Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.mft
File: Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.mft (raw, json)
Hash identifier: O8ZdtNaO0kvEIw6lKMvO2UW2I6TPTzSjjZZLj782zo8=
Subject key identifier: 0F:42:CB:E7:D5:0F:8A:FB:EC:04:89:53:20:D2:C4:D9:B0:ED:E3:FE
Authority key identifier: 11:DD:0E:BF:F5:BA:38:A8:75:8B:79:4D:04:D6:29:05:19:4A:32:66
Certificate issuer: /CN=11dd0ebff5ba38a8758b794d04d62905194a3266
Certificate serial: 019A7293D5CDB3462A7F0058796DB29FBE36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.mft
Manifest number: 1233
Signing time: Tue 11 Nov 2025 11:01:22 +0000
Manifest this update: Tue 11 Nov 2025 11:01:22 +0000
Manifest next update: Wed 12 Nov 2025 11:01:22 +0000
Files and hashes: 1: Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.crl (hash: xk8c//3t2hRtl4qMBkqce4JB+0OMPwFbERe4uvcJBdU=)
2: HfwZH-0Lv6Ty3b-JyanUXRcRv4M.roa (hash: tXi7iyniS0PtgxKru69nf5MitATyW1mHStve5TknjLM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:d5:cd:b3:46:2a:7f:00:58:79:6d:b2:9f:be:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11dd0ebff5ba38a8758b794d04d62905194a3266
Validity
Not Before: Nov 11 11:01:22 2025 GMT
Not After : Nov 12 11:01:22 2025 GMT
Subject: CN=0f42cbe7d50f8afbec04895320d2c4d9b0ede3fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:04:d4:50:e5:fd:f0:6b:16:3d:bd:ac:6d:54:
de:ce:41:93:25:e1:d0:a3:f1:94:02:fb:21:64:bf:
eb:3a:90:76:78:bc:e8:ea:3c:bc:09:c0:ca:0e:71:
7c:a8:2a:b8:79:db:56:cc:f9:c5:ab:10:39:03:91:
8f:87:12:9d:36:3f:51:89:f4:ed:f3:23:90:a8:17:
2c:69:b8:a9:83:5e:70:eb:47:43:c6:a5:42:92:77:
77:65:9e:98:a8:60:24:e6:07:a0:95:8b:cb:43:10:
b6:2b:6a:96:b6:e7:5d:9a:53:cd:a4:e3:01:d0:89:
cb:31:49:65:55:8d:90:79:1e:e5:cb:6f:35:d1:04:
53:c7:59:27:91:0e:62:db:26:57:49:be:b6:04:1d:
0e:d1:9f:2d:36:1a:76:11:c6:c6:08:b7:66:2e:e4:
fa:37:6b:90:ea:d9:ee:c6:87:c0:09:7d:ee:02:63:
29:fa:15:86:a4:4f:a3:7c:4b:16:10:b9:a8:84:36:
34:53:66:a6:90:b1:09:42:29:6c:16:d4:34:47:ca:
1e:db:9a:5d:aa:31:10:e1:9f:13:f4:7e:12:3b:b3:
a7:36:e3:30:b6:2a:86:c4:6d:8f:a6:df:85:28:b7:
f3:f9:48:ca:12:2d:16:2f:87:d1:55:07:d8:13:aa:
ef:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:42:CB:E7:D5:0F:8A:FB:EC:04:89:53:20:D2:C4:D9:B0:ED:E3:FE
X509v3 Authority Key Identifier:
keyid:11:DD:0E:BF:F5:BA:38:A8:75:8B:79:4D:04:D6:29:05:19:4A:32:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:bb:97:cc:2c:ff:98:b8:9d:2f:4e:a2:4e:2e:c3:15:39:7b:
ce:fd:16:04:99:0b:f1:ff:dd:7a:8f:e9:20:07:8f:b6:c9:54:
d1:a7:ae:3b:03:52:2f:85:52:35:1f:63:f2:1b:76:20:ee:aa:
33:64:7a:12:3b:b1:92:ab:b9:30:fb:cf:82:a3:de:20:f5:83:
ab:48:2d:f5:78:8f:29:6c:42:67:4a:50:24:64:c3:59:36:be:
59:c4:e9:e5:36:4d:78:da:32:3d:32:c0:d7:22:db:80:ec:9b:
e1:6b:2f:c8:58:30:55:cf:71:95:38:c7:fd:ba:3f:6c:4a:60:
ef:49:89:d2:93:ba:46:14:da:a9:0a:8e:c8:fd:e6:0b:0a:e4:
a2:d1:c1:79:7d:86:5a:d2:49:a8:35:7c:4e:42:50:b0:5b:60:
94:30:33:23:7a:a0:4e:0b:69:41:0d:30:06:1a:00:90:2c:ec:
0c:2c:2e:85:a0:99:36:54:f8:24:54:8d:ee:98:35:07:ba:f2:
f2:51:41:67:75:af:4d:21:d2:0d:ef:78:99:37:c7:57:67:67:
47:b7:40:64:7a:e4:a3:c0:38:c3:77:b6:9d:9a:eb:63:8a:fa:
2c:1c:21:b8:63:8a:68:c4:b6:55:0c:8d:52:0a:e5:3c:2a:e6:
d4:7b:8b:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:35:09 2025 by rpki-client