Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0fc3f6-6a1a-4cdc-a147-da8b2d576bf1/1/0jxZJVkZvdmrA73hxceIBixLmfM.mft
File: 0jxZJVkZvdmrA73hxceIBixLmfM.mft (raw, json)
Hash identifier: SW9/lfZyjAj4QS4ZWWKteL7ucF6MSKzVcPjPgNY1UUs=
Subject key identifier: 78:54:E6:C1:F6:AF:08:D4:04:6E:95:A2:72:0D:F7:69:F6:DA:FD:C9
Authority key identifier: D2:3C:59:25:59:19:BD:D9:AB:03:BD:E1:C5:C7:88:06:2C:4B:99:F3
Certificate issuer: /CN=d23c59255919bdd9ab03bde1c5c788062c4b99f3
Certificate serial: 019A70DC09C6328F378DB4F051672CA43525
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0jxZJVkZvdmrA73hxceIBixLmfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0fc3f6-6a1a-4cdc-a147-da8b2d576bf1/1/0jxZJVkZvdmrA73hxceIBixLmfM.mft
Manifest number: 0851
Signing time: Tue 11 Nov 2025 03:00:59 +0000
Manifest this update: Tue 11 Nov 2025 03:00:59 +0000
Manifest next update: Wed 12 Nov 2025 03:00:59 +0000
Files and hashes: 1: 0jxZJVkZvdmrA73hxceIBixLmfM.crl (hash: 5Pk0EagKu3Nrd7iEKj4T30mpxv0ZdXZrOQvl5RWBLc8=)
2: JC586knHAJCWuyAHAdSdP6vCZvc.roa (hash: 5tWj8kAF7Tk8U+7sz2E535dJcNrZC7NIfrQwoPJI7rw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/0fc3f6-6a1a-4cdc-a147-da8b2d576bf1/1/0jxZJVkZvdmrA73hxceIBixLmfM.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/0fc3f6-6a1a-4cdc-a147-da8b2d576bf1/1/0jxZJVkZvdmrA73hxceIBixLmfM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0jxZJVkZvdmrA73hxceIBixLmfM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:09:c6:32:8f:37:8d:b4:f0:51:67:2c:a4:35:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d23c59255919bdd9ab03bde1c5c788062c4b99f3
Validity
Not Before: Nov 11 03:00:59 2025 GMT
Not After : Nov 12 03:00:59 2025 GMT
Subject: CN=7854e6c1f6af08d4046e95a2720df769f6dafdc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a5:fe:fc:d3:01:3c:5f:c3:61:89:3a:29:78:
a8:6b:82:95:01:85:9c:70:f1:ed:9a:bb:b8:4b:5b:
5d:68:3a:53:e0:79:e7:ab:f1:54:10:01:62:5b:1f:
ad:34:e7:42:6a:a9:fe:0a:1f:10:8e:76:9c:51:5a:
52:21:75:2e:13:39:0c:a6:ef:fb:6f:65:be:40:76:
93:59:1c:78:5d:0f:4f:4f:de:eb:56:65:a3:3c:02:
e5:c2:44:05:ba:36:90:c2:30:f9:9c:f4:7c:2a:30:
7b:5f:49:0b:6c:8b:4f:fd:d6:4a:fc:88:48:82:89:
6b:7c:32:9d:85:eb:c5:e8:de:a2:d9:cb:34:1a:92:
7b:9f:5b:5e:e1:9e:53:71:fa:69:bc:2e:b8:29:57:
3b:d4:67:32:e3:65:d4:a0:a1:7e:25:c8:22:38:22:
9b:5b:9a:95:84:df:5b:0f:1d:7a:62:fe:c8:3f:d8:
6a:a7:61:61:64:dd:93:2a:b7:74:c5:7e:3c:77:ca:
e0:b5:55:26:66:04:fa:84:de:0d:85:d4:5e:57:cf:
3b:61:66:91:57:33:5e:00:c2:87:22:fd:85:02:0d:
c9:e6:d5:e5:bb:4a:6e:3a:5e:7c:46:75:3f:17:c9:
bc:47:6a:36:4e:86:af:a8:7c:ff:31:02:2c:8a:91:
61:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:54:E6:C1:F6:AF:08:D4:04:6E:95:A2:72:0D:F7:69:F6:DA:FD:C9
X509v3 Authority Key Identifier:
keyid:D2:3C:59:25:59:19:BD:D9:AB:03:BD:E1:C5:C7:88:06:2C:4B:99:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jxZJVkZvdmrA73hxceIBixLmfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0fc3f6-6a1a-4cdc-a147-da8b2d576bf1/1/0jxZJVkZvdmrA73hxceIBixLmfM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0fc3f6-6a1a-4cdc-a147-da8b2d576bf1/1/0jxZJVkZvdmrA73hxceIBixLmfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:0f:96:26:74:b2:50:f0:9c:4d:fe:e0:46:9e:7b:46:82:0c:
e6:a9:14:7f:3c:f3:3f:d7:ca:00:7b:2f:51:c9:99:71:5e:9a:
4d:1b:d5:fa:3f:a7:d2:29:3d:6f:3d:59:fb:22:e6:aa:a2:98:
8d:71:86:c2:95:29:59:c2:5e:e9:2d:53:57:84:fa:8c:be:90:
40:d3:5f:11:71:f3:37:c0:e0:18:77:7c:9e:fa:ea:4f:d0:68:
81:18:6d:de:7d:d4:68:72:e7:cb:29:ce:b2:c7:d6:d3:19:9b:
46:d2:f8:8b:b7:cd:1b:b4:c7:e6:a4:89:77:ac:e5:ba:03:71:
fd:9b:51:52:b1:f6:0e:9e:c6:eb:8c:88:cd:ac:3a:51:fd:72:
f8:06:87:10:51:ca:cb:78:1c:99:b6:dd:b8:f6:95:54:43:57:
ad:56:3d:0d:88:f9:bf:b1:21:62:b6:ed:4b:54:53:8a:6e:f8:
2a:41:16:a0:65:a9:a5:01:9b:16:45:a5:31:c6:d0:51:95:18:
33:9d:af:c2:b8:82:c6:04:47:24:af:f5:0a:1b:a5:a0:c9:85:
74:f8:9c:f4:e4:7b:bd:e4:65:da:9e:fa:e8:33:d1:26:e0:ac:
a5:24:16:20:f7:cf:37:f9:a9:e4:10:3c:c7:25:77:9d:0b:35:
dc:d4:0d:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:14:28 2025 by rpki-client