Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/b2582f-586b-436a-a6e3-e069ee107add/1/0lqeLErIvAK8P_iSWsExdNLUeMQ.mft
File: 0lqeLErIvAK8P_iSWsExdNLUeMQ.mft (raw, json)
Hash identifier: fop9dF/THEUZnowr+R7VWPIpm3XtZjOrKNjhyA0aKxg=
Subject key identifier: 6C:F0:7B:B4:EE:35:9F:8E:66:00:1B:1B:37:91:76:51:96:FB:24:42
Authority key identifier: D2:5A:9E:2C:4A:C8:BC:02:BC:3F:F8:92:5A:C1:31:74:D2:D4:78:C4
Certificate issuer: /CN=d25a9e2c4ac8bc02bc3ff8925ac13174d2d478c4
Certificate serial: 019A725C40A76E2F763071262D61BE94ACE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0lqeLErIvAK8P_iSWsExdNLUeMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/b2582f-586b-436a-a6e3-e069ee107add/1/0lqeLErIvAK8P_iSWsExdNLUeMQ.mft
Manifest number: 06DF
Signing time: Tue 11 Nov 2025 10:00:39 +0000
Manifest this update: Tue 11 Nov 2025 10:00:39 +0000
Manifest next update: Wed 12 Nov 2025 10:00:39 +0000
Files and hashes: 1: 0lqeLErIvAK8P_iSWsExdNLUeMQ.crl (hash: owtNLLSTzv4EjTC6sbs8lH4pWDOggUVoptNxHYDNZGg=)
2: wc2YTTqZu_ZfiRjMD3y02xaUsko.roa (hash: LM/FwSmelKssGweHrskFer212d31QKucqPggfsRe9io=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/b2582f-586b-436a-a6e3-e069ee107add/1/0lqeLErIvAK8P_iSWsExdNLUeMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/b2582f-586b-436a-a6e3-e069ee107add/1/0lqeLErIvAK8P_iSWsExdNLUeMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/0lqeLErIvAK8P_iSWsExdNLUeMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:40:a7:6e:2f:76:30:71:26:2d:61:be:94:ac:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d25a9e2c4ac8bc02bc3ff8925ac13174d2d478c4
Validity
Not Before: Nov 11 10:00:39 2025 GMT
Not After : Nov 12 10:00:39 2025 GMT
Subject: CN=6cf07bb4ee359f8e66001b1b3791765196fb2442
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:81:99:46:2f:43:86:55:b6:f1:b9:f4:c3:4f:
76:00:86:86:61:4b:fe:53:fb:5d:34:c6:b8:d3:85:
17:1e:d8:10:d0:b9:cc:ff:8e:2b:e5:8c:44:46:03:
3a:72:bc:90:43:7b:cf:f4:49:bd:74:cb:11:54:61:
3b:5b:f1:74:cb:d7:15:3e:61:e9:fe:ed:80:71:f7:
59:23:b8:62:df:82:c3:eb:ec:92:46:6e:61:c3:3a:
8b:5f:9b:46:9d:5f:a2:1b:45:0f:2a:3f:f1:94:1c:
b4:3c:b3:68:0a:dc:7d:c7:88:10:61:3a:fc:af:3c:
68:19:c4:5e:37:e1:5b:7a:78:1d:13:c9:21:1f:ef:
90:4a:f5:56:9f:8a:7d:cd:7f:70:bf:d5:23:a5:c5:
4b:49:43:9f:9d:b7:90:d1:39:43:4c:7c:81:6e:a4:
93:6b:d0:3d:e7:c7:e9:cc:7a:cf:ba:c6:0a:44:b3:
a0:c5:d6:76:5a:3f:28:f0:18:af:fb:d1:f4:c6:e8:
bd:c9:b7:97:bc:4e:7d:3a:80:9d:6b:c2:c7:c4:c0:
e2:d6:e2:04:c8:7b:ca:20:fb:69:68:d3:2f:2f:bf:
1c:9c:40:41:9f:44:34:74:a1:09:c0:68:8d:13:b5:
fc:e5:2a:1b:5c:36:6a:3e:d8:f6:c2:b1:e8:3c:1f:
0c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:F0:7B:B4:EE:35:9F:8E:66:00:1B:1B:37:91:76:51:96:FB:24:42
X509v3 Authority Key Identifier:
keyid:D2:5A:9E:2C:4A:C8:BC:02:BC:3F:F8:92:5A:C1:31:74:D2:D4:78:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0lqeLErIvAK8P_iSWsExdNLUeMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/b2582f-586b-436a-a6e3-e069ee107add/1/0lqeLErIvAK8P_iSWsExdNLUeMQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/b2582f-586b-436a-a6e3-e069ee107add/1/0lqeLErIvAK8P_iSWsExdNLUeMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:d5:30:c3:96:4d:a0:38:58:d0:7a:be:cd:c2:e4:00:15:57:
62:4b:e2:75:da:1b:a7:48:56:99:d3:c8:a4:cd:a4:39:b0:82:
27:ee:f4:1b:5c:8e:1a:e4:55:21:72:c9:2c:ea:7b:e0:45:b1:
32:69:ac:3e:0b:93:c4:fb:b4:f7:50:20:53:1c:75:8c:05:1e:
c6:59:38:1a:6c:e6:92:d0:8d:ba:89:18:43:72:1f:7b:ce:c8:
e5:4e:7f:c4:77:84:27:77:9b:cf:65:38:af:aa:f6:77:28:cc:
69:e0:c9:fd:29:bb:2d:c1:44:e3:a1:9c:a4:32:86:f6:5a:dc:
04:36:c0:37:5c:91:45:73:54:e3:1b:7f:ac:19:ae:96:46:be:
02:ee:ef:02:52:71:12:3b:7d:e7:e7:8e:88:bb:0a:f2:b2:c1:
92:73:70:2b:56:00:3a:54:b3:cc:8d:12:2d:90:44:a5:f4:f4:
c3:6d:81:0d:bb:b8:4f:19:79:6a:76:47:21:6d:3c:83:3b:bb:
10:79:44:36:99:61:7e:8f:08:e5:31:20:33:d3:63:ed:3c:27:
19:b3:32:49:d2:81:16:cc:eb:60:da:39:7d:19:58:ca:2c:06:
4b:12:77:da:56:38:67:02:7f:69:3f:fd:3e:61:2a:42:bf:26:
ed:07:36:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:22:08 2025 by rpki-client