Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/9cb34a-c372-482e-81ca-8f639c5a1a72/1/0Lf8iwWNH0mZAajC-G5irpUTZ5c.mft
File: 0Lf8iwWNH0mZAajC-G5irpUTZ5c.mft (raw, json)
Hash identifier: 8t3PPse3rQzJhhgk3kM/wg585SWJ8sch4nhje8SIixU=
Subject key identifier: 60:F4:FE:1A:A5:75:80:6E:D8:DE:14:15:A1:88:A2:1D:58:C9:30:96
Authority key identifier: D0:B7:FC:8B:05:8D:1F:49:99:01:A8:C2:F8:6E:62:AE:95:13:67:97
Certificate issuer: /CN=d0b7fc8b058d1f499901a8c2f86e62ae95136797
Certificate serial: 019A71B84FA7589D59ECC88312FDA28EF486
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Lf8iwWNH0mZAajC-G5irpUTZ5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/9cb34a-c372-482e-81ca-8f639c5a1a72/1/0Lf8iwWNH0mZAajC-G5irpUTZ5c.mft
Manifest number: 0D0C
Signing time: Tue 11 Nov 2025 07:01:35 +0000
Manifest this update: Tue 11 Nov 2025 07:01:35 +0000
Manifest next update: Wed 12 Nov 2025 07:01:35 +0000
Files and hashes: 1: 0Lf8iwWNH0mZAajC-G5irpUTZ5c.crl (hash: 2OJHMFu/4McV7TnOXCwo6fye7BOp42HAYta9vk6igAE=)
2: IakaUVIwolxABf_iFG6RX8yq8dc.roa (hash: 7jt2eahvNjy4JlonD7RGKwXoWtuGwCznkksLfkvVUZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/9cb34a-c372-482e-81ca-8f639c5a1a72/1/0Lf8iwWNH0mZAajC-G5irpUTZ5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/9cb34a-c372-482e-81ca-8f639c5a1a72/1/0Lf8iwWNH0mZAajC-G5irpUTZ5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Lf8iwWNH0mZAajC-G5irpUTZ5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:4f:a7:58:9d:59:ec:c8:83:12:fd:a2:8e:f4:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0b7fc8b058d1f499901a8c2f86e62ae95136797
Validity
Not Before: Nov 11 07:01:35 2025 GMT
Not After : Nov 12 07:01:35 2025 GMT
Subject: CN=60f4fe1aa575806ed8de1415a188a21d58c93096
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:76:19:2f:41:d0:34:9f:b8:dd:b4:da:db:af:
a9:5a:a7:3c:3a:c7:eb:52:4b:2f:23:76:5c:a2:f0:
83:e8:df:ca:62:18:b0:42:43:43:5c:5e:9a:ec:ee:
0c:0d:8a:c8:61:6f:50:8a:2a:08:97:c6:22:af:d2:
7f:cf:be:b7:3c:06:40:af:a4:63:a1:e1:0b:c3:ad:
66:3b:27:91:07:df:68:1e:31:74:0e:1c:fc:3b:42:
df:f7:f4:1e:3c:bf:58:98:a9:6d:32:79:66:20:9e:
8d:92:04:3b:6c:5a:b5:05:d7:66:7d:df:79:a0:47:
2d:00:d4:38:60:49:76:79:c2:4a:ef:73:4e:44:a3:
9f:db:76:6a:14:48:7d:50:54:14:11:3c:a3:f5:8a:
a1:21:09:88:f3:fb:13:18:8d:a3:ec:bf:4c:be:fc:
6f:74:34:81:35:34:52:30:b7:ee:7b:5b:6d:e5:60:
bb:54:70:ad:98:05:6c:9b:d0:b5:ea:8f:e5:c2:1b:
aa:b8:3c:3f:c3:09:b5:02:61:20:27:d7:60:0a:df:
9e:ab:d4:7e:0e:73:de:17:16:d9:05:ad:cd:1d:a0:
70:5d:ae:eb:60:66:38:2c:42:df:6e:e7:1c:62:73:
8c:0f:f5:50:34:f4:4e:d2:cc:cb:c1:e4:1f:cf:7b:
9c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:F4:FE:1A:A5:75:80:6E:D8:DE:14:15:A1:88:A2:1D:58:C9:30:96
X509v3 Authority Key Identifier:
keyid:D0:B7:FC:8B:05:8D:1F:49:99:01:A8:C2:F8:6E:62:AE:95:13:67:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Lf8iwWNH0mZAajC-G5irpUTZ5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9cb34a-c372-482e-81ca-8f639c5a1a72/1/0Lf8iwWNH0mZAajC-G5irpUTZ5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9cb34a-c372-482e-81ca-8f639c5a1a72/1/0Lf8iwWNH0mZAajC-G5irpUTZ5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:ec:12:36:eb:4c:2c:05:1c:5a:8a:1b:c7:1d:ed:c4:13:08:
d0:aa:49:37:19:11:08:34:d3:27:e5:a6:6b:0c:98:35:00:b3:
e3:f3:c8:f6:5b:56:ac:08:c5:b2:fb:b7:e9:07:ae:d1:72:d5:
9e:1c:37:39:5c:69:b1:78:69:f0:44:c2:82:90:b4:37:04:c2:
a8:ed:b0:10:5c:8a:0c:30:57:ed:2e:a0:19:50:10:bf:31:42:
18:34:8d:6a:28:b0:2a:12:4f:e8:5b:57:9f:e9:65:97:07:aa:
10:83:35:0a:6c:cf:e5:61:d2:79:1a:5e:5f:3e:c4:e8:69:3f:
41:f9:57:df:bf:95:ee:a1:95:5d:e8:04:49:36:f0:34:9c:9b:
c5:46:3e:56:1f:5c:02:e1:36:bf:a9:29:aa:39:b0:42:47:66:
a2:e9:c2:ac:c0:52:c9:6d:61:fe:8b:4c:5d:de:73:7f:8c:f1:
25:02:2a:16:a5:18:b8:8e:3d:92:67:c2:3f:9e:4a:41:cc:69:
3a:4f:24:02:e6:ae:a2:71:31:35:f5:37:7d:24:b4:e7:f5:e9:
64:43:1c:b7:27:42:68:a5:dd:71:3d:3b:3a:14:ed:c0:b7:7b:
ed:c1:55:f1:a1:d6:b3:c9:29:47:a2:dd:03:b8:68:f4:96:69:
eb:52:2e:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:42:56 2025 by rpki-client