d:6f:e2:7b:
94:1d:39:b1:e7:cd:72:e2:39:65:b6:7c:eb:9f:d5:
d4:a5:74:c7:40:3e:13:0a:a9:f0:ef:c5:b7:61:c1:
7b:ae:99:61:90:b3:c5:1a:4f:68:39:03:66:24:e2:
9b:ef:76:91:12:27:bb:d8:38:c6:88:e2:7e:4f:1e:
07:8e:17:fd:da:10:f5:7b:0a:b9:4b:c3:4b:da:2d:
f2:fb:ff:b1:b2:8d:59:b8:37:4e:34:db:f9:b1:02:
7a:f7:1f:f1:5f:46:bf:1b:da:39:25:e6:35:06:1d:
5c:ca:f1:3d:46:7d:08:a5:82:f6:47:65:13:91:1b:
e0:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:FB:80:6E:EB:90:BF:8D:10:9D:1F:83:98:14:38:75:2E:41:62:C5
X509v3 Authority Key Identifier:
keyid:D1:30:11:7A:E1:CD:C2:DF:1C:58:81:6E:00:E5:45:1F:87:EF:B3:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0TAReuHNwt8cWIFuAOVFH4fvs3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/0TAReuHNwt8cWIFuAOVFH4fvs3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/0TAReuHNwt8cWIFuAOVFH4fvs3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:69:aa:f0:a7:37:57:40:e0:84:60:41:d5:dd:ed:0e:70:1c:
da:c9:f1:cc:0f:47:f0:fa:71:71:89:6e:17:c5:25:61:2b:d2:
86:c9:48:b7:36:3d:f6:59:f9:9f:86:84:f3:5a:e7:d9:07:22:
b0:30:da:58:ff:6b:67:98:f3:77:28:fb:e6:df:6f:df:33:e5:
af:b8:d7:82:92:62:44:ef:37:ff:b3:30:44:03:ce:9c:4a:7f:
fc:f0:a4:08:82:0f:f9:d4:a1:5a:94:01:81:62:f3:d8:2b:a8:
52:bd:73:8b:3c:c0:c5:ab:c3:12:d3:f1:2f:e8:27:dd:2e:30:
61:4c:e5:c1:af:71:78:83:72:d6:00:2e:03:3c:8e:1f:c5:e8:
16:41:42:b3:65:61:bf:5d:ea:46:62:9f:dd:05:b1:71:4a:9b:
5b:4a:8e:52:c5:80:91:81:8e:10:ff:24:03:cb:9b:e2:21:98:
b6:1d:d8:e2:53:91:a1:36:05:9b:d4:50:9f:c4:d4:fa:f6:b0:
f9:b4:2d:c5:5f:20:f1:29:56:11:a1:3b:3f:46:97:39:b2:1f:
88:64:73:33:ce:10:6f:68:0b:32:5e:d3:e5:d9:6a:f9:ba:4c:
24:f4:93:6c:46:0a:f1:f6:91:e5:ee:33:54:2c:98:aa:8f:79:
18:f0:3b:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:51:55 2025 by rpki-client