Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/a275fe-86f0-41e9-8263-69db6a8f58d7/1/0sgbHQKPKvYeqbQiZ5pfjekFcuc.mft
File: 0sgbHQKPKvYeqbQiZ5pfjekFcuc.mft (raw, json)
Hash identifier: nXXJxZ1x8n6rviUdvgBAssHqgP62zNseWHkvDJMNT6Q=
Subject key identifier: 26:23:60:39:D5:1E:A1:4B:58:B7:CB:43:D5:03:61:11:1D:D5:60:52
Authority key identifier: D2:C8:1B:1D:02:8F:2A:F6:1E:A9:B4:22:67:9A:5F:8D:E9:05:72:E7
Certificate issuer: /CN=d2c81b1d028f2af61ea9b422679a5f8de90572e7
Certificate serial: 019A71B9087291923AB7E900BAE1899895CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0sgbHQKPKvYeqbQiZ5pfjekFcuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/a275fe-86f0-41e9-8263-69db6a8f58d7/1/0sgbHQKPKvYeqbQiZ5pfjekFcuc.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 07:02:23 +0000
Manifest this update: Tue 11 Nov 2025 07:02:23 +0000
Manifest next update: Wed 12 Nov 2025 07:02:23 +0000
Files and hashes: 1: 0sgbHQKPKvYeqbQiZ5pfjekFcuc.crl (hash: NRGVAbqHCZcyqGEy+ApwIrmU9Ek2oURMlkil0oy3FHY=)
2: KzJRm4blhpQ22QWdKYNtwSo9hec.roa (hash: VvdDpNHANgnzHXSd6NFNAPGvygHgdOqLpMuWRNVTc78=)
3: baZe32PKXIeppnY8Yaja4T-a3tY.roa (hash: tWsZkF/TWyoJvpRhiK8XSrqOZGwxm+EMQruE+7kHGHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/a275fe-86f0-41e9-8263-69db6a8f58d7/1/0sgbHQKPKvYeqbQiZ5pfjekFcuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/a275fe-86f0-41e9-8263-69db6a8f58d7/1/0sgbHQKPKvYeqbQiZ5pfjekFcuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0sgbHQKPKvYeqbQiZ5pfjekFcuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:08:72:91:92:3a:b7:e9:00:ba:e1:89:98:95:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2c81b1d028f2af61ea9b422679a5f8de90572e7
Validity
Not Before: Nov 11 07:02:23 2025 GMT
Not After : Nov 12 07:02:23 2025 GMT
Subject: CN=26236039d51ea14b58b7cb43d50361111dd56052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:77:ac:60:73:c9:b8:c9:ca:58:8d:77:13:e6:
a2:d8:7a:02:98:59:92:fc:6e:00:ee:44:6a:fb:94:
c8:66:85:8b:b3:fd:bf:39:1d:c7:1b:d5:52:19:08:
b8:93:84:b7:5c:db:69:09:b5:ed:19:69:a6:c8:97:
5f:52:f5:96:80:5d:ae:8b:68:35:1e:09:70:74:5b:
2e:31:d0:a2:25:22:5e:40:48:f5:10:22:4d:47:76:
cd:26:69:f9:ff:78:85:b1:b2:ed:7a:d3:f9:d3:64:
2f:fe:17:11:bb:f5:d8:51:3c:4b:47:25:af:4b:d3:
4e:f1:8c:df:2b:26:c1:47:34:87:d5:56:dc:51:ba:
48:e7:90:56:35:54:7e:fa:d9:1d:7b:c8:1c:d9:38:
df:17:b8:0f:99:04:85:2f:aa:1a:50:24:0c:c4:34:
fb:68:3d:ca:5f:4d:8e:0e:61:03:aa:90:6b:0f:3b:
9c:88:4e:53:09:83:14:a9:87:32:21:b7:d2:54:d8:
df:b1:9b:b1:a8:63:31:5b:cf:ae:1b:80:21:c1:65:
09:f6:ff:3d:8c:0a:68:1c:f8:8f:29:d7:9e:b0:8e:
5b:4f:e9:8d:72:c3:a3:b8:a1:2e:c7:c5:e3:38:87:
ba:0a:31:63:ca:12:db:e3:32:82:83:8f:90:bf:bd:
af:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:23:60:39:D5:1E:A1:4B:58:B7:CB:43:D5:03:61:11:1D:D5:60:52
X509v3 Authority Key Identifier:
keyid:D2:C8:1B:1D:02:8F:2A:F6:1E:A9:B4:22:67:9A:5F:8D:E9:05:72:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0sgbHQKPKvYeqbQiZ5pfjekFcuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a275fe-86f0-41e9-8263-69db6a8f58d7/1/0sgbHQKPKvYeqbQiZ5pfjekFcuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a275fe-86f0-41e9-8263-69db6a8f58d7/1/0sgbHQKPKvYeqbQiZ5pfjekFcuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:78:dd:f8:38:2c:16:aa:14:59:a8:ac:90:ed:32:ab:d1:98:
6f:d6:ff:48:43:03:24:b1:9c:a2:6e:9a:96:d7:2d:5a:43:5d:
64:12:58:f6:bd:17:40:06:67:5d:1b:df:fe:18:08:20:fd:19:
f5:03:cc:45:4f:b1:c9:c1:be:e4:a8:f5:dc:93:07:d6:67:5a:
e9:c1:c8:d6:ad:05:62:22:f8:67:d1:e8:55:8f:b9:dc:88:12:
26:fa:ae:e3:b7:04:94:6d:89:b5:3c:a0:7f:f4:4e:41:d3:97:
d9:72:14:cf:69:d5:81:77:57:1c:7c:e5:f4:9f:5c:b0:25:45:
8e:66:cc:3d:e3:c7:43:d0:6b:24:97:6a:71:0d:b4:bc:3e:17:
6a:34:fc:41:ae:ce:d6:ce:de:b9:71:db:70:00:26:26:a5:28:
95:44:25:30:a8:c8:d7:40:43:e7:3a:a1:c4:4c:be:d5:8a:e9:
2e:96:e1:fc:29:08:56:c9:c5:be:e2:7d:cc:d8:c1:2d:b6:47:
6a:3c:bb:d5:58:31:77:24:eb:6c:61:eb:32:f3:7e:5e:fd:5a:
0b:01:0a:c1:02:5a:0a:3e:dd:36:fc:50:8a:07:65:d7:98:aa:
99:a9:57:16:f4:1a:bc:ea:d6:43:59:27:27:95:dc:4f:85:fc:
bb:b3:b6:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:04:37 2025 by rpki-client