Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.mft
File: 0H3_VH6svoHcNGVZhEbTsCfct20.mft (raw, json)
Hash identifier: ET5it6EAkayn4Qzs11oCNtsupTBZzCV+UOvDZc7S1MU=
Subject key identifier: F1:17:13:56:87:F7:38:9B:0C:FC:02:17:A1:C8:32:89:4B:30:10:5C
Authority key identifier: D0:7D:FF:54:7E:AC:BE:81:DC:34:65:59:84:46:D3:B0:27:DC:B7:6D
Certificate issuer: /CN=d07dff547eacbe81dc3465598446d3b027dcb76d
Certificate serial: 019A70A4FD1F685B8DA132F71D4CBF486A41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0H3_VH6svoHcNGVZhEbTsCfct20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 02:00:52 +0000
Manifest this update: Tue 11 Nov 2025 02:00:52 +0000
Manifest next update: Wed 12 Nov 2025 02:00:52 +0000
Files and hashes: 1: 0H3_VH6svoHcNGVZhEbTsCfct20.crl (hash: BtECDxcsK1rrzbtA+wDOQFU84umODMF8XilhceEZ1Qs=)
2: 7ZfxbTG5XE7d3U698g7DhphadTg.roa (hash: Pr0+WF0lvDtFnCz/0c70Eot8c7E9jRvKLuNSr3PuDSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.mft
rsync://rpki.ripe.net/repository/DEFAULT/0H3_VH6svoHcNGVZhEbTsCfct20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a4:fd:1f:68:5b:8d:a1:32:f7:1d:4c:bf:48:6a:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d07dff547eacbe81dc3465598446d3b027dcb76d
Validity
Not Before: Nov 11 02:00:52 2025 GMT
Not After : Nov 12 02:00:52 2025 GMT
Subject: CN=f117135687f7389b0cfc0217a1c832894b30105c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:61:a2:96:dd:c5:0d:b1:47:fd:2d:8c:73:6f:
23:d7:8a:a9:85:bd:6f:e2:b8:9d:dd:7b:9c:97:55:
d1:94:39:07:0e:fc:96:98:ee:ad:7f:2c:d5:ba:94:
5f:15:14:e3:11:11:fb:ab:78:73:43:ab:57:00:94:
d1:20:60:ec:79:a2:4d:71:0f:4f:6c:f0:57:f2:4e:
d8:08:c8:3d:1c:f2:a0:97:d5:32:67:df:66:78:3a:
07:63:b7:6a:32:c8:13:19:9e:bf:98:cd:b9:36:ff:
5a:08:77:60:b5:1c:4a:f1:be:1e:dd:a9:13:bb:8e:
43:18:03:a8:f1:58:d2:2d:70:72:af:f0:06:9f:fd:
56:5e:99:f7:b8:81:ea:c7:6d:0e:df:d6:fc:dd:17:
5e:6b:4d:f2:65:c1:97:a7:85:4e:82:02:4a:30:dc:
1c:d4:09:4c:cb:5f:e8:be:89:c4:63:ed:fe:0e:7f:
24:93:9f:79:8f:ee:36:e8:f8:9c:d4:05:e0:5c:9b:
9f:94:e9:10:57:cc:0e:ee:21:35:0c:ed:27:0f:f9:
18:a9:e4:1e:27:00:43:26:25:ed:a7:63:5f:e8:a7:
aa:a0:04:7d:94:b8:9c:8b:b2:24:14:54:9c:05:5b:
54:ba:d6:a1:69:bb:31:ce:3d:9b:1d:18:6b:39:09:
91:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:17:13:56:87:F7:38:9B:0C:FC:02:17:A1:C8:32:89:4B:30:10:5C
X509v3 Authority Key Identifier:
keyid:D0:7D:FF:54:7E:AC:BE:81:DC:34:65:59:84:46:D3:B0:27:DC:B7:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0H3_VH6svoHcNGVZhEbTsCfct20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:aa:23:b9:16:3b:55:cd:78:ca:95:56:85:4f:11:14:83:63:
dc:8b:a9:b4:f0:3b:0f:1a:e1:e4:a3:be:d6:72:83:66:0b:0e:
10:96:48:9b:fd:08:8f:7b:75:79:93:05:1a:98:7a:a2:56:57:
28:d1:87:b4:4a:1d:a8:28:e9:99:cf:21:0b:5f:b5:03:86:ce:
ef:a7:19:b6:28:7a:1f:6a:06:ba:1a:46:2a:d0:f4:af:5e:70:
fe:01:dc:f2:28:9c:f0:2c:8a:be:8d:4d:b7:b1:3c:f0:e7:55:
55:c3:e9:f6:a6:34:1e:c2:2f:bd:61:14:76:a3:f6:c2:77:89:
fe:62:37:9a:e5:2e:b3:6a:27:16:38:37:fd:fa:f8:29:f6:51:
48:46:3a:a5:83:98:49:d6:1c:ab:57:6e:6e:02:61:f4:ab:90:
a9:7f:9e:46:6b:d4:3f:d4:72:fc:e3:14:79:e8:d8:76:cd:c2:
c5:1c:62:f4:dc:2f:90:08:3b:b1:5b:e5:e4:f5:26:86:17:7e:
78:53:bb:a7:34:a8:a0:d5:f0:64:63:5c:86:f2:20:17:a6:89:
a2:4b:4a:4a:47:e8:59:5a:a5:66:39:93:fa:31:96:0d:4a:0a:
e2:37:19:a2:43:f1:5d:70:e6:d6:a4:20:a5:71:31:b2:86:45:
c2:31:74:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpwpP0faFuNoTL3HUy/SGpBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwN2RmZjU0N2VhY2JlODFkYzM0NjU1OTg0NDZkM2IwMjdk
Y2I3NmQwHhcNMjUxMTExMDIwMDUyWhcNMjUxMTEyMDIwMDUyWjAzMTEwLwYDVQQD
EyhmMTE3MTM1Njg3ZjczODliMGNmYzAyMTdhMWM4MzI4OTRiMzAxMDVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2Gilt3FDbFH/S2Mc28j14qphb1v
4rid3Xucl1XRlDkHDvyWmO6tfyzVupRfFRTjERH7q3hzQ6tXAJTRIGDseaJNcQ9P
bPBX8k7YCMg9HPKgl9UyZ99meDoHY7dqMsgTGZ6/mM25Nv9aCHdgtRxK8b4e3akT
u45DGAOo8VjSLXByr/AGn/1WXpn3uIHqx20O39b83Rdea03yZcGXp4VOggJKMNwc
1AlMy1/ovonEY+3+Dn8kk595j+426Pic1AXgXJuflOkQV8wO7iE1DO0nD/kYqeQe
JwBDJiXtp2Nf6KeqoAR9lLici7IkFFScBVtUutahabsxzj2bHRhrOQmR8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPEXE1aH9zibDPwCF6HIMolLMBBcMB8GA1UdIwQY
MBaAFNB9/1R+rL6B3DRlWYRG07An3LdtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEgzX1ZINnN2b0hjTkdWWmhFYlRzQ2ZjdDIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9lMGU4MjktMTI4NC00ZGIxLWJhNDgt
Nzg1YWMxOTFiMzFhLzEvMEgzX1ZINnN2b0hjTkdWWmhFYlRzQ2ZjdDIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS9lMGU4MjktMTI4NC00ZGIxLWJhNDgtNzg1YWMxOTFiMzFh
LzEvMEgzX1ZINnN2b0hjTkdWWmhFYlRzQ2ZjdDIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASKojuRY7
Vc14ypVWhU8RFINj3IuptPA7Dxrh5KO+1nKDZgsOEJZIm/0Ij3t1eZMFGph6olZX
KNGHtEodqCjpmc8hC1+1A4bO76cZtih6H2oGuhpGKtD0r15w/gHc8iic8CyKvo1N
t7E88OdVVcPp9qY0HsIvvWEUdqP2wneJ/mI3muUus2onFjg3/fr4KfZRSEY6pYOY
SdYcq1dubgJh9KuQqX+eRmvUP9Ry/OMUeejYds3CxRxi9NwvkAg7sVvl5PUmhhd+
eFO7pzSooNXwZGNchvIgF6aJoktKSkfoWVqlZjmT+jGWDUoK4jcZokPxXXDm1qQg
pXExsoZFwjF0Kg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:48:02 2025 by rpki-client