Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/47d692-dd40-4bf2-893f-d38dd0b78909/1/0NxXC8HJZLq37VbGc6pAUY-FRXg.mft
File: 0NxXC8HJZLq37VbGc6pAUY-FRXg.mft (raw, json)
Hash identifier: OXQMn66VXsxRZcf94ixkfXPAug5ZeNzpexf+kzjQP+I=
Subject key identifier: 31:0F:20:ED:27:7E:8B:11:BB:B0:9F:80:10:82:8B:CA:E0:B8:0F:FB
Authority key identifier: D0:DC:57:0B:C1:C9:64:BA:B7:ED:56:C6:73:AA:40:51:8F:85:45:78
Certificate issuer: /CN=d0dc570bc1c964bab7ed56c673aa40518f854578
Certificate serial: 019A71B7BF3CB0849D5B4EBCD3E1891C5C2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0NxXC8HJZLq37VbGc6pAUY-FRXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/47d692-dd40-4bf2-893f-d38dd0b78909/1/0NxXC8HJZLq37VbGc6pAUY-FRXg.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 07:00:58 +0000
Manifest this update: Tue 11 Nov 2025 07:00:58 +0000
Manifest next update: Wed 12 Nov 2025 07:00:58 +0000
Files and hashes: 1: 0NxXC8HJZLq37VbGc6pAUY-FRXg.crl (hash: OGLUD0xvf6Sxx39sOgomkF+Ib8aVB/l/4NDU1Va8AZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/47d692-dd40-4bf2-893f-d38dd0b78909/1/0NxXC8HJZLq37VbGc6pAUY-FRXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/47d692-dd40-4bf2-893f-d38dd0b78909/1/0NxXC8HJZLq37VbGc6pAUY-FRXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0NxXC8HJZLq37VbGc6pAUY-FRXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:bf:3c:b0:84:9d:5b:4e:bc:d3:e1:89:1c:5c:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0dc570bc1c964bab7ed56c673aa40518f854578
Validity
Not Before: Nov 11 07:00:58 2025 GMT
Not After : Nov 12 07:00:58 2025 GMT
Subject: CN=310f20ed277e8b11bbb09f8010828bcae0b80ffb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:23:a1:bd:40:be:f4:6e:ac:f3:e0:e9:41:a7:
87:8d:13:a9:d4:58:51:9e:6c:11:7a:d6:76:f7:5b:
59:0c:67:2e:cc:78:5a:60:22:5d:f4:24:8f:7a:ee:
e0:f2:e3:0e:97:ba:ad:c9:95:72:97:8f:56:47:d6:
cd:f8:c3:92:fc:4f:29:05:88:46:ab:56:7b:07:24:
4f:34:d0:64:02:30:90:19:d9:59:97:e8:f0:f8:94:
27:8b:c1:e8:19:27:3b:56:b3:8d:26:5a:4a:c5:1f:
f3:87:ec:ba:37:af:22:e0:0e:f5:55:fd:c4:b8:b6:
70:bc:09:06:90:28:b5:d1:b1:50:ca:8d:31:8f:4a:
a3:1f:4e:13:59:81:72:d7:e7:8d:b8:83:e5:7b:a0:
94:c6:e2:1c:03:74:8e:87:07:87:d9:89:b4:80:b1:
bb:37:21:8f:bb:92:1b:60:19:ce:d8:42:61:b0:c5:
4e:a6:53:a9:46:45:7b:82:cc:be:29:f7:da:cd:b4:
b8:f6:a1:80:d8:31:3a:64:de:2d:d3:bc:0f:c5:1d:
7d:2b:ca:4a:2c:f8:90:d4:0d:02:b1:c7:02:c1:bc:
af:e0:d9:b2:bf:88:e7:82:d3:c8:4b:30:21:95:5b:
45:76:c0:c2:27:30:fd:24:ec:e2:85:c2:00:45:b2:
cf:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:0F:20:ED:27:7E:8B:11:BB:B0:9F:80:10:82:8B:CA:E0:B8:0F:FB
X509v3 Authority Key Identifier:
keyid:D0:DC:57:0B:C1:C9:64:BA:B7:ED:56:C6:73:AA:40:51:8F:85:45:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0NxXC8HJZLq37VbGc6pAUY-FRXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/47d692-dd40-4bf2-893f-d38dd0b78909/1/0NxXC8HJZLq37VbGc6pAUY-FRXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/47d692-dd40-4bf2-893f-d38dd0b78909/1/0NxXC8HJZLq37VbGc6pAUY-FRXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:ba:6b:8a:50:61:9d:99:75:b4:ee:da:5d:20:3e:70:82:7b:
0b:82:6c:96:63:ec:11:c6:e7:75:52:0d:26:31:81:0a:d5:7c:
fb:d1:c2:0f:3b:5e:21:73:48:c3:40:14:19:a8:6d:c7:8b:39:
ac:a8:f6:91:6c:c6:2b:e8:6e:01:b2:cd:c3:4f:f9:9d:00:ce:
27:d3:cb:d9:80:cf:c7:14:38:49:d9:56:54:79:d6:74:26:d0:
95:8a:9e:ba:2d:a9:64:01:a9:8f:85:2b:45:16:ff:65:f0:fb:
30:98:bc:05:6a:ac:01:55:46:ee:88:53:dc:4b:92:8d:7a:94:
6f:06:42:76:c6:01:0d:a4:2e:2d:c4:1c:0b:08:56:17:fc:eb:
4b:82:f8:9e:99:7b:41:4e:95:7d:47:8f:86:c7:4e:ce:68:8b:
08:a2:48:cc:65:c4:70:4b:61:42:da:2b:5b:51:cf:33:31:52:
9f:83:00:5c:03:51:a7:2d:bc:fe:d9:d7:0f:1f:dd:8b:52:3a:
20:d9:b3:5d:ed:6f:92:70:0b:20:5c:86:09:6f:ab:a5:db:bb:
68:86:b1:69:3e:e8:59:0c:6a:2b:93:1a:27:d2:8f:1a:b8:62:
d7:47:1c:1a:01:54:c1:1e:92:3b:d9:ee:d6:e2:51:e6:5d:aa:
c8:6c:86:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:25:07 2025 by rpki-client