Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/4eafc9-5473-4602-a149-922a16d117dd/1/0mHPvAfsMGN33LFql6EWDHptgsw.mft
File: 0mHPvAfsMGN33LFql6EWDHptgsw.mft (raw, json)
Hash identifier: ghDQMxQ1feOh1mgw0HPMGKQG5zMabCVxJlVQbwt4Yp0=
Subject key identifier: CF:6E:77:2B:9D:FC:50:65:60:AF:5C:72:C5:48:3C:1F:F8:62:A3:D1
Authority key identifier: D2:61:CF:BC:07:EC:30:63:77:DC:B1:6A:97:A1:16:0C:7A:6D:82:CC
Certificate issuer: /CN=d261cfbc07ec306377dcb16a97a1160c7a6d82cc
Certificate serial: 019A729389B2144C68EC3BBFD30706C5E6D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0mHPvAfsMGN33LFql6EWDHptgsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/4eafc9-5473-4602-a149-922a16d117dd/1/0mHPvAfsMGN33LFql6EWDHptgsw.mft
Manifest number: 0360
Signing time: Tue 11 Nov 2025 11:01:02 +0000
Manifest this update: Tue 11 Nov 2025 11:01:02 +0000
Manifest next update: Wed 12 Nov 2025 11:01:02 +0000
Files and hashes: 1: 0mHPvAfsMGN33LFql6EWDHptgsw.crl (hash: L4+dfNA/mqvXEUojeuRVlNoFylk7d38h377M1judLmU=)
2: 1-242YNLxFtHiZKrZjOTCTUI_hX4.roa (hash: Zl/0hNDNG1rQGa8HsGyytZ4/ZO9Krs9kfipHSTu8iZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/4eafc9-5473-4602-a149-922a16d117dd/1/0mHPvAfsMGN33LFql6EWDHptgsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/4eafc9-5473-4602-a149-922a16d117dd/1/0mHPvAfsMGN33LFql6EWDHptgsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0mHPvAfsMGN33LFql6EWDHptgsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:89:b2:14:4c:68:ec:3b:bf:d3:07:06:c5:e6:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d261cfbc07ec306377dcb16a97a1160c7a6d82cc
Validity
Not Before: Nov 11 11:01:02 2025 GMT
Not After : Nov 12 11:01:02 2025 GMT
Subject: CN=cf6e772b9dfc506560af5c72c5483c1ff862a3d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:39:f4:ab:fd:18:e9:de:68:d9:bf:63:a7:3b:
3d:18:d5:81:6d:ba:ea:d6:99:8d:cf:a9:b1:a4:dc:
bb:97:82:c9:fe:80:1f:13:82:c8:ba:8a:ee:04:10:
ec:b5:dc:d9:45:50:1e:3e:0b:bf:ff:cb:a9:cd:7d:
09:87:70:65:75:53:1f:82:8e:5c:61:5f:76:e9:17:
b9:6a:15:37:9f:6f:08:c9:82:96:d0:c7:5d:ba:11:
ab:7e:c6:21:76:cd:26:4e:cb:d4:c9:0c:ca:25:b8:
07:db:11:7c:16:71:2e:0c:68:81:4a:bc:06:3d:37:
e8:88:cc:14:95:dc:a3:4d:d1:91:d3:b9:5e:a8:fc:
40:d2:56:51:2c:c1:e6:81:d4:e8:d2:14:9d:ee:36:
f9:48:5d:a4:2b:4e:37:cd:f5:c7:8e:dc:7a:e2:2b:
53:fc:e4:1d:5f:d1:d0:d9:eb:f4:fa:77:0d:da:35:
82:1d:78:f2:fe:7c:a9:d4:ac:bb:ec:c3:37:62:ab:
d9:f9:e0:35:8a:73:e4:07:ab:f0:4a:40:fc:8a:7d:
19:12:44:e7:08:3d:e0:03:1e:09:fa:b5:99:72:04:
6c:49:0d:04:a5:56:43:07:a8:b0:30:a6:59:80:76:
08:12:2d:12:d3:62:0c:e9:b5:e7:32:0f:6f:75:e4:
ac:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:6E:77:2B:9D:FC:50:65:60:AF:5C:72:C5:48:3C:1F:F8:62:A3:D1
X509v3 Authority Key Identifier:
keyid:D2:61:CF:BC:07:EC:30:63:77:DC:B1:6A:97:A1:16:0C:7A:6D:82:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mHPvAfsMGN33LFql6EWDHptgsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4eafc9-5473-4602-a149-922a16d117dd/1/0mHPvAfsMGN33LFql6EWDHptgsw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4eafc9-5473-4602-a149-922a16d117dd/1/0mHPvAfsMGN33LFql6EWDHptgsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:48:fc:98:81:f7:b6:a5:0b:a1:e6:4e:8d:3c:5a:c1:1e:d3:
22:29:db:8c:44:de:00:a1:ce:f8:2d:1d:3d:4d:28:69:6f:8a:
3c:31:4b:31:d3:bc:4d:42:e2:e7:f1:6f:fd:1e:54:4d:d7:a6:
f8:18:bf:db:8e:0c:ba:91:2f:96:da:e6:20:58:18:a3:10:63:
20:05:48:6a:61:17:5b:b5:0d:71:0b:36:82:0d:51:fd:2b:7d:
ed:ad:c0:06:92:3b:78:c9:e2:e0:6e:1d:3f:6a:35:19:14:ef:
59:d8:47:10:6d:fe:ac:89:39:f3:bf:d5:7f:8d:8f:56:49:6c:
3d:56:45:4b:dd:1a:86:c0:fc:c6:af:9d:41:08:f0:2f:1b:94:
dd:1b:58:f3:e2:fa:4e:c4:aa:75:c5:f3:ec:1f:cf:a3:54:00:
04:e9:63:4d:40:ed:fa:b7:41:c7:37:1e:3e:e6:60:9c:63:b3:
42:fb:fe:b3:a7:40:3c:01:c6:49:f6:63:d7:86:55:a9:19:6c:
3f:b2:66:99:79:1e:28:06:f7:15:00:70:b6:7c:26:f9:36:5c:
5c:df:d8:ae:ca:85:8f:1e:2a:f6:08:c3:9e:49:5f:93:06:d1:
ee:a1:be:5b:a3:a3:31:26:1a:09:38:6f:82:fe:59:95:4b:53:
59:97:61:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyk4myFExo7Du/0wcGxebTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyNjFjZmJjMDdlYzMwNjM3N2RjYjE2YTk3YTExNjBjN2E2
ZDgyY2MwHhcNMjUxMTExMTEwMTAyWhcNMjUxMTEyMTEwMTAyWjAzMTEwLwYDVQQD
EyhjZjZlNzcyYjlkZmM1MDY1NjBhZjVjNzJjNTQ4M2MxZmY4NjJhM2QxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjn0q/0Y6d5o2b9jpzs9GNWBbbrq
1pmNz6mxpNy7l4LJ/oAfE4LIuoruBBDstdzZRVAePgu//8upzX0Jh3BldVMfgo5c
YV926Re5ahU3n28IyYKW0MdduhGrfsYhds0mTsvUyQzKJbgH2xF8FnEuDGiBSrwG
PTfoiMwUldyjTdGR07leqPxA0lZRLMHmgdTo0hSd7jb5SF2kK043zfXHjtx64itT
/OQdX9HQ2ev0+ncN2jWCHXjy/nyp1Ky77MM3YqvZ+eA1inPkB6vwSkD8in0ZEkTn
CD3gAx4J+rWZcgRsSQ0EpVZDB6iwMKZZgHYIEi0S02IM6bXnMg9vdeSsDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM9udyud/FBlYK9ccsVIPB/4YqPRMB8GA1UdIwQY
MBaAFNJhz7wH7DBjd9yxapehFgx6bYLMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMG1IUHZBZnNNR04zM0xGcWw2RVdESHB0Z3N3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS80ZWFmYzktNTQ3My00NjAyLWExNDkt
OTIyYTE2ZDExN2RkLzEvMG1IUHZBZnNNR04zM0xGcWw2RVdESHB0Z3N3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS80ZWFmYzktNTQ3My00NjAyLWExNDktOTIyYTE2ZDExN2Rk
LzEvMG1IUHZBZnNNR04zM0xGcWw2RVdESHB0Z3N3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALEj8mIH3
tqULoeZOjTxawR7TIinbjETeAKHO+C0dPU0oaW+KPDFLMdO8TULi5/Fv/R5UTdem
+Bi/244MupEvltrmIFgYoxBjIAVIamEXW7UNcQs2gg1R/St97a3ABpI7eMni4G4d
P2o1GRTvWdhHEG3+rIk587/Vf42PVklsPVZFS90ahsD8xq+dQQjwLxuU3RtY8+L6
TsSqdcXz7B/Po1QABOljTUDt+rdBxzcePuZgnGOzQvv+s6dAPAHGSfZj14ZVqRls
P7JmmXkeKAb3FQBwtnwm+TZcXN/YrsqFjx4q9gjDnklfkwbR7qG+W6OjMSYaCThv
gv5ZlUtTWZdhMg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 17:01:46 2025 by rpki-client