Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/761e13-5579-4079-b81d-90ca0beb439e/1/0GKiaiPbV_PQQJDGTNxi1U1AoyQ.mft
File: 0GKiaiPbV_PQQJDGTNxi1U1AoyQ.mft (raw, json)
Hash identifier: oc3HCEmxi7fIZJ+XfkF+0Xp+yhHf5M7xPPsMUFKsr+Q=
Subject key identifier: 86:F4:48:85:B2:BC:50:0D:BF:2E:E6:EB:63:71:B4:07:2F:1B:29:F4
Authority key identifier: D0:62:A2:6A:23:DB:57:F3:D0:40:90:C6:4C:DC:62:D5:4D:40:A3:24
Certificate issuer: /CN=d062a26a23db57f3d04090c64cdc62d54d40a324
Certificate serial: 019A70A4ED876CEDC829A219BB2FBF25E3FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0GKiaiPbV_PQQJDGTNxi1U1AoyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/761e13-5579-4079-b81d-90ca0beb439e/1/0GKiaiPbV_PQQJDGTNxi1U1AoyQ.mft
Manifest number: A5
Signing time: Tue 11 Nov 2025 02:00:48 +0000
Manifest this update: Tue 11 Nov 2025 02:00:48 +0000
Manifest next update: Wed 12 Nov 2025 02:00:48 +0000
Files and hashes: 1: 0GKiaiPbV_PQQJDGTNxi1U1AoyQ.crl (hash: i+2LTVsSfxDTXwaSU2bWcHq8x01oEI2gSHI+0Ew317w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/761e13-5579-4079-b81d-90ca0beb439e/1/0GKiaiPbV_PQQJDGTNxi1U1AoyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/761e13-5579-4079-b81d-90ca0beb439e/1/0GKiaiPbV_PQQJDGTNxi1U1AoyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/0GKiaiPbV_PQQJDGTNxi1U1AoyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a4:ed:87:6c:ed:c8:29:a2:19:bb:2f:bf:25:e3:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d062a26a23db57f3d04090c64cdc62d54d40a324
Validity
Not Before: Nov 11 02:00:48 2025 GMT
Not After : Nov 12 02:00:48 2025 GMT
Subject: CN=86f44885b2bc500dbf2ee6eb6371b4072f1b29f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:13:31:ee:65:d2:8f:db:8f:18:d0:a7:1c:5b:
91:33:6d:de:d7:32:a3:f2:cb:ab:1b:bf:5c:74:25:
cd:50:60:fb:7f:04:5c:84:58:91:3b:44:f9:96:63:
0f:3a:4b:e3:eb:91:8a:81:e5:2e:6f:70:a8:c9:e5:
8b:d0:5e:94:75:52:43:39:60:9c:23:d8:6f:b9:36:
0f:05:16:db:05:0b:16:15:7d:ba:44:88:ce:3e:37:
79:bb:9c:8a:bc:f5:03:a7:d1:68:ba:9c:02:5e:58:
5f:1d:a8:86:f0:41:7c:61:16:a2:af:aa:fb:ce:18:
d5:76:9a:3f:26:82:4d:44:da:39:e9:a4:fc:cf:92:
e0:eb:d4:f4:4e:fe:21:31:24:e2:c2:f1:fd:e5:7c:
16:d9:19:af:a0:b0:dd:8e:0b:c8:ff:a5:b6:7b:7c:
a2:93:39:70:db:1e:8a:16:69:56:99:30:24:9c:2b:
8b:d0:03:b2:9d:67:8b:12:b2:18:8f:23:f9:5c:49:
c3:37:e7:9b:40:e3:46:45:97:ee:a0:88:ea:53:39:
de:d5:98:9f:dd:f8:16:84:ba:2c:96:88:12:5b:fa:
11:99:67:62:b3:42:4b:78:09:52:96:9b:0e:a8:44:
5e:bb:de:ab:40:ad:f6:47:09:e7:9a:e6:ff:da:ea:
6f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:F4:48:85:B2:BC:50:0D:BF:2E:E6:EB:63:71:B4:07:2F:1B:29:F4
X509v3 Authority Key Identifier:
keyid:D0:62:A2:6A:23:DB:57:F3:D0:40:90:C6:4C:DC:62:D5:4D:40:A3:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0GKiaiPbV_PQQJDGTNxi1U1AoyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/761e13-5579-4079-b81d-90ca0beb439e/1/0GKiaiPbV_PQQJDGTNxi1U1AoyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/761e13-5579-4079-b81d-90ca0beb439e/1/0GKiaiPbV_PQQJDGTNxi1U1AoyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:1e:9e:02:93:53:69:e6:b7:d9:c3:66:91:f3:ec:93:42:23:
8e:bf:51:cb:00:71:74:6a:cf:bc:4c:00:48:96:b8:c1:ee:6a:
52:63:98:1b:2b:d4:ca:8b:44:a6:5e:fc:c3:f7:24:df:eb:6c:
fb:1a:2b:18:98:86:b1:98:9a:b3:91:64:fc:aa:2a:3b:a3:06:
6a:68:f5:48:29:64:ae:44:0e:79:ee:c1:97:20:d9:81:78:80:
07:aa:a9:3b:0e:3e:4c:a1:21:b0:ef:6d:d0:cc:53:85:39:aa:
b5:d2:0e:47:73:cd:52:c2:23:55:92:9f:b8:ea:d4:c7:80:04:
62:63:ff:aa:23:19:d8:b3:c1:e7:c1:5e:91:ea:d1:58:9c:26:
b2:80:4d:b6:10:73:86:1c:1d:09:94:1c:73:f7:87:3e:43:43:
d3:5d:bb:bc:52:7f:06:2c:6d:b2:10:b1:41:38:e7:fc:7d:1e:
fb:72:bd:98:82:0b:78:89:91:07:56:fc:f0:68:47:85:c1:cb:
45:c5:5c:e6:3b:f1:eb:60:b9:94:de:97:86:6c:d9:8c:17:23:
9d:bc:7e:7a:8c:df:1f:49:1f:e4:67:3c:4f:32:ce:55:05:24:
b2:e5:6b:f2:be:c6:b9:62:cd:1b:71:d5:4a:45:4c:d9:f6:1c:
52:e2:16:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:26:22 2025 by rpki-client