Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/37de59-9ca4-447e-a510-e4a86b0ffd2e/1/0JTrDpiYeirfj5WgPnhlmRogGFU.mft
File: 0JTrDpiYeirfj5WgPnhlmRogGFU.mft (raw, json)
Hash identifier: tTbaPARwYBk1R97NOtv472eeXJuMPjY10OCC8evJGPk=
Subject key identifier: 0B:18:A7:26:DA:B9:46:B7:16:E6:29:6A:BE:A8:72:3A:0B:25:8C:AE
Authority key identifier: D0:94:EB:0E:98:98:7A:2A:DF:8F:95:A0:3E:78:65:99:1A:20:18:55
Certificate issuer: /CN=d094eb0e98987a2adf8f95a03e7865991a201855
Certificate serial: 019A71EEF42E5E387F41DC19CFAB6BE04085
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0JTrDpiYeirfj5WgPnhlmRogGFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/37de59-9ca4-447e-a510-e4a86b0ffd2e/1/0JTrDpiYeirfj5WgPnhlmRogGFU.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 08:01:16 +0000
Manifest this update: Tue 11 Nov 2025 08:01:16 +0000
Manifest next update: Wed 12 Nov 2025 08:01:16 +0000
Files and hashes: 1: 0JTrDpiYeirfj5WgPnhlmRogGFU.crl (hash: C4xTbMnMi5kP+2Rhald56nWszIgyt3IBYsgTqYu3JPk=)
2: zWlbMie9smiEiWEP03iooF2NKYI.roa (hash: i3CosfERz9PWPOxFmY5jsq43lJm4fTA/Cty1Zgq6vks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/37de59-9ca4-447e-a510-e4a86b0ffd2e/1/0JTrDpiYeirfj5WgPnhlmRogGFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/37de59-9ca4-447e-a510-e4a86b0ffd2e/1/0JTrDpiYeirfj5WgPnhlmRogGFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0JTrDpiYeirfj5WgPnhlmRogGFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:f4:2e:5e:38:7f:41:dc:19:cf:ab:6b:e0:40:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d094eb0e98987a2adf8f95a03e7865991a201855
Validity
Not Before: Nov 11 08:01:16 2025 GMT
Not After : Nov 12 08:01:16 2025 GMT
Subject: CN=0b18a726dab946b716e6296abea8723a0b258cae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:02:fb:d6:af:07:03:8d:1a:b4:cf:d8:25:de:
58:3b:d1:f4:fa:5c:80:cf:8b:21:ed:cf:77:dd:27:
2d:21:91:79:5e:6c:6d:14:9d:9e:47:de:c9:44:c2:
f6:32:82:d5:9c:6e:7d:94:1b:a6:a8:7a:11:29:07:
12:e0:bb:fd:c6:ff:eb:58:e7:d5:6b:c8:3a:a6:73:
ec:eb:53:b9:dc:5b:00:12:a4:6e:80:ff:f4:d4:f2:
ea:74:54:9d:7a:9b:75:2e:8e:d2:e8:5b:40:54:a6:
e3:04:01:bf:90:9d:c5:c7:e3:67:ae:17:c1:54:96:
c9:b6:62:2b:6d:0d:94:c6:96:8d:f3:12:ba:05:ee:
4f:56:11:a0:74:5d:bf:d6:a1:22:87:2b:7b:8a:1d:
d1:91:d3:e7:ec:8c:e9:8b:37:a2:78:23:9c:fb:83:
d1:45:22:ae:e9:4f:49:62:a4:03:cc:c8:97:7d:ba:
7b:58:5b:b8:96:63:d1:69:38:3a:88:43:97:a2:69:
1e:2d:2f:65:d5:aa:e0:f1:1f:61:e6:26:e8:ca:4b:
39:31:ab:a7:e3:24:9d:e7:a0:11:30:6e:d4:cf:c9:
16:1c:48:59:d1:eb:63:54:cd:8e:bc:6e:76:e2:b7:
56:20:16:80:a0:ad:e0:bb:0d:bb:2d:aa:86:37:a5:
20:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:18:A7:26:DA:B9:46:B7:16:E6:29:6A:BE:A8:72:3A:0B:25:8C:AE
X509v3 Authority Key Identifier:
keyid:D0:94:EB:0E:98:98:7A:2A:DF:8F:95:A0:3E:78:65:99:1A:20:18:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0JTrDpiYeirfj5WgPnhlmRogGFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/37de59-9ca4-447e-a510-e4a86b0ffd2e/1/0JTrDpiYeirfj5WgPnhlmRogGFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/37de59-9ca4-447e-a510-e4a86b0ffd2e/1/0JTrDpiYeirfj5WgPnhlmRogGFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:7f:68:06:97:50:20:d9:d2:9a:6c:2a:67:76:6b:e0:9e:52:
6f:53:c7:be:2f:eb:7a:fd:a4:56:05:e3:86:f5:0b:92:37:72:
82:d6:7b:b1:e4:4f:e7:aa:be:cb:e9:01:47:22:29:09:fa:c3:
f4:92:35:67:0a:63:f3:e5:d3:7c:97:ff:84:c0:77:c2:60:c7:
b0:9f:0a:69:58:8e:e6:24:2f:b6:69:10:90:03:46:8b:ad:8d:
b0:3b:f7:b7:36:66:76:01:16:37:22:80:7f:a0:a8:71:29:bc:
85:2b:95:f7:0d:67:72:95:70:5e:c0:52:c6:d5:04:60:c9:45:
6d:4b:28:85:06:4d:f0:05:e6:e9:8c:02:bf:bb:f5:e9:bf:b0:
14:c2:43:1e:27:ee:7d:ed:fc:be:0a:a1:bb:7d:c1:fe:66:36:
58:83:07:7b:95:f2:7a:a6:02:16:38:ab:a1:5a:d9:26:b7:3c:
86:85:2d:02:28:27:83:2d:e5:55:f3:13:2d:42:a8:57:79:a3:
fd:90:23:a1:31:04:de:cf:fc:ea:39:f4:ea:16:6f:88:0e:5d:
36:a3:85:e7:04:90:27:fa:32:46:cb:3f:f5:7a:74:4c:7d:9d:
1b:0d:56:a5:3a:22:d9:f6:aa:2b:d2:03:89:f3:c3:f9:48:ee:
8f:a4:eb:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpx7vQuXjh/QdwZz6tr4ECFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwOTRlYjBlOTg5ODdhMmFkZjhmOTVhMDNlNzg2NTk5MWEy
MDE4NTUwHhcNMjUxMTExMDgwMTE2WhcNMjUxMTEyMDgwMTE2WjAzMTEwLwYDVQQD
EygwYjE4YTcyNmRhYjk0NmI3MTZlNjI5NmFiZWE4NzIzYTBiMjU4Y2FlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnAL71q8HA40atM/YJd5YO9H0+lyA
z4sh7c933SctIZF5XmxtFJ2eR97JRML2MoLVnG59lBumqHoRKQcS4Lv9xv/rWOfV
a8g6pnPs61O53FsAEqRugP/01PLqdFSdept1Lo7S6FtAVKbjBAG/kJ3Fx+NnrhfB
VJbJtmIrbQ2UxpaN8xK6Be5PVhGgdF2/1qEihyt7ih3RkdPn7IzpizeieCOc+4PR
RSKu6U9JYqQDzMiXfbp7WFu4lmPRaTg6iEOXomkeLS9l1arg8R9h5iboyks5Maun
4ySd56ARMG7Uz8kWHEhZ0etjVM2OvG524rdWIBaAoK3guw27LaqGN6UgfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAsYpybauUa3FuYpar6ocjoLJYyuMB8GA1UdIwQY
MBaAFNCU6w6YmHoq34+VoD54ZZkaIBhVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEpUckRwaVllaXJmajVXZ1BuaGxtUm9nR0ZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi8zN2RlNTktOWNhNC00NDdlLWE1MTAt
ZTRhODZiMGZmZDJlLzEvMEpUckRwaVllaXJmajVXZ1BuaGxtUm9nR0ZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi8zN2RlNTktOWNhNC00NDdlLWE1MTAtZTRhODZiMGZmZDJl
LzEvMEpUckRwaVllaXJmajVXZ1BuaGxtUm9nR0ZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEH9oBpdQ
INnSmmwqZ3Zr4J5Sb1PHvi/rev2kVgXjhvULkjdygtZ7seRP56q+y+kBRyIpCfrD
9JI1Zwpj8+XTfJf/hMB3wmDHsJ8KaViO5iQvtmkQkANGi62NsDv3tzZmdgEWNyKA
f6CocSm8hSuV9w1ncpVwXsBSxtUEYMlFbUsohQZN8AXm6YwCv7v16b+wFMJDHifu
fe38vgqhu33B/mY2WIMHe5XyeqYCFjiroVrZJrc8hoUtAigngy3lVfMTLUKoV3mj
/ZAjoTEE3s/86jn06hZviA5dNqOF5wSQJ/oyRss/9Xp0TH2dGw1WpToi2faqK9ID
ifPD+Ujuj6Trfg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:20:03 2025 by rpki-client