Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/7672e2-1c7f-4d2e-8961-c26c3e23baf6/1/0wUa-GYelCUtF1k103l-nsos2Aw.mft
File: 0wUa-GYelCUtF1k103l-nsos2Aw.mft (raw, json)
Hash identifier: DKnr4lyjuvVYtDAPQP6XddcjMjl6Kr4zVNh7sBbFBwU=
Subject key identifier: DC:4C:80:01:D1:5C:AE:C9:75:29:9A:98:DF:AE:A2:42:F7:D1:45:0E
Authority key identifier: D3:05:1A:F8:66:1E:94:25:2D:17:59:35:D3:79:7E:9E:CA:2C:D8:0C
Certificate issuer: /CN=d3051af8661e94252d175935d3797e9eca2cd80c
Certificate serial: 019A7225FA4D2D1F02B180A2EC9C17A98911
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0wUa-GYelCUtF1k103l-nsos2Aw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/7672e2-1c7f-4d2e-8961-c26c3e23baf6/1/0wUa-GYelCUtF1k103l-nsos2Aw.mft
Manifest number: 1087
Signing time: Tue 11 Nov 2025 09:01:22 +0000
Manifest this update: Tue 11 Nov 2025 09:01:22 +0000
Manifest next update: Wed 12 Nov 2025 09:01:22 +0000
Files and hashes: 1: 0wUa-GYelCUtF1k103l-nsos2Aw.crl (hash: /anP9EmIhqgXcjx1IWuypztzkdO2kK8W0QF4nyQqFeI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/7672e2-1c7f-4d2e-8961-c26c3e23baf6/1/0wUa-GYelCUtF1k103l-nsos2Aw.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/7672e2-1c7f-4d2e-8961-c26c3e23baf6/1/0wUa-GYelCUtF1k103l-nsos2Aw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0wUa-GYelCUtF1k103l-nsos2Aw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:fa:4d:2d:1f:02:b1:80:a2:ec:9c:17:a9:89:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3051af8661e94252d175935d3797e9eca2cd80c
Validity
Not Before: Nov 11 09:01:22 2025 GMT
Not After : Nov 12 09:01:22 2025 GMT
Subject: CN=dc4c8001d15caec975299a98dfaea242f7d1450e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:33:f5:3c:f4:12:71:5a:c8:38:63:0f:a7:85:
8b:0c:c9:3b:bf:8b:6d:a3:18:d9:47:fa:b9:36:8c:
a9:1d:a3:ec:68:a1:d8:47:32:fb:3f:87:58:5e:52:
43:82:f3:b9:be:7c:cf:df:9d:eb:25:e6:ac:db:82:
c8:b8:02:81:87:bf:44:f9:58:f8:93:b6:7e:eb:ae:
ac:22:ba:5d:0e:e9:6c:d4:26:a4:61:56:30:f8:0f:
5e:fc:fd:eb:f3:cd:cd:f7:7d:7b:c5:c5:ae:78:f5:
0d:ae:29:70:e4:19:9f:50:ca:20:1f:fc:83:c6:28:
16:4b:70:ca:c7:8f:5d:f9:2b:cd:cc:bc:03:08:20:
45:2d:4e:bc:69:18:2d:5c:30:bc:d6:79:88:f1:8b:
33:29:23:30:38:ae:8f:e4:f4:3f:af:e5:ff:a9:16:
2d:ea:3d:20:e8:8f:88:de:9b:11:ba:57:9c:85:fc:
3b:c2:23:f0:60:56:05:00:eb:e1:37:d4:85:96:c0:
e2:14:28:e8:75:0d:f1:db:3f:35:05:d8:6c:ed:eb:
c3:cd:13:c4:9f:79:ea:44:5c:32:e9:50:74:c9:89:
32:e2:52:70:eb:18:fa:5a:5c:1f:6d:ab:e6:c3:b5:
b4:15:71:d1:f9:ae:0c:8b:0a:38:48:67:65:59:2f:
af:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:4C:80:01:D1:5C:AE:C9:75:29:9A:98:DF:AE:A2:42:F7:D1:45:0E
X509v3 Authority Key Identifier:
keyid:D3:05:1A:F8:66:1E:94:25:2D:17:59:35:D3:79:7E:9E:CA:2C:D8:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0wUa-GYelCUtF1k103l-nsos2Aw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7672e2-1c7f-4d2e-8961-c26c3e23baf6/1/0wUa-GYelCUtF1k103l-nsos2Aw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7672e2-1c7f-4d2e-8961-c26c3e23baf6/1/0wUa-GYelCUtF1k103l-nsos2Aw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:dd:99:3a:57:e3:1a:e4:c3:e9:b0:25:59:c7:6b:9c:f0:3b:
f3:1e:9c:b4:f7:d6:c9:4e:8c:ba:b8:8e:f1:9c:c6:35:7a:a9:
e3:87:f5:09:65:05:ea:2d:8d:20:de:97:5a:36:1e:b8:7e:3f:
14:45:5e:0e:c4:d2:86:12:16:2a:90:da:e1:8c:c1:d1:bd:7c:
69:6a:37:c2:f5:50:53:f4:11:f6:22:03:f0:d2:88:d6:05:c7:
0e:25:aa:97:2b:19:35:31:f6:df:88:1e:12:14:57:ad:46:eb:
fd:4a:9a:50:fc:2c:02:e0:6b:87:6d:3e:ef:26:ce:63:a5:5b:
19:d9:d4:0c:7f:60:57:12:bb:39:97:29:bb:5d:77:a0:24:e2:
d9:76:5e:80:dd:27:e1:c8:89:13:67:94:61:b6:3d:e2:6b:18:
18:ef:c3:a7:75:92:43:c1:6a:5a:17:d0:c3:9f:e2:78:8a:3a:
0b:1d:43:ca:6e:1d:e3:4e:5c:aa:81:26:d6:e2:9c:fb:61:20:
e8:fd:95:3e:f5:0a:e8:66:92:7f:77:24:8d:21:a0:5e:6e:52:
f5:f2:47:33:04:01:5c:67:09:5a:ae:2b:01:b6:8b:d8:86:ef:
99:41:10:87:33:4a:38:b0:c5:aa:44:60:58:7d:67:fd:7b:4f:
3f:74:08:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:38:54 2025 by rpki-client