Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/b5e2cd-5fb0-49d5-bc65-89f2df80c345/1/0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.mft
File: 0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.mft (raw, json)
Hash identifier: E4vEHAfCPHRpm3ipr232OOfOGTk1qHfppapBrKIa08A=
Subject key identifier: 5D:A3:EA:F3:88:AB:C8:1C:79:0C:19:7F:EC:F0:09:7B:A1:A0:99:F0
Authority key identifier: D1:6B:D0:E8:CB:54:98:C7:F9:AC:A1:BB:FC:F9:DB:37:75:65:E8:DF
Certificate issuer: /CN=d16bd0e8cb5498c7f9aca1bbfcf9db377565e8df
Certificate serial: 019A70A5490707D89F56BF742181A5A5FF90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/b5e2cd-5fb0-49d5-bc65-89f2df80c345/1/0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.mft
Manifest number: 13DC
Signing time: Tue 11 Nov 2025 02:01:11 +0000
Manifest this update: Tue 11 Nov 2025 02:01:11 +0000
Manifest next update: Wed 12 Nov 2025 02:01:11 +0000
Files and hashes: 1: 0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.crl (hash: nhbpFVIdNGSlQNFL9m3TgaS4yPfzhIUmvUrERiFCZAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/b5e2cd-5fb0-49d5-bc65-89f2df80c345/1/0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/b5e2cd-5fb0-49d5-bc65-89f2df80c345/1/0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:49:07:07:d8:9f:56:bf:74:21:81:a5:a5:ff:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d16bd0e8cb5498c7f9aca1bbfcf9db377565e8df
Validity
Not Before: Nov 11 02:01:11 2025 GMT
Not After : Nov 12 02:01:11 2025 GMT
Subject: CN=5da3eaf388abc81c790c197fecf0097ba1a099f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:eb:1c:b4:23:22:3a:b1:98:43:c2:32:24:7a:
91:02:86:fa:d4:84:a7:07:9c:0c:bf:11:3c:e5:9e:
55:ef:00:f4:80:96:13:bd:a7:0e:b3:f5:fe:21:28:
31:17:3d:79:f6:25:b1:c5:74:99:4f:c0:7c:6b:50:
6a:a0:ac:26:21:26:c8:06:87:3b:47:f0:b2:39:0a:
7a:3b:d3:54:e6:bb:4e:a5:b7:eb:e3:6d:62:72:02:
e9:ac:03:b6:c3:b5:17:ea:09:cc:22:f3:c3:4e:59:
42:17:fa:2b:0e:cc:98:bd:69:46:5a:da:f1:84:bb:
57:d5:5f:f0:42:09:5b:97:7f:48:3f:e9:73:fb:d5:
24:7a:f8:15:ea:5f:8c:01:bb:30:6c:93:30:c3:69:
64:dc:dc:b8:76:0c:48:bd:4d:6a:d9:9f:8a:c0:70:
5e:77:89:92:ed:1c:98:2a:5b:9d:61:60:c8:d2:d6:
ff:aa:24:d7:11:5f:76:85:2e:8b:d1:d8:8c:03:72:
00:b6:4c:83:b6:38:5c:84:1c:97:02:fe:58:95:2a:
f6:7a:58:1b:90:15:8a:0d:7f:ba:4b:9a:0c:43:f8:
fa:a8:aa:c7:df:43:0c:3a:8a:b2:a4:c0:20:67:cc:
75:d2:1f:66:97:c5:8f:72:32:2a:0c:20:27:f8:9f:
39:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:A3:EA:F3:88:AB:C8:1C:79:0C:19:7F:EC:F0:09:7B:A1:A0:99:F0
X509v3 Authority Key Identifier:
keyid:D1:6B:D0:E8:CB:54:98:C7:F9:AC:A1:BB:FC:F9:DB:37:75:65:E8:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/b5e2cd-5fb0-49d5-bc65-89f2df80c345/1/0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/b5e2cd-5fb0-49d5-bc65-89f2df80c345/1/0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:71:9d:23:8c:91:26:c4:8d:50:19:d5:c8:c5:83:a6:48:7f:
6d:3b:55:b1:9a:6d:93:4b:5a:58:a4:b0:77:b0:dc:bf:39:2e:
5d:eb:da:43:a8:23:e1:48:25:67:cb:ef:43:4d:e1:80:4d:69:
eb:84:74:17:e0:e9:5d:b0:bb:8a:35:cf:0c:90:d5:ca:94:5f:
8f:08:37:a5:e3:0a:3d:b8:3f:b6:8c:b9:d6:48:1a:05:43:a5:
95:b4:6d:82:1c:4e:27:2c:46:c1:ea:70:2a:3a:12:7e:64:65:
2e:b1:e2:2d:e7:f9:e4:48:78:ed:99:f1:68:b4:51:d2:e2:6b:
b4:c3:7c:24:47:2f:bb:ae:b7:66:9d:fe:6e:68:ef:1f:0a:fb:
55:86:95:84:60:f1:42:cb:75:7e:d9:bb:86:b5:b4:c3:ad:18:
6b:87:50:86:0b:76:b5:a2:24:b5:20:05:11:78:ba:46:a9:23:
6b:06:2c:52:78:86:fb:a1:c2:30:a8:39:7b:68:a1:62:a2:34:
96:41:f8:cc:ee:77:b4:11:68:63:d0:14:7b:0a:82:9d:a1:b5:
b3:50:a3:c4:e8:a6:51:8c:1e:92:1f:5e:3d:62:59:bc:bc:54:
61:aa:cb:d0:c9:a3:39:3b:60:7c:6b:d6:35:46:1e:18:f9:7f:
e6:57:48:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:11 2025 by rpki-client