Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/ddaf47-4e6d-4994-877b-2a89df1af16a/1/0hNMcoigwXozuLX-jFgGa0RC8YM.mft
File: 0hNMcoigwXozuLX-jFgGa0RC8YM.mft (raw, json)
Hash identifier: EJmqjTSetfZJrtY0a23HrD4u0vr735OJzqa3QGelNJE=
Subject key identifier: 08:24:DB:AA:8B:2A:D4:67:5D:F3:D6:09:F4:70:59:92:CE:85:2E:FE
Authority key identifier: D2:13:4C:72:88:A0:C1:7A:33:B8:B5:FE:8C:58:06:6B:44:42:F1:83
Certificate issuer: /CN=d2134c7288a0c17a33b8b5fe8c58066b4442f183
Certificate serial: 019A72258BB1B96F643DBBB10B343BD16203
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0hNMcoigwXozuLX-jFgGa0RC8YM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/ddaf47-4e6d-4994-877b-2a89df1af16a/1/0hNMcoigwXozuLX-jFgGa0RC8YM.mft
Manifest number: 0550
Signing time: Tue 11 Nov 2025 09:00:54 +0000
Manifest this update: Tue 11 Nov 2025 09:00:54 +0000
Manifest next update: Wed 12 Nov 2025 09:00:54 +0000
Files and hashes: 1: 0hNMcoigwXozuLX-jFgGa0RC8YM.crl (hash: /8SthQgwJat/fdBHEDbP5pWZsY3A0OKXP6wBtxhPB6k=)
2: IjuOSUk_7icZW2FOsDmStZ5tc0Y.roa (hash: /4IVw0ESBk+fPfscovcApWNjH6K3fkBcjRs0stf1FDw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/ddaf47-4e6d-4994-877b-2a89df1af16a/1/0hNMcoigwXozuLX-jFgGa0RC8YM.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/ddaf47-4e6d-4994-877b-2a89df1af16a/1/0hNMcoigwXozuLX-jFgGa0RC8YM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0hNMcoigwXozuLX-jFgGa0RC8YM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:8b:b1:b9:6f:64:3d:bb:b1:0b:34:3b:d1:62:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2134c7288a0c17a33b8b5fe8c58066b4442f183
Validity
Not Before: Nov 11 09:00:54 2025 GMT
Not After : Nov 12 09:00:54 2025 GMT
Subject: CN=0824dbaa8b2ad4675df3d609f4705992ce852efe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:32:8e:c8:ec:6c:da:00:59:e6:98:97:a9:e5:
9d:c0:5f:b5:35:35:40:ba:e0:23:d3:67:e4:83:bf:
79:8a:6a:76:c9:d1:1b:f2:54:30:31:c0:1e:7b:32:
3e:41:da:c7:7f:b8:ea:b4:6a:95:79:58:89:aa:60:
8d:65:21:f6:8c:18:f6:a9:a3:5c:3e:7b:57:68:5b:
82:89:83:69:f5:1f:9b:7f:84:98:80:08:13:4a:26:
7a:2b:f6:27:11:d5:bc:3d:20:02:70:02:57:a2:ca:
45:76:f3:b0:45:dc:e7:66:54:26:e0:3f:b3:97:f5:
35:bd:36:b8:65:8a:92:3c:e6:30:cb:7c:fb:52:62:
d3:7c:4c:9b:a1:4b:fe:fc:af:cc:fc:e2:46:60:68:
c8:31:27:b1:b8:3a:a2:59:88:1e:42:fd:13:f4:8b:
5a:3b:8c:cc:ab:31:0f:e6:ba:e0:a8:b8:e2:7e:7a:
22:38:15:3b:a5:8b:8f:bc:af:4e:99:5d:d0:d0:59:
fb:4a:30:02:b7:a0:8d:8d:91:40:73:eb:d5:4a:f1:
fa:79:5a:94:d0:ce:80:7a:77:2f:76:82:f6:d8:74:
3d:f8:83:6d:b5:3b:fa:56:b6:19:4b:80:2c:45:aa:
df:36:be:36:d1:ee:fb:43:ad:03:07:a6:08:01:fc:
05:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:24:DB:AA:8B:2A:D4:67:5D:F3:D6:09:F4:70:59:92:CE:85:2E:FE
X509v3 Authority Key Identifier:
keyid:D2:13:4C:72:88:A0:C1:7A:33:B8:B5:FE:8C:58:06:6B:44:42:F1:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0hNMcoigwXozuLX-jFgGa0RC8YM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ddaf47-4e6d-4994-877b-2a89df1af16a/1/0hNMcoigwXozuLX-jFgGa0RC8YM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ddaf47-4e6d-4994-877b-2a89df1af16a/1/0hNMcoigwXozuLX-jFgGa0RC8YM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:d0:1f:41:a3:6e:52:81:e1:37:2a:75:d4:4e:1a:70:e0:7b:
0d:c9:da:70:e3:12:8d:f9:50:cf:71:26:04:20:d8:dc:01:9f:
ac:8a:e6:04:fe:b0:2f:07:54:5e:90:98:d3:76:9b:ea:7a:f1:
03:46:7c:f3:64:9f:42:82:2e:a7:73:43:fc:f2:4e:0d:7e:79:
8f:a8:ed:06:ae:41:d8:84:fd:b1:d5:08:f0:02:bf:3e:9d:3c:
93:e4:68:ee:c8:59:b5:9a:48:eb:22:a3:4b:6d:b7:eb:77:1d:
ea:30:8e:aa:e5:36:d3:c5:65:46:08:81:22:31:45:7c:84:c6:
61:41:c0:85:59:f7:94:e9:ab:a3:b1:81:7d:5a:e0:67:5c:5a:
df:a6:54:ad:e4:23:6c:34:fe:e9:27:9b:74:d5:57:40:a8:f1:
52:b4:cb:1a:db:d1:69:ac:22:e2:16:8c:89:1d:63:70:4e:cc:
19:e1:0f:fb:f5:31:61:cf:35:47:f9:dc:a6:a8:eb:22:d5:6a:
c4:90:3b:37:d9:b4:14:38:cd:98:be:ae:1e:9d:c5:f8:cc:b7:
a6:68:d0:2a:b0:12:33:b6:97:c4:46:30:1c:b3:15:cb:6c:24:
73:aa:da:5f:8a:2c:39:97:81:1a:5f:e9:db:d5:1f:d9:b9:82:
c3:53:c5:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:20:19 2025 by rpki-client