Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/87f973-ea6e-47df-b1b0-df3138b434c8/1/0cgcYtOUIDPQp0BEsMWk8RPkPfM.mft
File: 0cgcYtOUIDPQp0BEsMWk8RPkPfM.mft (raw, json)
Hash identifier: vtxSvH8Nljyi3uHjJeMOCvXe25Hr4dhaoBkCYN8vBSs=
Subject key identifier: 45:F1:5C:80:9B:A1:56:FA:A9:17:92:EA:85:38:98:F7:E7:E2:DC:9A
Authority key identifier: D1:C8:1C:62:D3:94:20:33:D0:A7:40:44:B0:C5:A4:F1:13:E4:3D:F3
Certificate issuer: /CN=d1c81c62d3942033d0a74044b0c5a4f113e43df3
Certificate serial: 019A71B91CCECBEB5E3BCF166025F253147D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0cgcYtOUIDPQp0BEsMWk8RPkPfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/87f973-ea6e-47df-b1b0-df3138b434c8/1/0cgcYtOUIDPQp0BEsMWk8RPkPfM.mft
Manifest number: 0AF6
Signing time: Tue 11 Nov 2025 07:02:28 +0000
Manifest this update: Tue 11 Nov 2025 07:02:28 +0000
Manifest next update: Wed 12 Nov 2025 07:02:28 +0000
Files and hashes: 1: 0cgcYtOUIDPQp0BEsMWk8RPkPfM.crl (hash: vmAHx6QP/Wttis4gckA1nnJ2Jh63DG3Q/ebEzWvbmvQ=)
2: p_TDMyzlQ5zmtlyOFxztvJEw2HQ.roa (hash: fmxxB5F2kwLUu456RKJpssuFKFMbicdIEkOy2yPaKKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/87f973-ea6e-47df-b1b0-df3138b434c8/1/0cgcYtOUIDPQp0BEsMWk8RPkPfM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/87f973-ea6e-47df-b1b0-df3138b434c8/1/0cgcYtOUIDPQp0BEsMWk8RPkPfM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0cgcYtOUIDPQp0BEsMWk8RPkPfM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:1c:ce:cb:eb:5e:3b:cf:16:60:25:f2:53:14:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1c81c62d3942033d0a74044b0c5a4f113e43df3
Validity
Not Before: Nov 11 07:02:28 2025 GMT
Not After : Nov 12 07:02:28 2025 GMT
Subject: CN=45f15c809ba156faa91792ea853898f7e7e2dc9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:37:60:3b:4a:5e:aa:53:c3:54:f0:49:40:d7:
70:40:6d:11:a4:57:73:12:c5:3e:bd:df:66:2e:a5:
70:5b:45:18:66:aa:72:6d:dc:3e:58:e3:31:e8:06:
83:79:6f:a0:de:8a:ed:ea:b5:44:5b:7f:3c:90:99:
36:d5:f2:fa:59:1d:ad:07:aa:dc:00:41:ed:84:be:
7b:88:a5:d3:a9:b0:1d:a6:76:26:c0:57:50:b9:32:
ce:cb:b3:84:f1:0b:5a:ec:98:d1:71:dd:2c:7b:ed:
3d:21:2c:01:48:1d:00:e0:83:4a:d1:51:9d:1a:6e:
2a:e7:bf:8e:8b:17:a6:f8:cd:5c:52:04:cb:33:b7:
fc:55:63:ee:68:35:92:cb:96:8e:84:fe:74:00:95:
65:2a:11:1b:69:75:27:db:a2:00:5a:21:43:45:85:
14:b6:a9:26:67:8d:6e:90:67:a7:6d:23:b6:3d:d0:
31:89:6f:b3:70:b4:4a:7e:e5:06:bb:ba:5f:a1:64:
d4:ac:b3:9a:68:c0:0c:7c:3f:d1:d1:d9:a4:46:89:
9d:ff:e5:8f:8a:93:79:09:2a:3a:66:87:06:14:35:
3a:fd:a8:40:45:e8:de:83:8f:f7:80:91:25:fd:ff:
f1:5a:bb:ff:51:cc:5c:fd:40:9f:3f:22:ba:1e:80:
f7:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:F1:5C:80:9B:A1:56:FA:A9:17:92:EA:85:38:98:F7:E7:E2:DC:9A
X509v3 Authority Key Identifier:
keyid:D1:C8:1C:62:D3:94:20:33:D0:A7:40:44:B0:C5:A4:F1:13:E4:3D:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0cgcYtOUIDPQp0BEsMWk8RPkPfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/87f973-ea6e-47df-b1b0-df3138b434c8/1/0cgcYtOUIDPQp0BEsMWk8RPkPfM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/87f973-ea6e-47df-b1b0-df3138b434c8/1/0cgcYtOUIDPQp0BEsMWk8RPkPfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:93:82:21:f4:17:fd:15:a8:66:ef:be:07:b0:82:fc:1e:52:
c8:be:b7:b6:12:0e:d6:ac:bc:c5:3f:6d:25:32:6d:6f:f7:a1:
75:7f:40:ee:02:88:e2:cf:93:fe:21:9d:f5:df:d7:d7:ba:3e:
da:2e:8a:73:f3:e0:8e:89:2e:70:3a:f1:91:b1:8b:3c:94:9c:
48:21:fa:a4:4d:84:48:5c:bb:14:c1:e9:45:5e:82:62:7d:f3:
c2:4c:1a:08:0c:85:1a:19:1d:ad:ad:bf:ef:54:ab:93:64:16:
b2:8a:58:2b:38:32:7a:ba:55:26:52:3c:55:f4:1e:6e:4b:f5:
32:aa:50:04:ec:7e:e9:96:72:e8:65:a3:7e:00:5c:97:73:f5:
fe:fe:c5:1f:e0:85:51:e0:d0:d1:61:95:94:e3:b4:47:7a:6a:
ab:fd:6d:7c:d9:de:0f:55:5f:0a:2b:fa:96:7b:7d:07:6a:6f:
7c:c2:04:f1:d6:67:13:45:b4:65:19:92:6c:d6:63:c4:8e:80:
57:cb:27:3a:37:72:b6:23:43:5e:19:40:89:fc:de:94:87:f8:
8b:59:45:5d:de:54:2f:a9:32:1a:e8:a3:de:90:44:78:25:3c:
05:b7:05:81:f7:af:28:08:ab:75:f1:3f:ef:06:29:a0:e7:c8:
f3:11:c9:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:04:39 2025 by rpki-client