Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/f8d98d-1ffe-4639-b373-9ba1172a68c0/1/0bS-sKan4ShKv0OFNIz0hhALn4A.mft
File: 0bS-sKan4ShKv0OFNIz0hhALn4A.mft (raw, json)
Hash identifier: 3BfkGA1omnzNH9QhRBJ6/rhsGwxrKXdGSGcIbSx+9ps=
Subject key identifier: B6:EC:6F:01:2F:68:31:30:CF:6A:04:14:83:E1:48:B4:B2:43:A0:70
Authority key identifier: D1:B4:BE:B0:A6:A7:E1:28:4A:BF:43:85:34:8C:F4:86:10:0B:9F:80
Certificate issuer: /CN=d1b4beb0a6a7e1284abf4385348cf486100b9f80
Certificate serial: 019A71B9326820A6619883496E26BEB78FD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0bS-sKan4ShKv0OFNIz0hhALn4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/f8d98d-1ffe-4639-b373-9ba1172a68c0/1/0bS-sKan4ShKv0OFNIz0hhALn4A.mft
Manifest number: 0F1F
Signing time: Tue 11 Nov 2025 07:02:33 +0000
Manifest this update: Tue 11 Nov 2025 07:02:33 +0000
Manifest next update: Wed 12 Nov 2025 07:02:33 +0000
Files and hashes: 1: 0bS-sKan4ShKv0OFNIz0hhALn4A.crl (hash: QQBICLQLDGcTFX5HcNJ65550rHlouU2mPLGTPEh/TEs=)
2: c4vhQn8zi1dmhfuFlEzS457ekqY.roa (hash: K0d7LR2NOcizL+J6fo8ZUFPUHzj1ReR3yGovArPpqzY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/f8d98d-1ffe-4639-b373-9ba1172a68c0/1/0bS-sKan4ShKv0OFNIz0hhALn4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/f8d98d-1ffe-4639-b373-9ba1172a68c0/1/0bS-sKan4ShKv0OFNIz0hhALn4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/0bS-sKan4ShKv0OFNIz0hhALn4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:32:68:20:a6:61:98:83:49:6e:26:be:b7:8f:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1b4beb0a6a7e1284abf4385348cf486100b9f80
Validity
Not Before: Nov 11 07:02:33 2025 GMT
Not After : Nov 12 07:02:33 2025 GMT
Subject: CN=b6ec6f012f683130cf6a041483e148b4b243a070
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1e:9f:14:8c:4f:d1:de:ce:b4:9e:13:b0:16:
08:8e:4a:46:50:f4:bd:d6:60:b0:92:74:41:ab:19:
7e:c2:69:8c:46:24:04:ec:8b:63:72:80:07:fd:7c:
6b:7b:ec:0f:81:ee:6a:1f:c7:7c:ff:e5:34:fa:f0:
21:cf:55:63:0c:37:4d:0a:fa:6c:c2:96:66:fc:02:
c4:3d:84:83:5e:dd:38:db:55:25:76:e4:cf:43:b5:
6b:e9:01:d1:43:71:5d:40:f8:99:e1:b7:3d:10:bf:
19:82:48:bd:88:ab:63:50:cd:42:c8:55:1b:6c:e2:
31:e8:4f:e8:19:02:d1:56:8d:df:68:80:17:4b:6b:
47:ae:0a:68:c9:27:d3:4c:1f:83:ed:51:7d:05:e1:
13:8c:04:eb:a1:d1:76:75:bb:f9:48:61:d5:40:33:
81:5f:f8:5e:b6:3c:90:13:59:5f:7e:ea:25:7e:9d:
97:66:6a:d3:8a:22:1a:d2:4b:05:63:2b:d6:f2:28:
d4:91:8c:28:c4:fd:f6:27:11:88:c4:1e:f3:06:fe:
87:54:8a:ba:3c:f3:7d:d3:17:05:09:77:bb:5d:5f:
79:fb:25:7f:37:db:54:ac:05:37:df:fe:c0:e2:1d:
c9:ad:10:73:b1:ed:22:74:18:69:67:49:da:49:56:
a7:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:EC:6F:01:2F:68:31:30:CF:6A:04:14:83:E1:48:B4:B2:43:A0:70
X509v3 Authority Key Identifier:
keyid:D1:B4:BE:B0:A6:A7:E1:28:4A:BF:43:85:34:8C:F4:86:10:0B:9F:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0bS-sKan4ShKv0OFNIz0hhALn4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f8d98d-1ffe-4639-b373-9ba1172a68c0/1/0bS-sKan4ShKv0OFNIz0hhALn4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f8d98d-1ffe-4639-b373-9ba1172a68c0/1/0bS-sKan4ShKv0OFNIz0hhALn4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:53:96:99:4d:06:f7:f2:17:fa:c9:30:44:c4:0c:8b:52:de:
3d:8c:36:91:be:4b:2c:d3:4a:81:f1:ae:4e:d0:da:42:8c:a7:
1d:95:8b:11:6e:8a:18:6c:f0:56:08:9c:ec:83:97:77:99:61:
05:c4:bc:c1:c7:a2:45:a1:22:f9:0f:7b:a5:45:bb:66:d8:79:
e4:c1:c4:45:9e:c4:fe:ec:fe:fd:96:7e:43:74:81:4c:86:88:
74:8a:ac:d7:5b:43:5f:8c:de:52:63:fd:bd:f1:28:b2:06:8f:
88:a8:2d:a7:45:37:b2:eb:c8:1d:10:12:3f:42:73:30:af:37:
6b:e1:27:d1:c2:bf:1f:4d:d8:6a:9e:12:47:76:9f:d8:16:65:
48:ff:6f:c3:86:1f:af:40:9a:a6:d1:7c:c5:d1:d7:bc:78:83:
b8:7e:dc:b8:4e:e0:d1:94:60:c6:79:e6:e8:dd:49:50:8a:db:
2e:4f:26:64:79:4f:3a:65:dd:fb:4f:5d:78:a6:15:8d:98:03:
c9:aa:4b:f4:50:9e:00:d8:bb:b4:d2:3c:e2:7e:16:f6:ca:f7:
b8:c1:fb:a7:71:7f:61:29:09:ed:51:ce:10:68:05:a4:b8:65:
e0:57:12:18:90:a7:b3:92:8b:9e:73:07:06:22:10:03:bd:47:
49:d8:45:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:41:53 2025 by rpki-client