Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.mft
File: 0SX6xKXZW0Ggcuu_TwNdCbOqWcc.mft (raw, json)
Hash identifier: qdRxsqnt7p+r24I/k0QE5JJ34UatkUpXKzYmxoyDEXc=
Subject key identifier: 38:68:D0:F8:43:0F:BB:F0:A9:ED:13:01:40:9F:D7:4A:DF:E3:E7:E6
Authority key identifier: D1:25:FA:C4:A5:D9:5B:41:A0:72:EB:BF:4F:03:5D:09:B3:AA:59:C7
Certificate issuer: /CN=d125fac4a5d95b41a072ebbf4f035d09b3aa59c7
Certificate serial: 019A70DBF82015C33A19B7CC46485048012E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.mft
Manifest number: 0B23
Signing time: Tue 11 Nov 2025 03:00:55 +0000
Manifest this update: Tue 11 Nov 2025 03:00:55 +0000
Manifest next update: Wed 12 Nov 2025 03:00:55 +0000
Files and hashes: 1: 0SX6xKXZW0Ggcuu_TwNdCbOqWcc.crl (hash: MPq7w1fA0LBfN88T6hg6M4fYnh5msds/5JVKPgvyxTE=)
2: sW1FbXnmMLs31PJCKJCZsxmeKF0.roa (hash: gPwTFuA8vjPg7PCIOrBM62Yfp57prUWNjPVJTmJKnuM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:db:f8:20:15:c3:3a:19:b7:cc:46:48:50:48:01:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d125fac4a5d95b41a072ebbf4f035d09b3aa59c7
Validity
Not Before: Nov 11 03:00:55 2025 GMT
Not After : Nov 12 03:00:55 2025 GMT
Subject: CN=3868d0f8430fbbf0a9ed1301409fd74adfe3e7e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8c:95:86:b5:97:19:d6:0a:d4:93:db:24:3f:
69:e6:d1:72:9d:f9:d3:a2:03:54:3c:14:cc:fb:0c:
4f:1b:c0:94:b3:53:29:3d:3b:7c:ff:52:2b:4c:f5:
28:62:de:b6:cb:e2:e2:63:e0:eb:e6:5a:bd:63:b1:
10:6b:9b:bd:85:3b:c1:dd:14:25:7a:38:c1:7c:44:
55:27:15:17:53:4e:33:e9:cc:1f:f9:1e:6a:0e:89:
62:0c:40:d7:2c:e6:33:9d:40:49:5e:2c:d8:9b:e5:
4b:ba:33:55:0b:79:b7:59:9f:56:80:64:46:50:94:
10:3d:81:b8:3c:bf:f0:e2:8b:7b:42:a8:fb:e7:0a:
73:39:0d:25:8d:3c:de:b7:4d:18:9f:c7:db:66:8e:
1f:d2:b7:21:ee:89:ef:d5:06:d6:9c:4d:13:05:0f:
a9:37:5a:8f:70:5f:49:72:a9:fb:f5:71:f2:78:a7:
a4:44:4b:1d:f1:c4:1b:bd:c6:ef:9e:99:c8:a5:9c:
0a:f6:02:bc:7f:3f:3e:33:4b:fe:45:54:32:8f:a9:
cd:b1:20:bd:e5:24:84:3e:45:2a:35:c3:45:07:dd:
21:aa:ed:75:dc:56:a1:ac:68:f2:98:2b:1d:b1:de:
56:67:40:30:5b:a1:d5:81:13:7d:5a:f9:84:64:79:
94:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:68:D0:F8:43:0F:BB:F0:A9:ED:13:01:40:9F:D7:4A:DF:E3:E7:E6
X509v3 Authority Key Identifier:
keyid:D1:25:FA:C4:A5:D9:5B:41:A0:72:EB:BF:4F:03:5D:09:B3:AA:59:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:33:b1:51:31:06:0f:62:fc:6f:d9:ca:80:ed:89:70:41:6f:
80:30:73:32:ef:18:d4:e5:43:d3:2f:f1:48:02:01:6f:8e:41:
78:7d:5e:43:c2:b2:f7:f9:53:af:d6:50:ed:42:2d:39:e6:e6:
d6:80:74:b7:70:3d:bd:53:37:30:0a:3c:a7:63:09:f4:6e:c2:
df:ea:54:26:e7:b7:7a:26:9a:d1:26:4e:29:88:8d:7f:4b:68:
cb:5b:56:82:3e:bc:d3:0a:ad:13:2a:52:e0:72:e3:bb:2d:ef:
7c:0f:7e:fa:65:d5:cc:35:09:71:7c:80:86:2c:20:4f:71:4d:
f8:06:82:8a:2a:1d:48:1f:cd:41:10:39:1b:75:80:9b:63:df:
9e:29:b4:e3:24:90:a3:e3:16:0f:0f:ba:4f:93:c0:4e:be:55:
a2:fb:14:78:9e:6b:3b:cc:37:d0:56:ca:25:ba:5d:15:79:d3:
eb:58:bd:30:53:89:a9:3b:b9:58:88:f8:1a:65:1c:15:71:86:
7b:5e:a8:b2:a8:f5:13:78:96:66:34:68:d3:90:60:97:9e:48:
a6:fe:f6:aa:40:1a:3d:76:8e:f7:df:92:70:7c:72:4a:d2:82:
97:26:d2:ba:50:d2:d4:85:33:ad:b3:91:4b:4a:a8:ef:cb:aa:
d7:ce:0a:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpw2/ggFcM6GbfMRkhQSAEuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxMjVmYWM0YTVkOTViNDFhMDcyZWJiZjRmMDM1ZDA5YjNh
YTU5YzcwHhcNMjUxMTExMDMwMDU1WhcNMjUxMTEyMDMwMDU1WjAzMTEwLwYDVQQD
EygzODY4ZDBmODQzMGZiYmYwYTllZDEzMDE0MDlmZDc0YWRmZTNlN2U2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsoyVhrWXGdYK1JPbJD9p5tFynfnT
ogNUPBTM+wxPG8CUs1MpPTt8/1IrTPUoYt62y+LiY+Dr5lq9Y7EQa5u9hTvB3RQl
ejjBfERVJxUXU04z6cwf+R5qDoliDEDXLOYznUBJXizYm+VLujNVC3m3WZ9WgGRG
UJQQPYG4PL/w4ot7Qqj75wpzOQ0ljTzet00Yn8fbZo4f0rch7onv1QbWnE0TBQ+p
N1qPcF9Jcqn79XHyeKekREsd8cQbvcbvnpnIpZwK9gK8fz8+M0v+RVQyj6nNsSC9
5SSEPkUqNcNFB90hqu113FahrGjymCsdsd5WZ0AwW6HVgRN9WvmEZHmUDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDho0PhDD7vwqe0TAUCf10rf4+fmMB8GA1UdIwQY
MBaAFNEl+sSl2VtBoHLrv08DXQmzqlnHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFNYNnhLWFpXMEdnY3V1X1R3TmRDYk9xV2NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS84Y2VhMWYtNDVlNC00MjAxLWJlYmMt
MGRlZDA2ZTQwYTc1LzEvMFNYNnhLWFpXMEdnY3V1X1R3TmRDYk9xV2NjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS84Y2VhMWYtNDVlNC00MjAxLWJlYmMtMGRlZDA2ZTQwYTc1
LzEvMFNYNnhLWFpXMEdnY3V1X1R3TmRDYk9xV2NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAADOxUTEG
D2L8b9nKgO2JcEFvgDBzMu8Y1OVD0y/xSAIBb45BeH1eQ8Ky9/lTr9ZQ7UItOebm
1oB0t3A9vVM3MAo8p2MJ9G7C3+pUJue3eiaa0SZOKYiNf0toy1tWgj680wqtEypS
4HLjuy3vfA9++mXVzDUJcXyAhiwgT3FN+AaCiiodSB/NQRA5G3WAm2Pfnim04ySQ
o+MWDw+6T5PATr5VovsUeJ5rO8w30FbKJbpdFXnT61i9MFOJqTu5WIj4GmUcFXGG
e16osqj1E3iWZjRo05Bgl55Ipv72qkAaPXaO99+ScHxyStKClybSulDS1IUzrbOR
S0qo78uq184KFQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:10 2025 by rpki-client