Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/24fbfc-d902-49db-978a-35a20ff8923e/1/0F7XpYFHqlFMjm2vvMXYdXx9MnI.mft
File: 0F7XpYFHqlFMjm2vvMXYdXx9MnI.mft (raw, json)
Hash identifier: 0H3jMrY7a23Ngb+XZlUcG5n1p4uoK9IWHnFh91bjlFQ=
Subject key identifier: DA:32:56:DA:25:0F:DE:86:0E:B0:AB:42:29:71:EA:18:F4:7E:4F:E6
Authority key identifier: D0:5E:D7:A5:81:47:AA:51:4C:8E:6D:AF:BC:C5:D8:75:7C:7D:32:72
Certificate issuer: /CN=d05ed7a58147aa514c8e6dafbcc5d8757c7d3272
Certificate serial: 019A70DC830A9FF35AD8CB39688BB5639168
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0F7XpYFHqlFMjm2vvMXYdXx9MnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/24fbfc-d902-49db-978a-35a20ff8923e/1/0F7XpYFHqlFMjm2vvMXYdXx9MnI.mft
Manifest number: 020E
Signing time: Tue 11 Nov 2025 03:01:30 +0000
Manifest this update: Tue 11 Nov 2025 03:01:30 +0000
Manifest next update: Wed 12 Nov 2025 03:01:30 +0000
Files and hashes: 1: 0F7XpYFHqlFMjm2vvMXYdXx9MnI.crl (hash: DZ20DBul9hwLWSlroVzNL8m0iPKpM++82tbHnVRppRw=)
2: FyqKK2FcK12A9-k5axnFf2sz21k.roa (hash: W5mhlrOLXBrpKomBUnhpTyesgUMLSIHoT9QMJTSp0oA=)
3: rF6Gqj7_srm_DIMIqHN-GdQzygE.roa (hash: 2gAliij8n2m8vHu7/1GlcWyJj1a4KLcr3RlOnjXIB4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/24fbfc-d902-49db-978a-35a20ff8923e/1/0F7XpYFHqlFMjm2vvMXYdXx9MnI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/24fbfc-d902-49db-978a-35a20ff8923e/1/0F7XpYFHqlFMjm2vvMXYdXx9MnI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0F7XpYFHqlFMjm2vvMXYdXx9MnI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:83:0a:9f:f3:5a:d8:cb:39:68:8b:b5:63:91:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d05ed7a58147aa514c8e6dafbcc5d8757c7d3272
Validity
Not Before: Nov 11 03:01:30 2025 GMT
Not After : Nov 12 03:01:30 2025 GMT
Subject: CN=da3256da250fde860eb0ab422971ea18f47e4fe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:27:22:2a:e2:af:e7:33:6d:62:bd:57:63:ab:
a3:83:fb:1f:f0:53:7f:3a:c0:94:39:2e:3b:44:e0:
4d:2a:32:75:21:bd:34:c3:18:c9:2f:39:96:74:3d:
cb:29:37:3a:17:33:6a:a2:bb:43:97:f5:34:25:20:
7e:2d:8d:51:bc:8a:e0:8e:0e:a5:86:b7:9b:02:c1:
e8:ed:b6:56:8b:46:08:ef:58:66:cd:b7:ff:a7:18:
9c:dc:06:42:44:34:21:43:db:7e:38:53:7f:73:2d:
c8:17:88:41:3d:c0:a1:02:fa:e9:a1:5b:65:c1:1d:
e0:7a:27:70:9e:e1:f2:dc:3d:ff:54:51:32:d1:a3:
11:50:ed:41:18:60:a6:38:79:c8:1d:68:63:b8:28:
eb:95:65:55:a9:86:50:4b:40:a5:ae:96:6f:ea:0d:
5f:04:68:e2:05:83:66:3b:ce:59:f1:2b:ed:21:c7:
a4:f1:83:c0:23:21:de:12:a6:18:97:57:cb:02:4d:
29:10:1b:8f:3b:68:cd:87:75:52:08:d8:ad:0b:fe:
d7:fa:df:5a:61:06:7e:ab:2e:b5:f1:87:f7:bd:b2:
16:84:de:70:c8:76:ae:67:c7:a1:6f:d2:84:f5:7c:
d0:e7:48:7c:c2:a7:79:f5:38:94:68:83:2f:8d:58:
c6:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:32:56:DA:25:0F:DE:86:0E:B0:AB:42:29:71:EA:18:F4:7E:4F:E6
X509v3 Authority Key Identifier:
keyid:D0:5E:D7:A5:81:47:AA:51:4C:8E:6D:AF:BC:C5:D8:75:7C:7D:32:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0F7XpYFHqlFMjm2vvMXYdXx9MnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/24fbfc-d902-49db-978a-35a20ff8923e/1/0F7XpYFHqlFMjm2vvMXYdXx9MnI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/24fbfc-d902-49db-978a-35a20ff8923e/1/0F7XpYFHqlFMjm2vvMXYdXx9MnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:f8:30:a9:11:6f:05:00:fc:0f:e9:46:c3:6c:4f:49:02:99:
d9:79:a7:a0:7f:c2:2e:12:dd:01:af:b7:a7:89:2e:b9:ba:72:
00:1a:aa:02:84:d2:8a:90:b7:ea:e8:ee:81:b9:ef:6d:eb:a5:
ae:02:74:28:dd:25:44:92:31:15:bc:7c:5c:c7:0c:fe:f7:1d:
26:8f:f1:5a:04:f2:85:da:0b:34:55:aa:79:fb:05:02:34:b6:
14:23:87:eb:02:66:76:18:8a:58:b2:83:8e:20:85:50:51:e0:
68:d6:15:46:b1:b1:10:94:bc:d0:a6:7d:54:70:ba:ae:4f:f3:
ae:4b:ad:d1:75:d9:cc:e0:1d:90:9e:27:dd:fc:91:91:0f:68:
46:8a:65:8b:55:e1:0e:f7:91:14:12:c1:77:ad:5c:1a:65:56:
dc:c2:8a:cc:1f:8f:d8:0b:28:3c:82:36:d9:41:75:4c:4d:de:
30:b1:48:f1:70:3b:7d:ff:a8:b7:f2:ea:2f:b5:83:65:56:a8:
f5:b2:3c:35:05:4b:da:d5:a6:f4:f9:c4:38:d0:ea:e2:60:f1:
eb:68:c6:a8:c2:1b:4d:5f:94:80:fc:c4:d5:d1:76:be:06:d5:
db:1b:2b:51:a3:06:25:72:d4:80:35:b6:a4:6a:b3:75:89:97:
4c:aa:e7:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:49 2025 by rpki-client