Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/cfa9cd-8d7b-4a35-82d0-7bb365f34c6c/1/0L-t8pI57Yzz9saT2L23n0IACrw.mft
File: 0L-t8pI57Yzz9saT2L23n0IACrw.mft (raw, json)
Hash identifier: aUb8lj73W4KGFde1tl6rT7HdOU2NM1F8a0VTOc+ZqgY=
Subject key identifier: 99:C4:4D:C2:21:1B:56:AD:88:B5:38:90:49:4C:F4:C4:3F:A5:BB:1D
Authority key identifier: D0:BF:AD:F2:92:39:ED:8C:F3:F6:C6:93:D8:BD:B7:9F:42:00:0A:BC
Certificate issuer: /CN=d0bfadf29239ed8cf3f6c693d8bdb79f42000abc
Certificate serial: 019A730152175922728DDA9BCE456A2A85FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0L-t8pI57Yzz9saT2L23n0IACrw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/cfa9cd-8d7b-4a35-82d0-7bb365f34c6c/1/0L-t8pI57Yzz9saT2L23n0IACrw.mft
Manifest number: 0ED1
Signing time: Tue 11 Nov 2025 13:00:57 +0000
Manifest this update: Tue 11 Nov 2025 13:00:57 +0000
Manifest next update: Wed 12 Nov 2025 13:00:57 +0000
Files and hashes: 1: 0L-t8pI57Yzz9saT2L23n0IACrw.crl (hash: yKese69V01d0JHAKgB7FAp0nP/W4C/lMT3O25N+DGzM=)
2: ED7irA7lmwh5tHPGbkFIIeJv-bg.roa (hash: Ig5tcq1zw9JQCpzSA6FZ4ETNZF6mc/oaQxjv4KTG32g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/cfa9cd-8d7b-4a35-82d0-7bb365f34c6c/1/0L-t8pI57Yzz9saT2L23n0IACrw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/cfa9cd-8d7b-4a35-82d0-7bb365f34c6c/1/0L-t8pI57Yzz9saT2L23n0IACrw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0L-t8pI57Yzz9saT2L23n0IACrw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:52:17:59:22:72:8d:da:9b:ce:45:6a:2a:85:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0bfadf29239ed8cf3f6c693d8bdb79f42000abc
Validity
Not Before: Nov 11 13:00:57 2025 GMT
Not After : Nov 12 13:00:57 2025 GMT
Subject: CN=99c44dc2211b56ad88b53890494cf4c43fa5bb1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:2c:14:b7:a7:25:10:3e:26:b4:76:4f:84:26:
95:b3:75:08:c2:e5:64:af:d6:61:82:e1:13:b0:e0:
6a:c9:69:1d:a8:09:23:5f:36:b0:46:44:86:16:34:
ba:a8:78:58:ef:51:45:93:5a:8e:d8:48:10:ca:42:
a5:9f:99:59:ab:63:3f:69:35:12:7f:b5:67:11:91:
53:29:f3:6f:54:c5:ad:60:95:b9:2a:4f:bc:9a:97:
73:16:45:9b:e3:2e:31:68:ee:b2:66:b2:15:ce:60:
03:dd:06:70:6f:af:ac:dc:a2:0d:cd:9a:c5:e1:47:
92:ee:a4:27:32:06:f9:7e:85:49:ad:45:c4:33:e3:
d7:16:fe:07:56:eb:29:2f:74:74:70:fc:4a:72:75:
81:45:48:bb:32:fd:e5:11:00:51:34:19:f4:5e:79:
2d:52:4b:85:41:3e:68:35:93:35:4b:bb:71:b3:38:
e3:7d:e9:08:0d:4d:e2:0a:0c:f5:f6:22:5f:7c:4c:
d7:2b:6b:27:64:c7:d2:6e:20:7e:00:a5:e5:bb:f0:
8f:78:15:a9:3a:de:54:77:25:48:02:27:14:59:d3:
79:bb:07:db:26:77:27:75:92:7a:8f:f1:7b:a1:a0:
7c:2b:89:4b:38:97:f7:bf:b7:2d:b4:47:df:db:27:
ef:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:C4:4D:C2:21:1B:56:AD:88:B5:38:90:49:4C:F4:C4:3F:A5:BB:1D
X509v3 Authority Key Identifier:
keyid:D0:BF:AD:F2:92:39:ED:8C:F3:F6:C6:93:D8:BD:B7:9F:42:00:0A:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0L-t8pI57Yzz9saT2L23n0IACrw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/cfa9cd-8d7b-4a35-82d0-7bb365f34c6c/1/0L-t8pI57Yzz9saT2L23n0IACrw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/cfa9cd-8d7b-4a35-82d0-7bb365f34c6c/1/0L-t8pI57Yzz9saT2L23n0IACrw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:75:bb:d7:3f:f5:ee:3b:08:61:28:f1:0c:13:ae:a9:8e:02:
7a:a2:18:e1:a9:e6:0f:0a:03:36:ca:61:fb:fb:e3:b8:9a:7e:
79:9b:06:f7:80:fc:10:75:39:d7:36:25:54:90:03:d7:ff:b5:
ff:02:e1:ec:c0:5f:98:2c:73:72:4a:c3:5e:9b:99:b9:97:82:
3d:ee:de:cd:0e:38:33:e7:7c:8b:fb:b4:02:81:84:13:8c:25:
9a:b5:ff:2a:e6:69:f5:0c:4d:da:cd:d2:9c:24:85:7e:64:c6:
aa:b5:b7:42:43:6f:93:45:02:3d:3f:25:78:1d:2a:ce:bd:7e:
a0:a3:c7:9a:7a:7e:bc:af:35:dc:79:85:2f:b7:11:99:82:a6:
e0:36:61:1b:e7:39:26:1c:f2:8a:31:6d:dc:f6:0d:49:20:59:
58:78:84:00:9a:57:6b:6e:21:d9:5a:cb:46:da:5f:ae:21:ef:
e2:58:b1:95:bb:ba:3e:29:97:89:03:89:c1:0f:74:d2:be:df:
0a:23:47:fd:d9:19:5a:56:36:38:3b:1f:e0:9e:5f:91:ee:58:
ab:79:41:3c:e2:06:fa:d8:28:93:04:10:8f:a3:2c:44:c0:9f:
1a:f9:b8:3b:cf:30:0d:33:26:aa:2d:bb:99:b0:61:90:43:66:
7e:f0:3a:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:48:06 2025 by rpki-client