Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/e9cbf3-3a5d-4b74-86d3-cb0f2455cbd6/1/0rtm-96q__Q7llCx9svk8p7a9Yw.mft
File: 0rtm-96q__Q7llCx9svk8p7a9Yw.mft (raw, json)
Hash identifier: rn4eVZMbubWX0DrZZfQbfnwnrv4eYgUm2WYYd8BdGqA=
Subject key identifier: F6:B0:90:6F:FC:9F:A8:1E:8E:6F:50:5F:BB:00:F2:3F:54:4A:4E:60
Authority key identifier: D2:BB:66:FB:DE:AA:FF:F4:3B:96:50:B1:F6:CB:E4:F2:9E:DA:F5:8C
Certificate issuer: /CN=d2bb66fbdeaafff43b9650b1f6cbe4f29edaf58c
Certificate serial: 019A72258859E1CE673CDEEA9E0C63CDBAAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0rtm-96q__Q7llCx9svk8p7a9Yw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/e9cbf3-3a5d-4b74-86d3-cb0f2455cbd6/1/0rtm-96q__Q7llCx9svk8p7a9Yw.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 09:00:53 +0000
Manifest this update: Tue 11 Nov 2025 09:00:53 +0000
Manifest next update: Wed 12 Nov 2025 09:00:53 +0000
Files and hashes: 1: 0rtm-96q__Q7llCx9svk8p7a9Yw.crl (hash: OTyS/Gi4eqSqDYAb3JArm0BJgaImfEnG5f0Ddyk/4kc=)
2: irNcQLmJh11TGBELw5uQP7kOVJE.roa (hash: R7pIQc58X7S0CJk6seUtKX1n/5bjuhfl7ShC4vfuTCg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/e9cbf3-3a5d-4b74-86d3-cb0f2455cbd6/1/0rtm-96q__Q7llCx9svk8p7a9Yw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/e9cbf3-3a5d-4b74-86d3-cb0f2455cbd6/1/0rtm-96q__Q7llCx9svk8p7a9Yw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0rtm-96q__Q7llCx9svk8p7a9Yw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:88:59:e1:ce:67:3c:de:ea:9e:0c:63:cd:ba:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2bb66fbdeaafff43b9650b1f6cbe4f29edaf58c
Validity
Not Before: Nov 11 09:00:53 2025 GMT
Not After : Nov 12 09:00:53 2025 GMT
Subject: CN=f6b0906ffc9fa81e8e6f505fbb00f23f544a4e60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:59:ac:82:21:0d:f0:5f:c2:c1:92:68:d4:4b:
2e:5b:ec:b4:6f:42:fb:97:38:4e:43:2d:cf:6e:58:
64:32:b0:ea:91:97:5f:ed:eb:90:a3:2d:f7:25:7b:
1d:dc:9b:99:cf:5d:0a:c3:16:69:19:dd:41:f5:d9:
b3:1a:ae:91:25:38:a5:c6:44:60:40:89:ca:d9:a3:
bc:13:90:00:55:59:ea:3a:60:15:ca:9d:61:f0:cd:
1d:e3:98:73:69:79:ad:e6:01:d1:85:11:31:03:87:
30:f0:11:b6:e2:1b:4d:fd:c1:9f:f3:75:04:37:9f:
0a:aa:b9:cc:16:f5:b0:27:dc:3f:6b:97:8f:56:6e:
b1:2d:63:f0:f7:76:c4:08:a7:2b:19:e7:e9:4e:31:
06:67:a3:cc:1f:e4:97:64:a5:c0:12:00:4d:65:d8:
34:97:e0:ef:2c:b3:e6:1d:13:81:fa:0c:69:ca:76:
39:24:dd:fa:a3:f5:01:96:d2:3a:40:70:64:46:8e:
d1:62:c0:fe:2f:15:55:d3:a8:b1:3c:6b:0a:42:ec:
2c:c3:34:0e:0a:0a:be:c1:04:45:13:c9:9f:d3:7b:
d1:f2:60:35:ba:41:e9:a1:30:c7:1f:db:e3:96:de:
80:00:df:b7:59:32:fa:4a:f6:73:b4:40:b2:82:41:
1f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:B0:90:6F:FC:9F:A8:1E:8E:6F:50:5F:BB:00:F2:3F:54:4A:4E:60
X509v3 Authority Key Identifier:
keyid:D2:BB:66:FB:DE:AA:FF:F4:3B:96:50:B1:F6:CB:E4:F2:9E:DA:F5:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0rtm-96q__Q7llCx9svk8p7a9Yw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e9cbf3-3a5d-4b74-86d3-cb0f2455cbd6/1/0rtm-96q__Q7llCx9svk8p7a9Yw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e9cbf3-3a5d-4b74-86d3-cb0f2455cbd6/1/0rtm-96q__Q7llCx9svk8p7a9Yw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:0e:d1:c5:68:d4:c5:2d:c1:35:d0:f0:00:d3:54:77:7e:19:
1a:1e:0d:e5:28:a7:fc:4f:db:78:d7:0f:42:c8:d9:11:59:b2:
86:5c:8a:cb:d4:32:b3:79:e3:d1:98:c0:70:4f:d0:80:99:02:
49:97:15:35:d7:b9:e7:b2:53:9d:f3:26:3b:65:25:1a:a3:bf:
06:43:e5:5e:de:85:10:e8:6d:6f:0c:38:cc:93:a3:12:1a:ce:
4a:58:8e:ac:26:ab:24:50:f7:19:20:43:95:4e:aa:fd:90:de:
a2:67:be:03:1d:37:ba:f9:7a:bb:1d:b8:57:60:06:6f:9b:fe:
84:a7:6d:fe:c3:44:93:cb:d1:27:06:fa:36:4c:62:9a:46:a2:
d3:ff:c4:9f:a5:9d:55:b9:36:89:0e:72:0f:1e:1f:ec:52:e9:
c0:1a:24:d2:bd:95:7c:7d:6c:e1:6d:7c:3a:2d:35:38:35:94:
57:1c:b6:ab:a8:a7:34:41:ec:5a:98:81:76:9f:e6:f3:14:e1:
83:13:07:d6:e1:70:9c:9a:f4:73:4c:f9:21:49:90:3e:5b:7f:
1e:68:13:63:7a:b8:43:2e:e5:5e:14:e8:a8:60:8a:db:17:93:
11:66:75:cd:aa:1d:7b:da:9a:a1:9f:d1:57:f1:f8:cc:a4:de:
b7:b5:df:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:17:29 2025 by rpki-client