Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.mft
File: 0vbmtaNP0YtDU4Xbh7s66XR4UQg.mft (raw, json)
Hash identifier: cmoWMV7Ivtu1ko35FVX6JE6Sra0QeocevCIXbk5J8O8=
Subject key identifier: B5:11:14:BA:87:EA:28:3E:A5:53:25:56:19:FD:E7:90:0A:EC:A7:49
Authority key identifier: D2:F6:E6:B5:A3:4F:D1:8B:43:53:85:DB:87:BB:3A:E9:74:78:51:08
Certificate issuer: /CN=d2f6e6b5a34fd18b435385db87bb3ae974785108
Certificate serial: 019A72CA9987FB63281007BBE14E31BC578C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0vbmtaNP0YtDU4Xbh7s66XR4UQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.mft
Manifest number: 14D3
Signing time: Tue 11 Nov 2025 12:01:11 +0000
Manifest this update: Tue 11 Nov 2025 12:01:11 +0000
Manifest next update: Wed 12 Nov 2025 12:01:11 +0000
Files and hashes: 1: 0vbmtaNP0YtDU4Xbh7s66XR4UQg.crl (hash: /u17B0pBPR1U4lN9EpSwB+lg2TvO5cCLY1oBhZr+o94=)
2: vHnKRxUajbywNAqL6nOx-jDQRUM.roa (hash: 9L1D0lkWg2QABU5Zj6IAqZoeAKA6O0lNRb8Xz0hsQns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0vbmtaNP0YtDU4Xbh7s66XR4UQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:99:87:fb:63:28:10:07:bb:e1:4e:31:bc:57:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2f6e6b5a34fd18b435385db87bb3ae974785108
Validity
Not Before: Nov 11 12:01:11 2025 GMT
Not After : Nov 12 12:01:11 2025 GMT
Subject: CN=b51114ba87ea283ea553255619fde7900aeca749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:15:42:8a:43:56:4f:55:92:db:ee:94:25:0b:
c1:13:a7:41:c7:95:06:d8:ae:94:c1:93:7e:f5:50:
49:02:e2:5f:ac:f5:09:49:34:e1:ba:2e:33:8b:83:
99:85:b7:0e:5f:22:e6:9d:21:90:c2:b2:3c:ab:6f:
3b:37:8b:74:88:07:64:6a:37:e8:9a:de:99:f5:55:
85:c2:91:d2:07:ee:93:cb:7c:a3:18:cf:d9:33:0c:
c1:2f:10:26:f4:eb:ef:4f:2b:49:7f:13:cb:c2:3a:
a0:eb:21:e6:5e:e1:95:b1:4c:6b:78:d2:52:f6:d5:
08:fd:7c:93:20:d3:89:45:db:7a:1c:79:2d:48:4e:
21:0f:f9:52:0e:d2:69:e8:08:63:50:af:80:dc:b8:
c1:9d:a3:44:23:7c:2e:74:2e:c6:bb:ff:b5:b7:c9:
b8:46:40:78:cf:33:e6:4e:b4:e2:3f:38:f0:03:31:
68:1b:e0:13:8c:b4:33:42:59:cf:d2:2a:be:b0:7b:
ed:60:84:b7:85:c6:2e:1f:9f:49:26:93:28:8a:01:
42:6c:a9:c7:39:6a:b0:f6:5d:9c:f9:36:d4:64:b8:
6f:be:7e:7e:b0:84:70:9a:0e:56:93:e1:97:f9:36:
eb:79:85:05:0f:18:b2:3e:80:96:d7:a6:31:5c:1e:
48:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:11:14:BA:87:EA:28:3E:A5:53:25:56:19:FD:E7:90:0A:EC:A7:49
X509v3 Authority Key Identifier:
keyid:D2:F6:E6:B5:A3:4F:D1:8B:43:53:85:DB:87:BB:3A:E9:74:78:51:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0vbmtaNP0YtDU4Xbh7s66XR4UQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:88:d7:f3:f6:54:75:91:6f:4e:de:71:d7:fa:4b:07:d4:ef:
c7:2e:1e:78:8b:5e:bc:93:a0:b7:89:d8:35:e3:a5:22:3a:ce:
8f:b6:23:80:39:e2:71:a3:53:38:88:be:0a:24:e7:21:a5:c5:
db:67:9d:5c:29:69:0f:8d:81:7f:4c:d3:ab:5f:03:7d:da:4f:
21:4f:21:53:4a:b0:34:46:55:17:81:5f:9c:fd:20:c3:be:10:
75:91:8a:61:15:7a:67:59:b0:81:66:fc:bc:68:7e:67:ec:47:
59:02:15:98:83:0e:c3:a3:12:be:b7:57:03:aa:c2:94:93:6e:
0b:85:1f:42:76:f5:5b:89:be:81:97:00:e2:88:f6:5d:2c:49:
94:88:e7:26:76:72:4a:52:b1:e7:18:0f:76:8d:49:c7:e0:d2:
55:b7:a5:7a:79:18:aa:50:e1:4d:4d:b4:bd:2a:e4:f1:95:0a:
e5:c8:14:f0:74:d4:6f:13:a9:60:eb:02:e6:a3:d6:9d:d9:35:
4e:04:59:8c:8f:af:2e:5f:0b:a4:90:99:c3:9e:28:1c:ad:e8:
69:88:91:1c:f9:ff:71:af:73:b2:6c:d2:c8:1f:39:b6:81:dd:
00:c4:90:ff:17:58:09:ac:d6:97:7c:63:5f:19:1f:5e:2e:57:
12:a5:44:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:22:05 2025 by rpki-client