Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/8a2ced-87ae-41ea-b3b0-dcebf6197e0e/1/0J2pmnO6cgJBj3NxiTLcjXwVPjI.mft
File: 0J2pmnO6cgJBj3NxiTLcjXwVPjI.mft (raw, json)
Hash identifier: iotM93wtLNuSqBoU4hfKrcn/MkXB4vzoRewl/k+u7R4=
Subject key identifier: CD:3A:F3:9E:AB:D7:16:55:21:72:A3:E4:45:D1:2F:B2:66:56:56:66
Authority key identifier: D0:9D:A9:9A:73:BA:72:02:41:8F:73:71:89:32:DC:8D:7C:15:3E:32
Certificate issuer: /CN=d09da99a73ba7202418f73718932dc8d7c153e32
Certificate serial: 019A7293474088C0338B21841A2BB5AF3B20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0J2pmnO6cgJBj3NxiTLcjXwVPjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/8a2ced-87ae-41ea-b3b0-dcebf6197e0e/1/0J2pmnO6cgJBj3NxiTLcjXwVPjI.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 11:00:45 +0000
Manifest this update: Tue 11 Nov 2025 11:00:45 +0000
Manifest next update: Wed 12 Nov 2025 11:00:45 +0000
Files and hashes: 1: 0J2pmnO6cgJBj3NxiTLcjXwVPjI.crl (hash: uOybuEojIOzDcp5MtzMUdwsTGN3ojg0F5x9pwiS1gUM=)
2: nJUcoCNc07cyfYEUlMwbz1g_DaE.roa (hash: Ib/IQqjAiE9xz41/z9I1UMYPE1ywAN0ig2dufXZbgBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/8a2ced-87ae-41ea-b3b0-dcebf6197e0e/1/0J2pmnO6cgJBj3NxiTLcjXwVPjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/8a2ced-87ae-41ea-b3b0-dcebf6197e0e/1/0J2pmnO6cgJBj3NxiTLcjXwVPjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0J2pmnO6cgJBj3NxiTLcjXwVPjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:47:40:88:c0:33:8b:21:84:1a:2b:b5:af:3b:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d09da99a73ba7202418f73718932dc8d7c153e32
Validity
Not Before: Nov 11 11:00:45 2025 GMT
Not After : Nov 12 11:00:45 2025 GMT
Subject: CN=cd3af39eabd716552172a3e445d12fb266565666
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:49:d4:a0:36:0c:2b:a7:55:89:d9:34:da:0c:
0f:8f:69:91:c4:2a:df:41:25:75:7e:98:81:8e:e2:
83:45:ab:6b:b0:7d:6e:22:a1:4f:cb:f1:86:3d:f1:
cc:20:c6:d3:02:78:f5:d1:9e:e9:49:41:04:c0:06:
c7:7c:fc:da:75:ac:75:df:ee:d8:4e:68:59:d0:be:
f8:d4:57:b0:27:72:26:60:3a:9a:15:a5:ab:50:25:
53:d8:62:28:72:9d:63:5f:ef:4b:71:80:eb:fd:64:
b5:91:0c:bf:39:c1:b3:4d:e5:35:cc:79:a7:4d:fc:
ed:4a:73:75:a8:1b:a8:8c:ee:41:eb:97:dc:44:88:
8d:16:ad:1b:00:09:c3:4c:f5:03:c6:d2:18:49:ff:
43:3e:8b:d9:db:e6:cd:9a:ef:99:e8:4e:15:f8:e7:
9f:ef:c7:29:2d:ee:b9:b2:6c:03:3c:10:b7:19:c1:
8d:b3:50:55:05:0f:e4:ff:8a:a0:27:3c:b7:c2:9c:
87:0b:93:d0:a4:f0:c7:7c:ab:3e:2c:a9:12:82:8b:
b3:81:a6:72:67:b2:c1:42:36:76:e6:81:d1:02:9c:
20:ca:be:56:9c:ce:6d:43:e8:0f:c7:34:ce:09:15:
f8:3c:ac:90:d7:f9:aa:eb:66:01:55:40:3b:6e:5d:
c8:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:3A:F3:9E:AB:D7:16:55:21:72:A3:E4:45:D1:2F:B2:66:56:56:66
X509v3 Authority Key Identifier:
keyid:D0:9D:A9:9A:73:BA:72:02:41:8F:73:71:89:32:DC:8D:7C:15:3E:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0J2pmnO6cgJBj3NxiTLcjXwVPjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/8a2ced-87ae-41ea-b3b0-dcebf6197e0e/1/0J2pmnO6cgJBj3NxiTLcjXwVPjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/8a2ced-87ae-41ea-b3b0-dcebf6197e0e/1/0J2pmnO6cgJBj3NxiTLcjXwVPjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:7e:27:78:c9:c8:4e:c5:d6:0a:5a:4a:5d:3a:5b:cc:57:6e:
a5:94:a2:fd:07:13:01:a9:67:22:3d:db:d1:24:21:7f:1b:34:
3c:86:7c:6e:23:9d:66:24:c4:48:34:30:dc:4c:92:1d:d0:20:
ec:a4:f2:4d:3a:d5:5f:fd:c6:ca:7f:d3:f3:c8:17:4b:cb:2e:
9b:2d:df:1c:8e:3b:06:19:31:9c:4f:5c:e2:e8:76:69:84:08:
93:43:31:9e:d7:69:c0:82:86:be:5c:31:31:d4:f9:89:57:3c:
cd:1a:71:2b:e0:dd:e7:cc:1c:98:10:69:55:bf:19:a6:01:de:
4a:be:fe:9d:dd:d5:bd:2b:fc:30:85:6a:f8:82:25:ea:b9:f7:
4c:e5:ba:1b:72:39:77:e2:f0:08:b9:5e:89:25:5e:46:f3:4b:
7d:f7:9d:17:cf:bd:1e:62:c2:58:01:5d:1b:8e:e6:23:a7:40:
ef:ca:a5:f4:a8:16:ca:29:03:ee:49:39:20:e6:2b:85:e0:1b:
17:cf:22:f0:d7:41:37:15:99:20:97:e5:14:f5:87:14:fc:59:
75:73:02:9b:55:83:e1:b8:89:62:4e:0a:31:87:9a:1d:f9:90:
9c:87:2c:a4:2c:35:f4:3c:7d:f0:18:ec:b5:31:f6:6d:81:ec:
bd:b7:28:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:16:14 2025 by rpki-client