Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/549477-4a82-42bc-839e-4f9840defa1f/1/0FqFxFv1PD2Ip2aVqv671Kp3u8E.mft
File: 0FqFxFv1PD2Ip2aVqv671Kp3u8E.mft (raw, json)
Hash identifier: npd0SPQo6FxF6AQ2j+/gnqOYrgnljwHR1HRTMngdl2o=
Subject key identifier: 0B:40:AC:12:34:2B:35:F5:20:DA:85:CB:3B:54:3F:68:AB:16:7E:20
Authority key identifier: D0:5A:85:C4:5B:F5:3C:3D:88:A7:66:95:AA:FE:BB:D4:AA:77:BB:C1
Certificate issuer: /CN=d05a85c45bf53c3d88a76695aafebbd4aa77bbc1
Certificate serial: 019A714A0EBCA4B5DB74486E45C6D8710C1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0FqFxFv1PD2Ip2aVqv671Kp3u8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/549477-4a82-42bc-839e-4f9840defa1f/1/0FqFxFv1PD2Ip2aVqv671Kp3u8E.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 05:01:10 +0000
Manifest this update: Tue 11 Nov 2025 05:01:10 +0000
Manifest next update: Wed 12 Nov 2025 05:01:10 +0000
Files and hashes: 1: 0FqFxFv1PD2Ip2aVqv671Kp3u8E.crl (hash: Pr/Ae5Eo6mWn7g/irgw1tST66odeup4A2rGwu1d7hQQ=)
2: 2sMuB3L4wKNk6KQ1vUkgecapqPs.roa (hash: a+lo4xla0hStaCSeWZ2tmrm8LUp0PkG7cZXb4aMXUeo=)
3: CANBUB1YKbCmA7ScoDWaXGtX2uc.roa (hash: aie8Fma/xfSFGEQSDW4nRAqWZZILRzEAkJDRNa0r8qI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/549477-4a82-42bc-839e-4f9840defa1f/1/0FqFxFv1PD2Ip2aVqv671Kp3u8E.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/549477-4a82-42bc-839e-4f9840defa1f/1/0FqFxFv1PD2Ip2aVqv671Kp3u8E.mft
rsync://rpki.ripe.net/repository/DEFAULT/0FqFxFv1PD2Ip2aVqv671Kp3u8E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:4a:0e:bc:a4:b5:db:74:48:6e:45:c6:d8:71:0c:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d05a85c45bf53c3d88a76695aafebbd4aa77bbc1
Validity
Not Before: Nov 11 05:01:10 2025 GMT
Not After : Nov 12 05:01:10 2025 GMT
Subject: CN=0b40ac12342b35f520da85cb3b543f68ab167e20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:84:79:ef:03:d9:a6:ff:c2:92:ff:32:00:1f:
bc:73:a6:c3:99:3d:39:6d:14:7b:09:ae:9e:d8:d4:
32:f4:87:27:3c:22:f1:7c:ec:c6:3e:38:f9:2a:0f:
6d:ec:da:ae:05:cc:d2:9a:7a:1b:ae:37:63:e7:67:
e7:05:59:0f:f8:9c:a8:2b:d1:d1:e4:5d:3b:76:5c:
fe:64:36:4b:f4:e3:23:c6:23:11:eb:cb:33:c9:35:
9c:a5:5e:e7:e4:8f:3e:d6:38:e7:c3:72:35:a3:2b:
79:9c:b2:51:45:a8:8f:60:2b:16:d6:8f:ee:b9:9f:
cd:14:43:a6:fb:84:94:3e:27:7b:81:36:ad:ed:22:
94:09:51:f6:5f:be:26:70:81:b6:21:8b:f8:3d:28:
f2:7f:c2:83:ea:51:2a:cd:60:6c:f2:de:97:e9:3e:
c3:96:47:97:f1:d3:d4:23:4d:8c:8d:8d:e5:dd:e8:
56:94:c0:20:59:a5:4d:ac:28:1b:d7:4e:23:88:86:
4f:42:51:68:3f:30:9f:90:47:1e:e6:c0:cc:a9:7c:
70:0f:9b:0d:48:c4:da:39:f4:ee:ea:0d:ba:eb:c5:
fc:87:92:70:da:9a:07:5e:ce:82:00:92:df:0e:98:
f4:fd:21:ec:b7:49:6a:7a:19:e4:b8:59:8e:08:3c:
a5:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:40:AC:12:34:2B:35:F5:20:DA:85:CB:3B:54:3F:68:AB:16:7E:20
X509v3 Authority Key Identifier:
keyid:D0:5A:85:C4:5B:F5:3C:3D:88:A7:66:95:AA:FE:BB:D4:AA:77:BB:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0FqFxFv1PD2Ip2aVqv671Kp3u8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/549477-4a82-42bc-839e-4f9840defa1f/1/0FqFxFv1PD2Ip2aVqv671Kp3u8E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/549477-4a82-42bc-839e-4f9840defa1f/1/0FqFxFv1PD2Ip2aVqv671Kp3u8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:c6:70:66:8e:e8:54:da:10:9f:25:10:61:c6:26:3f:ef:8e:
5f:fc:f1:3f:c9:a1:00:37:fd:23:4e:53:95:f1:8c:86:0f:9f:
78:be:80:8a:1e:ef:78:dd:64:71:0f:9f:1b:23:1b:03:6e:e9:
df:12:12:74:ff:a1:c1:99:c5:87:21:1c:dc:4c:56:8b:c2:fd:
18:d6:0d:75:e8:0a:5a:06:6c:49:16:92:59:9b:1b:32:a3:8d:
a8:a4:c0:2e:2c:83:be:f2:e5:d7:88:4c:3e:99:30:b6:62:9e:
33:6d:21:15:1d:5a:8f:c5:39:de:07:ca:3b:d9:d5:5a:cc:44:
10:9b:57:9e:c4:55:a9:3e:01:f9:d4:66:3f:ee:05:d2:04:ce:
85:d6:0a:64:f8:79:73:03:2e:c5:75:12:6f:b3:10:71:fe:e2:
9a:a2:36:82:63:38:8b:61:46:32:92:5f:e9:d6:8e:5c:4c:10:
c3:c0:b4:e3:3c:21:bd:35:1e:dc:93:b8:3f:02:74:df:b5:04:
fc:b7:57:7b:d7:c5:38:f3:d0:15:6a:75:31:54:de:72:b6:7d:
df:49:a6:3a:f3:1d:34:39:f3:90:6b:68:15:a8:94:ad:9e:ab:
bd:9c:ee:7b:95:fb:20:c8:d4:8a:17:b3:08:17:a6:f2:14:b7:
bf:96:a3:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:55:06 2025 by rpki-client