Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/c309ec-3254-4200-9a5e-ab42b4c93ed9/1/0gVCphNVJBQhlMqnCOfbLMprTmM.mft
File: 0gVCphNVJBQhlMqnCOfbLMprTmM.mft (raw, json)
Hash identifier: x67Yfiv5MFoCvbWZ7G6pi1uN8xo28Ryei8kgfA48Rj0=
Subject key identifier: FD:A1:FB:A2:D1:BF:C9:A4:35:0B:E0:1A:80:80:35:ED:9C:A0:D4:60
Authority key identifier: D2:05:42:A6:13:55:24:14:21:94:CA:A7:08:E7:DB:2C:CA:6B:4E:63
Certificate issuer: /CN=d20542a6135524142194caa708e7db2cca6b4e63
Certificate serial: 019A7225CD944C83E5AA13F42C0EFA929A3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0gVCphNVJBQhlMqnCOfbLMprTmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/c309ec-3254-4200-9a5e-ab42b4c93ed9/1/0gVCphNVJBQhlMqnCOfbLMprTmM.mft
Manifest number: 0FF7
Signing time: Tue 11 Nov 2025 09:01:11 +0000
Manifest this update: Tue 11 Nov 2025 09:01:11 +0000
Manifest next update: Wed 12 Nov 2025 09:01:11 +0000
Files and hashes: 1: 0gVCphNVJBQhlMqnCOfbLMprTmM.crl (hash: rQQ8NzG6KnOajw6UOyOqmUqOdeWXj/qlrmCDmfQJLls=)
2: H6uSFDtLoI4YQD04FkS4VSFpIhw.roa (hash: hv1JnxHOhWB0hv+54xUCZyY9gAEBPU8rdk2117x7KVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/c309ec-3254-4200-9a5e-ab42b4c93ed9/1/0gVCphNVJBQhlMqnCOfbLMprTmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/c309ec-3254-4200-9a5e-ab42b4c93ed9/1/0gVCphNVJBQhlMqnCOfbLMprTmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0gVCphNVJBQhlMqnCOfbLMprTmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:cd:94:4c:83:e5:aa:13:f4:2c:0e:fa:92:9a:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d20542a6135524142194caa708e7db2cca6b4e63
Validity
Not Before: Nov 11 09:01:11 2025 GMT
Not After : Nov 12 09:01:11 2025 GMT
Subject: CN=fda1fba2d1bfc9a4350be01a808035ed9ca0d460
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c7:17:b8:6f:ad:d3:15:72:77:2b:dc:e6:1d:
00:4e:c9:6a:56:cd:4a:5b:6b:82:a0:a7:a5:e3:ac:
c8:22:82:c7:7e:f6:c7:c8:21:49:4f:81:52:2c:e7:
3c:df:21:02:fe:be:0a:d2:d1:44:43:76:cb:23:f3:
1a:24:73:9c:2d:d4:f8:e5:4d:91:98:c8:63:60:1a:
13:f7:d0:f6:de:12:0a:fd:34:01:ff:18:9f:ff:a2:
bc:28:24:0e:2c:ae:93:2c:fb:9b:7d:58:99:c3:96:
40:b0:0a:99:bc:64:9b:4d:92:10:db:94:4a:8e:8e:
41:f4:49:4d:36:64:f1:8a:bb:ae:9e:1c:aa:6b:c4:
e6:11:58:18:43:82:74:0b:22:50:e0:d2:e0:b1:0e:
33:c8:85:a9:6c:d5:a3:9e:3a:f4:55:9f:0f:da:d2:
6d:51:e9:24:a1:bb:45:c3:93:40:a6:5e:8f:ce:fc:
12:87:65:0d:67:67:bf:e8:3b:84:49:40:49:42:d0:
d7:1f:f6:3d:3e:84:a1:b6:c7:a6:25:41:4e:bd:be:
2a:3d:7f:b8:b9:64:c5:f0:cc:27:d1:52:54:b4:1e:
11:80:c2:a5:2e:6e:6d:65:c4:49:94:2c:19:6b:f6:
a2:87:9d:df:a5:b3:64:ae:2b:cf:c6:eb:6b:e5:1d:
4c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:A1:FB:A2:D1:BF:C9:A4:35:0B:E0:1A:80:80:35:ED:9C:A0:D4:60
X509v3 Authority Key Identifier:
keyid:D2:05:42:A6:13:55:24:14:21:94:CA:A7:08:E7:DB:2C:CA:6B:4E:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0gVCphNVJBQhlMqnCOfbLMprTmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/c309ec-3254-4200-9a5e-ab42b4c93ed9/1/0gVCphNVJBQhlMqnCOfbLMprTmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/c309ec-3254-4200-9a5e-ab42b4c93ed9/1/0gVCphNVJBQhlMqnCOfbLMprTmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:d0:b2:9d:22:4c:b6:6f:9f:27:77:31:84:5c:da:76:a3:65:
d5:d9:76:4e:22:d4:a5:75:f3:9a:d4:e9:73:8d:56:e9:d5:ae:
46:fc:17:9a:a0:70:50:1c:ee:df:36:9d:be:77:6e:c4:a9:08:
2f:88:90:e1:48:c8:5e:8e:9b:7a:09:14:5b:fa:ec:4b:02:15:
78:64:bc:ca:71:5b:68:3f:d2:b7:58:b7:50:89:34:b3:a7:23:
21:c8:25:ff:84:59:41:94:ac:14:7c:65:2f:80:03:4f:78:8e:
9e:0a:2d:62:dd:48:cd:28:cc:a1:cf:bc:ff:c3:6e:80:24:f6:
f3:e1:0c:3e:1d:13:31:8d:98:07:fd:0f:26:33:48:3c:ee:71:
ec:f4:56:9e:19:77:7c:37:0b:d7:33:b1:7c:e7:3d:6a:dc:dc:
f1:6c:ff:90:e7:9a:6f:38:42:7d:67:62:73:9e:56:83:98:c3:
e3:f2:08:35:4e:06:a0:fd:38:23:26:c4:10:a3:a2:4a:23:b3:
b2:0f:f9:d3:db:dc:cb:9a:b9:d4:18:37:e2:c1:1e:11:3a:18:
55:0e:10:92:17:4f:f5:c1:e2:f6:7f:74:2e:d5:0e:9b:25:7d:
69:86:87:6e:82:60:4e:e5:db:02:bc:e9:a3:ad:6e:5e:ee:a2:
19:c7:80:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:43:02 2025 by rpki-client