Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.mft
File: 0nHqBrGnVsv0auBGSEu9Pk_OTKU.mft (raw, json)
Hash identifier: QvdfAKBZkBedmyn1Axuo48CKGbXt1yyupqvmBzBvV4A=
Subject key identifier: 4C:58:B8:C2:AC:67:63:02:CF:C9:E8:46:2A:82:F9:74:7B:7A:4D:2F
Authority key identifier: D2:71:EA:06:B1:A7:56:CB:F4:6A:E0:46:48:4B:BD:3E:4F:CE:4C:A5
Certificate issuer: /CN=d271ea06b1a756cbf46ae046484bbd3e4fce4ca5
Certificate serial: 019A72936AE9FB7C707FF8CA2C230E9151FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0nHqBrGnVsv0auBGSEu9Pk_OTKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.mft
Manifest number: 1723
Signing time: Tue 11 Nov 2025 11:00:54 +0000
Manifest this update: Tue 11 Nov 2025 11:00:54 +0000
Manifest next update: Wed 12 Nov 2025 11:00:54 +0000
Files and hashes: 1: 0nHqBrGnVsv0auBGSEu9Pk_OTKU.crl (hash: bc9P7vC9KPN7f7gN8SSCk+SXprsHM1uzZuTwQDZVMTE=)
2: HsfAzbYNmjHgKTyTKE1e6DTdYBY.roa (hash: ThTbeLEhcdYcKNF2Qx27UbTWjSeMoDCUTIRvHXWnfiI=)
3: MamPa9eWXXv16Pq_PQPhm2jANdQ.roa (hash: /Xj0uh4hP5hzI09A/uvBTgwPodoBTxb8R7Jv7s78qJA=)
4: b2D7vVU4AWvUD_Ad1lqkP8q1DJY.roa (hash: nc5y91A1zU+LW1Tb8aDxs1rxMTCVcHcXyy5NeNxfhCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0nHqBrGnVsv0auBGSEu9Pk_OTKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:6a:e9:fb:7c:70:7f:f8:ca:2c:23:0e:91:51:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d271ea06b1a756cbf46ae046484bbd3e4fce4ca5
Validity
Not Before: Nov 11 11:00:54 2025 GMT
Not After : Nov 12 11:00:54 2025 GMT
Subject: CN=4c58b8c2ac676302cfc9e8462a82f9747b7a4d2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7f:84:a3:5a:e0:2e:2f:6a:e0:51:63:e1:28:
97:fa:c4:85:65:f5:33:77:f8:64:06:ed:7a:b2:67:
e4:21:a4:96:93:e3:f0:fc:0b:dc:7d:be:60:84:cf:
3a:bf:cd:5d:71:bd:79:14:85:40:71:30:a6:9b:0a:
f2:70:6a:2e:7c:63:f8:cd:42:5c:ab:71:77:4d:fa:
84:e4:53:79:f3:df:fc:81:75:30:96:e1:3b:2d:4d:
67:1b:61:59:2e:b8:8e:0c:24:23:8d:a3:ac:67:7c:
a0:e4:df:58:c9:27:0b:53:b1:f0:8b:c0:cf:1e:71:
89:ce:d6:a5:0f:fc:58:65:fc:13:ea:9f:e8:0b:aa:
40:4f:f1:79:98:00:2d:05:ff:f7:da:38:20:0c:fa:
6c:c3:6f:4c:1e:b1:53:9a:ad:27:e1:41:6d:2e:b9:
a8:ec:61:38:50:73:30:6a:4e:72:a8:5b:0a:27:d9:
78:d3:7a:37:0d:06:9d:79:9d:1b:d3:1e:5e:26:e4:
2d:92:4b:86:69:2a:6a:e6:29:ad:f9:0f:28:8c:a0:
7e:f8:19:a7:12:9e:86:f3:47:4e:db:4c:51:09:64:
d7:fe:65:4e:43:14:8c:28:51:a7:aa:8b:4c:d1:c8:
4e:ec:68:75:16:e0:22:57:3d:c0:cc:2b:27:c2:6e:
6e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:58:B8:C2:AC:67:63:02:CF:C9:E8:46:2A:82:F9:74:7B:7A:4D:2F
X509v3 Authority Key Identifier:
keyid:D2:71:EA:06:B1:A7:56:CB:F4:6A:E0:46:48:4B:BD:3E:4F:CE:4C:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0nHqBrGnVsv0auBGSEu9Pk_OTKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:e5:80:c8:1d:9a:a0:db:fc:b0:ad:61:ba:ff:f5:df:16:c6:
56:6c:79:c6:5f:a5:74:0e:a0:f3:7d:dc:dd:21:35:fa:6c:ec:
4f:5c:5d:80:49:e2:34:38:eb:a3:9b:10:7b:c1:3d:1a:6f:95:
39:84:4b:fa:93:c9:c3:18:e7:a6:21:76:cb:95:38:2c:e0:ea:
9c:13:e8:e0:73:dd:2c:7a:7a:78:9b:58:97:88:d5:c9:23:2a:
1d:db:b8:b6:8f:37:26:ec:d8:37:34:90:50:b2:6b:98:6b:9b:
69:6b:a1:99:92:4f:69:34:d2:95:30:19:58:9d:0d:10:ce:c2:
e4:e9:5d:3b:84:d7:bf:24:8a:26:92:9e:5a:1e:63:07:a9:db:
83:a4:ac:9b:01:00:5f:2e:d1:5c:30:c7:9d:e8:e0:ed:0b:ff:
a6:3c:54:f0:a0:cc:37:83:82:80:8c:26:30:fd:0f:88:87:60:
5e:e9:f1:a1:4f:23:f9:61:55:c7:59:35:9d:88:bf:01:7e:4d:
94:5e:b2:5a:4b:c0:40:66:44:7f:a7:62:0d:93:9d:a2:e1:18:
82:05:5c:1a:2e:18:69:af:82:64:c3:20:31:a5:1e:f7:52:ca:
3a:d9:ab:4d:0c:ce:ca:4b:0e:18:3c:26:ce:50:aa:98:7d:6f:
2e:1d:0d:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:16:22 2025 by rpki-client