Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/63da8a-de6f-4b12-a864-e3dd52799bda/1/DO-ss3RB3RkYO9HLV9te5VR3p6c.mft
File: DO-ss3RB3RkYO9HLV9te5VR3p6c.mft (raw, json)
Hash identifier: kQUYGd+gmdfKFT/Xsq2Y2IwnuOPPfbtdMSFukbSAOz8=
Subject key identifier: 09:C3:BB:78:29:B2:4E:3F:59:DA:D9:E9:74:30:3C:A7:DE:6F:EE:D5
Authority key identifier: 0C:EF:AC:B3:74:41:DD:19:18:3B:D1:CB:57:DB:5E:E5:54:77:A7:A7
Certificate issuer: /CN=0cefacb37441dd19183bd1cb57db5ee55477a7a7
Certificate serial: 019A71EEA2C73BBC36EEAA1D4FF532128AC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DO-ss3RB3RkYO9HLV9te5VR3p6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/63da8a-de6f-4b12-a864-e3dd52799bda/1/DO-ss3RB3RkYO9HLV9te5VR3p6c.mft
Manifest number: 0ADE
Signing time: Tue 11 Nov 2025 08:00:55 +0000
Manifest this update: Tue 11 Nov 2025 08:00:55 +0000
Manifest next update: Wed 12 Nov 2025 08:00:55 +0000
Files and hashes: 1: DO-ss3RB3RkYO9HLV9te5VR3p6c.crl (hash: 1FOhn7ffyfu+0PJCbaaQvzFMKan4NjGL+L/z0N1yV90=)
2: O7YDGlReH1x3D0s7Ygr1Vy16MbI.roa (hash: WAs5UezYMvac542kW/ZhIkgbBXd8gscxgdqz/AR6xPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/63da8a-de6f-4b12-a864-e3dd52799bda/1/DO-ss3RB3RkYO9HLV9te5VR3p6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/63da8a-de6f-4b12-a864-e3dd52799bda/1/DO-ss3RB3RkYO9HLV9te5VR3p6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/DO-ss3RB3RkYO9HLV9te5VR3p6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:a2:c7:3b:bc:36:ee:aa:1d:4f:f5:32:12:8a:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cefacb37441dd19183bd1cb57db5ee55477a7a7
Validity
Not Before: Nov 11 08:00:55 2025 GMT
Not After : Nov 12 08:00:55 2025 GMT
Subject: CN=09c3bb7829b24e3f59dad9e974303ca7de6feed5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:06:bb:74:01:46:a3:42:4c:a4:6a:f9:ef:2f:
41:64:6a:f1:63:69:42:39:60:9d:a2:67:b1:c2:6f:
46:6f:4c:db:eb:2c:cd:11:26:0b:14:d1:59:9a:f7:
f8:a5:b2:ff:e3:d7:16:95:4b:8f:26:fc:dc:9d:5a:
04:f4:d6:ad:41:d0:24:5d:83:01:59:a6:fe:7f:31:
8c:62:92:31:93:cf:ca:89:21:a7:3a:b2:64:f9:25:
8b:b8:b0:a0:f0:b5:e6:2e:dd:93:90:ea:00:91:92:
0a:90:b2:f9:48:b7:f8:7b:f1:d0:35:87:db:a0:60:
6b:35:5c:3b:7d:77:64:79:67:b8:4d:d5:d8:b4:57:
fa:0e:c2:99:9f:40:8d:83:d3:b4:99:4f:46:f6:56:
de:11:fd:e3:e2:29:9e:f9:89:e0:ce:6f:a8:48:b5:
8d:6e:85:0d:4d:9f:06:e1:fd:d6:49:07:a4:e6:2d:
af:1d:ce:52:b4:31:b9:d6:1a:3c:fa:19:cf:32:c4:
62:20:33:bf:54:79:72:0b:dc:e1:16:30:e4:60:ee:
b0:6d:27:73:6d:89:1a:6c:9b:fa:4b:26:63:5e:36:
9e:2b:b7:65:f5:20:50:f9:e9:fd:73:07:ea:6a:82:
a7:37:09:cf:b3:15:20:59:55:ac:09:9a:e5:46:0f:
80:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:C3:BB:78:29:B2:4E:3F:59:DA:D9:E9:74:30:3C:A7:DE:6F:EE:D5
X509v3 Authority Key Identifier:
keyid:0C:EF:AC:B3:74:41:DD:19:18:3B:D1:CB:57:DB:5E:E5:54:77:A7:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DO-ss3RB3RkYO9HLV9te5VR3p6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/63da8a-de6f-4b12-a864-e3dd52799bda/1/DO-ss3RB3RkYO9HLV9te5VR3p6c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/63da8a-de6f-4b12-a864-e3dd52799bda/1/DO-ss3RB3RkYO9HLV9te5VR3p6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:5d:be:42:5c:b7:f4:64:07:35:29:89:32:8e:3e:e7:ab:f1:
bd:98:ce:3e:3b:d2:3d:13:2e:d6:e1:80:0b:ed:b5:7e:be:bc:
d4:6e:df:e3:32:35:0b:5f:66:42:c9:dd:f9:6f:50:c7:33:b0:
3b:c6:e9:ca:5e:13:cc:1d:a6:f3:57:a7:df:49:c2:05:2e:b4:
50:d7:c1:ac:6a:dd:35:b0:23:6c:ee:6c:4e:b0:02:ef:6d:3a:
48:13:09:e9:c1:44:c9:d5:0a:d8:a5:53:ed:cd:e9:29:3e:5c:
57:78:d2:76:97:af:70:91:a7:c2:11:5e:8f:ce:51:a7:66:4b:
b3:9d:82:e2:99:a6:be:c3:a6:ab:30:ec:71:65:0d:f4:f2:90:
02:8f:85:b4:2b:64:3e:c3:12:d1:fb:14:28:35:8a:0f:54:48:
35:2b:81:78:e5:df:bc:6c:65:c0:3a:dc:af:8a:39:a2:c8:eb:
68:e9:d6:94:ef:f9:d1:b2:a7:ca:b0:47:b2:1e:8d:81:e8:70:
fa:42:e6:c8:fd:d2:b7:f5:4c:d9:23:3f:ba:5f:99:6d:e2:a8:
d9:3b:e8:d7:94:95:97:6c:59:dd:10:a4:1f:0d:3e:68:31:d7:
55:bd:a1:c1:77:39:3c:43:5d:f6:37:37:dd:88:e8:6e:75:8e:
b6:5c:3c:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:52:20 2025 by rpki-client