Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/6bf5ed-6fe6-4562-b853-9a4ec10607c5/1/0yVj7Zlk5CaBocXSlbDGFIYG5z0.mft
File: 0yVj7Zlk5CaBocXSlbDGFIYG5z0.mft (raw, json)
Hash identifier: Ocg4t+CCujPGcaPrjUuYeXHjvOZzrG5/hDJqMMCagWE=
Subject key identifier: B2:4B:35:BD:31:8A:FA:8C:BA:8A:89:E1:73:8C:56:6C:BE:9A:E0:DC
Authority key identifier: D3:25:63:ED:99:64:E4:26:81:A1:C5:D2:95:B0:C6:14:86:06:E7:3D
Certificate issuer: /CN=d32563ed9964e42681a1c5d295b0c6148606e73d
Certificate serial: 019A7180952A30EED0A530956E86EB2AD49E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0yVj7Zlk5CaBocXSlbDGFIYG5z0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/6bf5ed-6fe6-4562-b853-9a4ec10607c5/1/0yVj7Zlk5CaBocXSlbDGFIYG5z0.mft
Manifest number: 0A8A
Signing time: Tue 11 Nov 2025 06:00:43 +0000
Manifest this update: Tue 11 Nov 2025 06:00:43 +0000
Manifest next update: Wed 12 Nov 2025 06:00:43 +0000
Files and hashes: 1: 0yVj7Zlk5CaBocXSlbDGFIYG5z0.crl (hash: EGCwxfFUZ81Nm7VBtMMA4j2H6Lekh/tikQ70zOKRxF0=)
2: sKN4W1XQgBRPMLqN0BmAh5exg2s.roa (hash: IHu6vZ3N6G+PYxes9sQszliF8LVxezHAOlnn1uRbGYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/6bf5ed-6fe6-4562-b853-9a4ec10607c5/1/0yVj7Zlk5CaBocXSlbDGFIYG5z0.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/6bf5ed-6fe6-4562-b853-9a4ec10607c5/1/0yVj7Zlk5CaBocXSlbDGFIYG5z0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0yVj7Zlk5CaBocXSlbDGFIYG5z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 06:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:80:95:2a:30:ee:d0:a5:30:95:6e:86:eb:2a:d4:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d32563ed9964e42681a1c5d295b0c6148606e73d
Validity
Not Before: Nov 11 06:00:43 2025 GMT
Not After : Nov 12 06:00:43 2025 GMT
Subject: CN=b24b35bd318afa8cba8a89e1738c566cbe9ae0dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:13:23:5c:b6:c4:5b:1e:8d:28:d6:3a:7d:00:
b4:1d:65:e2:ac:eb:37:10:e8:a6:c9:8f:1e:19:50:
65:b0:55:06:ea:8d:ad:eb:8b:ce:1a:42:4a:3d:bc:
34:00:62:81:e2:93:fb:d3:5a:1e:75:4f:6b:13:05:
d0:5b:64:70:07:53:08:4f:85:4f:06:1c:7e:2a:13:
76:77:cd:9d:4c:f7:dc:81:e5:29:51:5a:5c:f6:c1:
66:2e:6f:d0:74:c2:10:21:6e:5e:8d:55:84:f7:94:
b6:74:37:33:04:dc:ff:e9:6d:ca:7a:bb:3f:dc:fc:
98:ad:be:68:ac:14:c5:79:bd:6f:0a:07:93:cd:c5:
1c:63:2e:3f:14:47:cd:0c:53:39:59:c8:4e:93:da:
0a:bc:7c:b4:64:09:ec:5e:93:59:dc:ba:ab:c3:a5:
d3:7b:96:8f:0b:f2:f5:40:4e:59:e5:3d:bd:f8:92:
9b:b2:a9:ad:73:5c:71:bf:7c:64:6b:45:5b:2d:9f:
a5:e9:d5:ef:7d:0b:e0:58:3b:42:ed:de:6c:2c:93:
2a:f0:8a:34:12:81:a7:e4:c4:ee:74:a7:97:f0:c3:
d9:29:01:12:37:a3:8f:b4:18:8e:0c:35:9b:42:97:
65:e2:fa:66:b0:79:20:ed:03:ab:3c:86:b0:80:27:
29:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:4B:35:BD:31:8A:FA:8C:BA:8A:89:E1:73:8C:56:6C:BE:9A:E0:DC
X509v3 Authority Key Identifier:
keyid:D3:25:63:ED:99:64:E4:26:81:A1:C5:D2:95:B0:C6:14:86:06:E7:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0yVj7Zlk5CaBocXSlbDGFIYG5z0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/6bf5ed-6fe6-4562-b853-9a4ec10607c5/1/0yVj7Zlk5CaBocXSlbDGFIYG5z0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/6bf5ed-6fe6-4562-b853-9a4ec10607c5/1/0yVj7Zlk5CaBocXSlbDGFIYG5z0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:80:fe:c1:53:17:4a:b9:f8:cd:b2:49:80:13:02:a0:c0:30:
e7:ca:42:75:62:db:2b:0b:df:1c:b9:25:0f:fc:7e:61:38:b8:
50:9c:bc:8a:39:f0:b5:9b:b4:0b:1b:73:24:8e:ac:f7:b9:ad:
67:f7:a7:a4:47:bb:ca:63:7d:d8:e3:c6:b3:2e:96:e7:e9:88:
4b:e4:3a:de:1e:dd:c5:ba:bf:78:f7:be:81:41:9f:22:f3:be:
f0:c5:b0:8a:3c:16:65:25:09:74:4e:9f:ec:0b:ae:f1:0d:2c:
e5:7f:5a:a6:32:35:2e:1f:70:17:32:95:0b:1f:0a:59:46:7f:
c8:26:ac:5c:a2:72:b5:b2:8b:9d:a9:0d:05:da:69:37:b7:3f:
ed:65:27:ba:c3:59:72:46:88:29:da:2f:55:37:95:87:e9:e1:
35:9b:3f:9e:2e:a6:ef:13:5e:9d:29:2b:9f:47:68:5f:f6:cb:
eb:2f:e6:35:d6:c1:9b:e1:97:54:cc:64:73:c1:00:3e:f7:6f:
8b:11:b4:72:49:a7:99:bb:0c:fa:88:25:1e:cb:7e:aa:3a:83:
f3:f1:ac:a6:c7:c0:48:1e:c7:46:d0:1f:0c:1f:97:f5:b5:6b:
a0:98:2c:f5:72:09:e3:40:22:aa:d1:21:3c:2c:18:b5:08:2d:
c3:b2:e2:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:08:25 2025 by rpki-client