Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/1b8d92-e157-4141-82c9-87e1f3866362/1/00_-5-di-aBv4vR-eh5S2eun-v0.mft
File: 00_-5-di-aBv4vR-eh5S2eun-v0.mft (raw, json)
Hash identifier: 3gDmoOptUzdXf5zSrbPJJSinLlhEsH7M6xxlhKwheSw=
Subject key identifier: 4A:12:36:B2:DE:40:89:E9:86:0E:6E:F7:0C:BA:EF:3C:0D:54:B9:1D
Authority key identifier: D3:4F:FE:E7:E7:62:F9:A0:6F:E2:F4:7E:7A:1E:52:D9:EB:A7:FA:FD
Certificate issuer: /CN=d34ffee7e762f9a06fe2f47e7a1e52d9eba7fafd
Certificate serial: 019A72CAB16FC30543DB50A5A00A5E189798
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00_-5-di-aBv4vR-eh5S2eun-v0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/1b8d92-e157-4141-82c9-87e1f3866362/1/00_-5-di-aBv4vR-eh5S2eun-v0.mft
Manifest number: 116C
Signing time: Tue 11 Nov 2025 12:01:17 +0000
Manifest this update: Tue 11 Nov 2025 12:01:17 +0000
Manifest next update: Wed 12 Nov 2025 12:01:17 +0000
Files and hashes: 1: 00_-5-di-aBv4vR-eh5S2eun-v0.crl (hash: dBSr7ZvyHcIkeXKKJSH0BrjTaIEOVg0pI+OOIwXMkag=)
2: RTZF1pckQ5UHtLDFfMIz6CKlCQM.roa (hash: OSpIkZE/LwbO5i/Rwo6y7sjYoRsMMhhcextuc6NzOpA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/1b8d92-e157-4141-82c9-87e1f3866362/1/00_-5-di-aBv4vR-eh5S2eun-v0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/1b8d92-e157-4141-82c9-87e1f3866362/1/00_-5-di-aBv4vR-eh5S2eun-v0.mft
rsync://rpki.ripe.net/repository/DEFAULT/00_-5-di-aBv4vR-eh5S2eun-v0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:b1:6f:c3:05:43:db:50:a5:a0:0a:5e:18:97:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d34ffee7e762f9a06fe2f47e7a1e52d9eba7fafd
Validity
Not Before: Nov 11 12:01:17 2025 GMT
Not After : Nov 12 12:01:17 2025 GMT
Subject: CN=4a1236b2de4089e9860e6ef70cbaef3c0d54b91d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:23:33:94:92:97:be:15:73:5d:88:a3:f9:06:
32:78:f3:6e:1c:01:56:12:3a:be:74:84:b9:1c:38:
2d:dc:96:74:6b:2d:0b:ae:1f:04:65:dd:b9:9a:90:
65:4e:5a:f4:17:c8:52:0a:73:45:58:36:d1:a6:35:
16:73:d7:1f:d1:94:3f:30:4b:a6:66:9a:e3:a7:8b:
b5:80:fd:63:55:a1:3c:f7:37:1d:9a:b8:0a:03:0d:
71:67:49:30:ce:d2:d9:f0:cd:a3:56:67:7f:fe:1a:
e6:50:e6:ea:e0:67:2d:7b:7e:d5:f2:32:f4:28:49:
0f:2d:80:94:b0:91:8a:3e:ed:f3:6d:66:7c:86:b3:
4e:23:2b:2d:28:4b:8b:21:8c:5a:f5:a3:1a:82:3f:
dd:02:c1:d6:63:76:68:8a:9c:43:c4:30:d0:96:f6:
62:0d:34:0d:0c:8c:34:da:0a:f9:88:0e:91:2e:fe:
d2:4b:79:5c:f1:e9:81:11:04:e8:63:b7:98:75:5b:
93:85:e1:09:ae:44:bb:1b:e3:35:6a:84:ae:27:3c:
b3:9c:d4:3a:4e:0f:13:f0:e1:b1:a6:c0:fc:e9:bf:
57:65:33:66:05:d7:c6:aa:24:fc:34:5f:ab:3c:e5:
be:84:6c:00:5a:9e:87:c7:0f:43:3e:3c:5e:3d:65:
36:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:12:36:B2:DE:40:89:E9:86:0E:6E:F7:0C:BA:EF:3C:0D:54:B9:1D
X509v3 Authority Key Identifier:
keyid:D3:4F:FE:E7:E7:62:F9:A0:6F:E2:F4:7E:7A:1E:52:D9:EB:A7:FA:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00_-5-di-aBv4vR-eh5S2eun-v0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1b8d92-e157-4141-82c9-87e1f3866362/1/00_-5-di-aBv4vR-eh5S2eun-v0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1b8d92-e157-4141-82c9-87e1f3866362/1/00_-5-di-aBv4vR-eh5S2eun-v0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:08:e8:3d:50:62:a7:c8:1f:ff:d1:b2:2e:6e:48:c0:67:20:
bb:af:94:d1:c0:43:70:37:ec:0f:c3:51:68:67:f6:3d:5d:c8:
20:b5:2a:a9:62:13:e8:25:a0:a5:bc:0e:3b:6b:17:df:13:1e:
11:86:7d:f0:c8:ad:e5:11:15:14:fa:7d:c8:11:dc:0c:0b:23:
32:e6:bf:13:cf:fb:e3:b7:27:c5:ff:81:8f:a5:b2:de:47:a0:
0b:78:2c:24:54:22:aa:04:e1:62:cb:02:91:56:33:88:fb:87:
ed:9c:56:a3:c7:5e:dd:d2:a0:ab:56:8e:93:32:c1:93:b2:e9:
0f:38:41:97:17:21:a6:c1:08:db:42:9d:ef:94:91:89:88:5b:
2e:4b:7b:a3:c5:91:0a:6d:49:5d:b3:a2:e7:50:e4:3c:c4:19:
dc:42:65:05:70:b5:48:bc:3f:4f:41:48:84:34:42:1b:a6:e3:
f8:1c:5e:6f:04:4c:58:5f:cb:79:fa:ed:10:ca:30:5b:2e:dc:
4e:f4:31:d6:6c:e2:90:a5:b5:7e:a9:96:cd:b5:ab:fa:6c:de:
81:f8:de:cd:f0:6f:62:a4:75:b8:5b:ae:8b:e6:46:a2:bf:d5:
8f:82:7c:1f:13:65:04:2b:e1:50:6c:8e:84:78:56:26:48:a2:
c8:bd:1b:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:00:53 2025 by rpki-client