Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/81024f-5171-47c4-b5ca-6b63331eff02/1/0Mo8Cxlv3gunTBSHvcucX6BTZks.mft
File: 0Mo8Cxlv3gunTBSHvcucX6BTZks.mft (raw, json)
Hash identifier: +OqHmwhWDovlnQt8SZ51sWKygD+oKRu+kk9B0ycMjw8=
Subject key identifier: 39:6F:9D:A9:39:AF:77:A3:D1:6F:76:3C:04:44:44:91:23:D6:EB:2E
Authority key identifier: D0:CA:3C:0B:19:6F:DE:0B:A7:4C:14:87:BD:CB:9C:5F:A0:53:66:4B
Certificate issuer: /CN=d0ca3c0b196fde0ba74c1487bdcb9c5fa053664b
Certificate serial: 019A71EE894A1FA043C5D75C593A6D3A1D84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Mo8Cxlv3gunTBSHvcucX6BTZks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/81024f-5171-47c4-b5ca-6b63331eff02/1/0Mo8Cxlv3gunTBSHvcucX6BTZks.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 08:00:49 +0000
Manifest this update: Tue 11 Nov 2025 08:00:49 +0000
Manifest next update: Wed 12 Nov 2025 08:00:49 +0000
Files and hashes: 1: 0Mo8Cxlv3gunTBSHvcucX6BTZks.crl (hash: vF27N440B6c4X1iTY3gnW3EtQlPxSKpx3ceUxbUV6aQ=)
2: 5Iq99HGOQym0RGozEyZTnwgi5-c.roa (hash: 81JX76zEEyAwuma2A2j1xpYjvTQiYo/8wBvDbJx61DE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/81024f-5171-47c4-b5ca-6b63331eff02/1/0Mo8Cxlv3gunTBSHvcucX6BTZks.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/81024f-5171-47c4-b5ca-6b63331eff02/1/0Mo8Cxlv3gunTBSHvcucX6BTZks.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Mo8Cxlv3gunTBSHvcucX6BTZks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:89:4a:1f:a0:43:c5:d7:5c:59:3a:6d:3a:1d:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0ca3c0b196fde0ba74c1487bdcb9c5fa053664b
Validity
Not Before: Nov 11 08:00:49 2025 GMT
Not After : Nov 12 08:00:49 2025 GMT
Subject: CN=396f9da939af77a3d16f763c0444449123d6eb2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:98:2c:e5:77:3a:82:98:4f:49:6a:0b:bc:b7:
21:f2:5f:a3:1e:40:b7:9c:ec:f8:38:a6:8d:6f:06:
6f:ac:6d:81:22:97:8a:68:5d:88:6f:52:e5:a4:4d:
17:4e:d7:3d:08:f6:92:36:9c:4e:7c:f0:47:be:c0:
76:cc:22:26:5c:58:a6:16:27:1e:75:dc:c9:5f:8b:
76:93:87:e0:92:c8:79:35:c9:2d:a2:b2:bb:78:4d:
e1:8a:ea:fb:6d:29:82:74:bd:c8:08:34:72:cd:3f:
d0:7a:94:f8:84:79:85:00:f7:e6:4b:67:d1:08:62:
a6:79:3f:5e:55:17:59:40:d0:fd:9d:07:b8:b2:cd:
51:29:3b:7c:c8:1c:2e:c4:67:70:74:3e:c1:34:3e:
29:d3:d7:24:da:ec:6a:bc:33:3f:4a:2f:19:fb:4b:
e3:9c:a5:86:e2:30:b4:68:69:2c:cd:fd:c7:b5:6f:
4f:83:2b:bb:cf:7c:d8:c7:aa:e9:94:61:ab:64:cc:
1d:f8:5d:7f:3b:8b:b7:f6:07:3b:90:e4:ac:4c:19:
40:ec:a2:25:bb:62:48:a3:79:b9:4e:04:21:2b:b7:
37:bf:27:0c:ea:ea:b8:99:3b:02:f6:16:b4:17:b7:
ae:99:b8:ff:c5:10:7e:13:02:11:49:e8:3c:93:cf:
1f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:6F:9D:A9:39:AF:77:A3:D1:6F:76:3C:04:44:44:91:23:D6:EB:2E
X509v3 Authority Key Identifier:
keyid:D0:CA:3C:0B:19:6F:DE:0B:A7:4C:14:87:BD:CB:9C:5F:A0:53:66:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Mo8Cxlv3gunTBSHvcucX6BTZks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/81024f-5171-47c4-b5ca-6b63331eff02/1/0Mo8Cxlv3gunTBSHvcucX6BTZks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/81024f-5171-47c4-b5ca-6b63331eff02/1/0Mo8Cxlv3gunTBSHvcucX6BTZks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:75:e2:65:53:08:53:6a:5c:cf:d4:1d:f8:05:ea:d1:a9:93:
af:35:86:0a:b5:01:36:17:31:93:07:24:24:61:6a:51:9e:f8:
b9:c7:6a:26:11:8f:07:15:be:2e:a3:25:53:a3:f1:61:fa:00:
80:1b:1e:fa:05:3a:42:40:ff:90:45:99:f5:34:b6:d3:f7:d2:
0e:8a:e6:46:41:78:71:82:72:b8:78:14:36:ec:99:4f:fd:fd:
b3:fd:e2:8f:9b:f9:5f:93:f2:73:7f:c8:0c:34:58:76:dc:80:
89:25:2e:bb:cf:94:83:53:eb:c7:a6:bb:6c:e8:34:f0:fb:d2:
75:45:ff:3f:ff:b3:76:c2:b5:c4:92:0d:6e:31:e4:3d:6f:d9:
14:4c:8a:5f:d9:9f:c5:e1:bd:5a:d8:90:60:72:a6:2a:c7:01:
05:63:59:8d:68:33:49:09:90:4a:be:67:e6:aa:b5:1b:58:d4:
b7:2e:04:3f:0a:fa:54:54:1a:6d:f2:8d:82:cf:17:30:e5:56:
ca:42:16:19:7c:a4:bb:b0:f9:77:91:04:00:cd:d7:5f:95:34:
49:46:63:e5:e3:cb:46:e4:2b:e0:13:df:d5:d3:c4:5e:60:b1:
b7:36:80:71:ea:15:fe:03:ee:ff:49:4f:f4:47:f8:ce:3a:15:
61:8a:07:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:48:27 2025 by rpki-client