Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/62b775-7841-4a61-b78c-b7ba28165a77/1/0OhNbWqe7eaC7xtcePGz8KMxORE.mft
File: 0OhNbWqe7eaC7xtcePGz8KMxORE.mft (raw, json)
Hash identifier: whLLmCp5a4KbQOVL8L7Ipu0OzYnrQrvboHeEISbHM3k=
Subject key identifier: DD:B7:1B:2D:E3:FA:08:42:6E:BF:89:46:F6:C6:89:1B:F5:90:A7:68
Authority key identifier: D0:E8:4D:6D:6A:9E:ED:E6:82:EF:1B:5C:78:F1:B3:F0:A3:31:39:11
Certificate issuer: /CN=d0e84d6d6a9eede682ef1b5c78f1b3f0a3313911
Certificate serial: 019A725C611FD746C47A00997854688C33FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0OhNbWqe7eaC7xtcePGz8KMxORE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/62b775-7841-4a61-b78c-b7ba28165a77/1/0OhNbWqe7eaC7xtcePGz8KMxORE.mft
Manifest number: 08F3
Signing time: Tue 11 Nov 2025 10:00:47 +0000
Manifest this update: Tue 11 Nov 2025 10:00:47 +0000
Manifest next update: Wed 12 Nov 2025 10:00:47 +0000
Files and hashes: 1: 0OhNbWqe7eaC7xtcePGz8KMxORE.crl (hash: gRrLC8Pe6I7NCsHrlDqQ0y8/FdjwRFPyeqJ8bQtQfPQ=)
2: eEAcVM4h3e_6uLTwXzH2smck964.roa (hash: 2dyqSC4Nr999y8UdL9+8BtI2W3QPoxUvEaAKvO9sMtg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/62b775-7841-4a61-b78c-b7ba28165a77/1/0OhNbWqe7eaC7xtcePGz8KMxORE.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/62b775-7841-4a61-b78c-b7ba28165a77/1/0OhNbWqe7eaC7xtcePGz8KMxORE.mft
rsync://rpki.ripe.net/repository/DEFAULT/0OhNbWqe7eaC7xtcePGz8KMxORE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:61:1f:d7:46:c4:7a:00:99:78:54:68:8c:33:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0e84d6d6a9eede682ef1b5c78f1b3f0a3313911
Validity
Not Before: Nov 11 10:00:47 2025 GMT
Not After : Nov 12 10:00:47 2025 GMT
Subject: CN=ddb71b2de3fa08426ebf8946f6c6891bf590a768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:b4:ea:07:a1:11:84:03:c8:0b:a5:94:e6:20:
46:8d:55:00:c0:e2:51:6a:34:18:ec:e5:82:77:82:
4d:70:22:a2:b5:ac:6f:7d:f7:6d:c2:95:ed:ba:1d:
94:03:13:b3:68:05:64:b3:cb:56:d0:bf:9c:5f:3c:
0d:46:5d:5c:21:99:1f:9c:b8:92:eb:7d:f2:c4:50:
0c:58:87:c3:eb:b5:30:07:bd:d2:85:1f:ff:ef:31:
ac:de:7a:38:19:8d:18:29:a9:fe:eb:b4:52:90:d9:
48:7b:c5:d1:80:9f:2c:1d:cb:fd:1f:fe:d7:bc:df:
85:88:04:a8:d3:9b:d6:f9:65:bf:03:cb:0c:76:4a:
1c:36:9a:ec:be:8b:0b:8d:4d:33:a9:8d:ab:dd:9f:
ae:eb:d5:19:23:3e:8c:50:b9:a6:b4:1f:e2:14:ad:
bf:bb:63:7d:e4:44:dd:91:f4:0e:b7:5b:7a:ca:8d:
e9:39:8b:81:ec:38:fe:28:80:86:54:c4:0e:20:64:
a4:aa:4d:72:6e:e9:8c:28:a4:1f:2d:f5:6c:2a:ab:
7f:7a:8f:bc:45:e2:cc:c1:af:e5:60:d2:c6:2d:7c:
3e:f2:54:cf:4f:64:18:3f:37:e6:bb:c2:d8:82:4e:
17:9d:f7:eb:6a:cc:ee:a3:24:78:42:64:e3:05:8d:
87:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:B7:1B:2D:E3:FA:08:42:6E:BF:89:46:F6:C6:89:1B:F5:90:A7:68
X509v3 Authority Key Identifier:
keyid:D0:E8:4D:6D:6A:9E:ED:E6:82:EF:1B:5C:78:F1:B3:F0:A3:31:39:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0OhNbWqe7eaC7xtcePGz8KMxORE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/62b775-7841-4a61-b78c-b7ba28165a77/1/0OhNbWqe7eaC7xtcePGz8KMxORE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/62b775-7841-4a61-b78c-b7ba28165a77/1/0OhNbWqe7eaC7xtcePGz8KMxORE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:ad:85:94:64:68:b3:3a:e6:b4:19:16:8c:fb:c6:6d:7e:9c:
bc:56:b2:93:19:97:cb:00:70:cf:9a:70:49:08:45:3c:40:f6:
45:8f:31:a6:fb:a9:70:03:21:95:4f:d0:66:8e:ca:cb:34:3d:
06:b8:38:01:32:85:30:f7:26:0f:94:b6:52:63:dd:40:ad:e0:
3e:6f:8f:6e:95:22:f8:a9:35:1c:da:b8:60:51:6d:9f:e1:83:
3e:b0:2b:06:68:93:da:20:ff:71:e2:d7:a8:2a:4c:9c:89:ef:
54:bd:f3:e0:be:3c:1b:63:6a:12:57:48:fa:15:9f:d3:09:1c:
94:d8:cf:14:4b:fd:26:05:1a:8a:ee:c2:f0:10:7c:2f:cd:14:
24:98:b9:75:7f:98:c9:3e:8f:63:c5:40:47:4f:9f:96:53:4d:
75:34:22:e4:a0:b8:74:ba:b5:a1:eb:4f:e2:d6:16:1c:42:14:
75:4c:85:22:8f:cf:7f:58:46:c2:b4:ce:b1:27:c7:9f:35:25:
8e:86:ef:28:38:58:3d:c7:ce:b3:f7:e6:f6:6f:62:4b:f7:9e:
ea:f6:34:88:18:dc:3e:ac:c3:6e:c4:28:c9:58:a7:c0:55:d2:
a6:43:f6:de:08:b1:c8:fe:91:91:c9:01:77:20:f5:73:d0:e1:
6c:c7:41:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:22:38 2025 by rpki-client