Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/12eadf-53b7-428a-81ed-9da2cf4e6065/1/0dXq4THDsQiP-wI3mA1u4YiWaMY.mft
File: 0dXq4THDsQiP-wI3mA1u4YiWaMY.mft (raw, json)
Hash identifier: gxuwBhYP81lAUGetTIp1vMmXAeeQHiiksSz4FcGndPU=
Subject key identifier: 8B:35:89:E2:9F:2C:19:A4:1C:B3:93:4C:3F:40:C2:A9:58:41:AE:D3
Authority key identifier: D1:D5:EA:E1:31:C3:B1:08:8F:FB:02:37:98:0D:6E:E1:88:96:68:C6
Certificate issuer: /CN=d1d5eae131c3b1088ffb0237980d6ee1889668c6
Certificate serial: 019A7149901FA8D7CB9B21EA7A2631379D73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0dXq4THDsQiP-wI3mA1u4YiWaMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/12eadf-53b7-428a-81ed-9da2cf4e6065/1/0dXq4THDsQiP-wI3mA1u4YiWaMY.mft
Manifest number: 99
Signing time: Tue 11 Nov 2025 05:00:37 +0000
Manifest this update: Tue 11 Nov 2025 05:00:37 +0000
Manifest next update: Wed 12 Nov 2025 05:00:37 +0000
Files and hashes: 1: 0dXq4THDsQiP-wI3mA1u4YiWaMY.crl (hash: 82g/UvPMvb0TBeY4+uU0JpSXIilQn6ou2Pguxb7poL8=)
2: 6W2f7odCRZasTES13-ea8vAK_m8.roa (hash: okmw3ktsRXXv4R0y2S6qFif1SfGCGqe5Hb5ZPwgIWm0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/12eadf-53b7-428a-81ed-9da2cf4e6065/1/0dXq4THDsQiP-wI3mA1u4YiWaMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/12eadf-53b7-428a-81ed-9da2cf4e6065/1/0dXq4THDsQiP-wI3mA1u4YiWaMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0dXq4THDsQiP-wI3mA1u4YiWaMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:90:1f:a8:d7:cb:9b:21:ea:7a:26:31:37:9d:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1d5eae131c3b1088ffb0237980d6ee1889668c6
Validity
Not Before: Nov 11 05:00:37 2025 GMT
Not After : Nov 12 05:00:37 2025 GMT
Subject: CN=8b3589e29f2c19a41cb3934c3f40c2a95841aed3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a2:00:fa:8d:f1:d3:65:cd:6b:0c:c1:96:29:
08:df:0c:ac:25:ff:e6:db:96:fe:c6:ff:62:9c:b1:
c6:7c:5e:53:94:34:7b:9d:5e:66:a2:76:b3:7a:04:
cd:23:61:67:24:c9:ab:86:3c:6a:6b:57:3c:2b:1d:
c1:96:c1:97:7f:9d:41:9d:8f:7b:f3:ea:c1:ba:bd:
97:26:0d:58:2f:ee:d0:61:fa:f2:3e:91:93:58:98:
31:da:6e:e4:6b:d5:89:65:fb:a0:18:aa:89:ed:c1:
13:7a:25:99:2f:31:f5:c1:f5:c9:c1:49:d7:c8:51:
e3:f2:34:8f:5f:d1:ac:03:a4:e5:73:f4:6c:b3:08:
d4:d6:aa:72:9d:c3:c0:bc:67:ea:a3:3c:9e:db:24:
a2:d9:38:1a:8d:9a:b4:b3:d5:ef:7d:5e:48:fc:5e:
c1:a5:b7:23:80:1e:96:a7:95:7a:51:f0:8c:7b:4c:
21:00:e1:43:7f:dd:26:ab:f8:52:1a:76:bc:c3:65:
cf:f1:f7:61:8d:00:eb:a9:b1:40:dc:81:ef:5b:f3:
24:37:16:90:a4:53:f0:44:2a:2f:5b:5a:82:1f:4b:
eb:42:1f:bc:70:d3:9c:90:2c:b0:65:38:d2:a2:3b:
7e:ae:a9:60:34:fb:79:5d:25:61:30:be:0a:48:98:
08:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:35:89:E2:9F:2C:19:A4:1C:B3:93:4C:3F:40:C2:A9:58:41:AE:D3
X509v3 Authority Key Identifier:
keyid:D1:D5:EA:E1:31:C3:B1:08:8F:FB:02:37:98:0D:6E:E1:88:96:68:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0dXq4THDsQiP-wI3mA1u4YiWaMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/12eadf-53b7-428a-81ed-9da2cf4e6065/1/0dXq4THDsQiP-wI3mA1u4YiWaMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/12eadf-53b7-428a-81ed-9da2cf4e6065/1/0dXq4THDsQiP-wI3mA1u4YiWaMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:eb:d1:7c:a4:91:d3:5d:24:75:df:80:76:07:c5:3e:5d:ef:
b1:83:03:16:3e:52:31:6d:b3:82:2b:ee:8d:7e:96:10:1a:21:
81:88:ea:3d:6b:16:d3:4b:6c:33:88:0e:d0:3a:4c:d8:ca:45:
06:90:21:b8:3d:87:18:dc:23:a7:13:76:f0:a5:64:d1:84:c2:
86:95:83:4c:ec:08:36:0a:ab:88:08:e5:a7:de:4e:4c:8d:cb:
5f:28:ca:e0:10:e6:b1:0b:b6:89:0b:b9:25:f6:0f:69:a3:fd:
0e:c7:90:84:5f:d3:b6:65:69:68:fb:f5:01:04:9b:e1:5a:51:
2e:f6:8f:dd:05:2f:02:d3:88:ea:20:ed:ca:3c:d1:dc:d5:c3:
45:b5:2d:03:66:d8:34:ac:e3:1e:b6:7d:e9:2e:f0:f5:aa:97:
60:19:dc:b1:ee:45:6b:8b:32:60:5e:bd:bc:6e:bf:de:45:75:
98:d7:b3:36:f7:fa:46:66:93:bc:d9:96:ef:6b:56:16:00:71:
2b:c8:35:19:d9:f2:b7:58:9a:50:08:89:c0:b3:6d:b5:43:bc:
24:6a:a5:2d:cb:f1:d6:d7:94:44:f2:72:63:63:0d:af:ac:db:
4c:0f:05:6d:98:44:57:8a:33:19:62:22:50:70:35:13:20:8b:
6a:a1:80:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:23:29 2025 by rpki-client