Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.mft
File: 0PbNMLTPoZPiJrupKC42aiKjEQ8.mft (raw, json)
Hash identifier: EdDLK49tz3nwKOg5SHClX4CVDTWMqIPq90Y7HkRPFMk=
Subject key identifier: F6:49:4D:91:37:7D:7C:EA:22:71:19:CC:E5:8B:51:98:AB:20:79:B3
Authority key identifier: D0:F6:CD:30:B4:CF:A1:93:E2:26:BB:A9:28:2E:36:6A:22:A3:11:0F
Certificate issuer: /CN=d0f6cd30b4cfa193e226bba9282e366a22a3110f
Certificate serial: 019A706E7B2694E2E4A680125DE73A84AE83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0PbNMLTPoZPiJrupKC42aiKjEQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 01:01:19 +0000
Manifest this update: Tue 11 Nov 2025 01:01:19 +0000
Manifest next update: Wed 12 Nov 2025 01:01:19 +0000
Files and hashes: 1: 0PbNMLTPoZPiJrupKC42aiKjEQ8.crl (hash: +m5TKWlr73FpLumyMK6i0q9xzOcCFtBWGfduFtDY9ys=)
2: rcxI4e2J8wRM11pjAJVw2X1CP4Q.roa (hash: dOutEmsom2VI++bJk5JwwVxqjGBRuIpfu9it/0+MYW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0PbNMLTPoZPiJrupKC42aiKjEQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6e:7b:26:94:e2:e4:a6:80:12:5d:e7:3a:84:ae:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0f6cd30b4cfa193e226bba9282e366a22a3110f
Validity
Not Before: Nov 11 01:01:19 2025 GMT
Not After : Nov 12 01:01:19 2025 GMT
Subject: CN=f6494d91377d7cea227119cce58b5198ab2079b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:48:2f:b4:b9:28:cf:a6:55:e1:f0:a0:38:f8:
ba:45:a1:6b:99:dd:c0:e2:49:76:56:da:d4:17:a7:
2a:ef:1e:e5:fe:8a:89:9a:62:71:9d:ef:96:f8:86:
0c:c3:86:ba:d6:ad:b1:bb:bf:27:67:19:95:18:5b:
9a:d3:ce:a0:cb:86:23:f7:ab:24:c3:76:3f:19:0f:
0e:b9:8d:5c:e4:75:39:98:92:b7:18:00:f6:8d:7d:
13:83:13:8d:fe:a2:27:8a:b2:cc:dc:43:40:8c:d9:
8f:e3:a5:dd:4e:a8:a8:08:a8:ab:59:02:d6:f0:b0:
0a:93:d3:86:2c:0f:51:54:32:cb:3f:02:66:d9:20:
1c:c7:9e:2b:48:a5:ad:a3:10:dc:f0:1e:8e:93:da:
ba:05:91:62:f8:74:6d:aa:62:44:0b:82:00:b7:7f:
69:7e:a1:b9:21:b4:6e:1f:e0:40:47:17:a1:bb:99:
62:c5:83:77:c8:a9:11:8e:36:19:74:8d:da:19:2d:
70:6e:30:56:11:90:63:78:51:6a:d6:c9:0f:52:19:
77:d2:aa:d5:ee:df:ed:e6:e7:6f:36:74:b5:29:5f:
c4:2e:2d:53:45:42:32:ed:59:9f:9a:eb:a2:d5:9e:
c8:e0:ed:ca:0b:5c:6d:9c:d1:cc:16:4b:86:77:39:
7e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:49:4D:91:37:7D:7C:EA:22:71:19:CC:E5:8B:51:98:AB:20:79:B3
X509v3 Authority Key Identifier:
keyid:D0:F6:CD:30:B4:CF:A1:93:E2:26:BB:A9:28:2E:36:6A:22:A3:11:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0PbNMLTPoZPiJrupKC42aiKjEQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:db:4e:02:f0:79:fe:1d:ee:53:5a:6f:bb:a5:c2:d6:51:67:
51:79:9a:0b:e1:24:78:fe:da:42:b0:d5:93:bb:58:dd:af:f1:
59:34:f1:00:67:54:98:b5:36:4d:0d:f3:04:1c:78:3a:02:b2:
9a:b3:19:df:9b:19:92:b0:26:32:fb:13:6c:d8:88:30:05:5a:
36:bf:39:e2:1f:2b:ab:28:0f:08:7e:1d:11:d2:4a:2a:33:95:
d8:fb:1a:fd:f2:65:83:14:a2:85:38:a0:28:8b:3d:f6:0c:12:
a0:94:00:00:81:bb:e2:41:70:98:63:00:4e:e2:03:28:97:9a:
08:8f:ae:35:2b:d7:80:c4:c2:d4:0f:39:b4:d7:a6:96:8e:10:
3d:50:75:81:25:bf:fb:00:5a:62:6c:4a:16:2e:99:d8:6f:7c:
53:5b:81:52:89:e0:dc:21:b5:08:80:a6:38:83:d8:cd:40:28:
17:42:6c:1b:0a:1a:a2:ff:2a:92:9b:d3:84:98:c9:ab:25:5d:
a5:5f:5d:3f:70:2d:b5:3f:97:06:4d:f0:db:59:60:7e:fe:6e:
6d:b3:68:fb:a4:75:ca:45:bf:3d:93:8c:19:33:9c:e1:2d:a2:
fa:99:3b:ec:33:f7:05:70:8a:ad:8b:be:a8:f6:6d:6d:e5:1a:
b1:3f:ef:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:36 2025 by rpki-client