Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.mft
File: 0i870LrmA6t5BgKpa7vEK1Mi6I8.mft (raw, json)
Hash identifier: FloVVi7fiq0yTawps5tqsfGw7jp+KzrHymjfsw/bH/0=
Subject key identifier: 73:7B:48:65:94:33:55:EE:B1:E2:75:E2:8D:DD:B1:76:4E:FE:E7:9A
Authority key identifier: D2:2F:3B:D0:BA:E6:03:AB:79:06:02:A9:6B:BB:C4:2B:53:22:E8:8F
Certificate issuer: /CN=d22f3bd0bae603ab790602a96bbbc42b5322e88f
Certificate serial: 019A4C9818B7CC5778AB32BC051F300749C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0i870LrmA6t5BgKpa7vEK1Mi6I8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.mft
Manifest number: 0D8B
Signing time: Tue 04 Nov 2025 02:00:27 +0000
Manifest this update: Tue 04 Nov 2025 02:00:27 +0000
Manifest next update: Wed 05 Nov 2025 02:00:27 +0000
Files and hashes: 1: 0i870LrmA6t5BgKpa7vEK1Mi6I8.crl (hash: L0fVaRNvBB2meeCLNXN6cjO11gQa06UAWPQIYhjq4jQ=)
2: 1-Mnf3JnGm30D3TVdL8D8i-JJTg.roa (hash: FQArZOtG/iI5+2OZ+rGhEkabMbeYZiFVJ69aFAVvKUM=)
3: ViACi2znHcxjvEoTWJabRySlSug.roa (hash: /lKDXYbMBEGiN9zYRBMEKiyvRO0eOc45ePzpVSUQyuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0i870LrmA6t5BgKpa7vEK1Mi6I8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Nov 2025 20:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:98:18:b7:cc:57:78:ab:32:bc:05:1f:30:07:49:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d22f3bd0bae603ab790602a96bbbc42b5322e88f
Validity
Not Before: Nov 4 02:00:27 2025 GMT
Not After : Nov 5 02:00:27 2025 GMT
Subject: CN=737b4865943355eeb1e275e28dddb1764efee79a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:b6:d9:53:59:46:cb:a2:d2:a8:dd:1e:05:f2:
01:ea:09:f2:a3:b8:3d:c0:0a:3c:76:7e:92:d0:49:
85:26:12:dc:d5:b5:11:91:a7:8d:ac:90:5f:ae:2d:
a7:63:f8:ad:6d:bd:23:13:2c:3f:f3:8d:13:9a:75:
b4:ac:87:31:9d:7e:1b:2e:00:85:ae:ad:98:5c:54:
01:36:2b:23:ea:dd:97:96:aa:3e:3c:b9:36:9d:10:
65:b9:dc:66:de:70:25:8f:8d:37:62:2d:ec:82:e1:
c6:b7:26:c7:e1:0b:9f:f2:34:37:cc:0b:44:7c:37:
2f:e0:d1:31:3c:48:06:57:f5:00:7d:e5:f9:ce:ec:
41:e1:ed:c2:33:54:5b:57:51:cf:cc:06:2e:85:88:
35:14:24:59:32:b8:63:6f:87:62:7e:45:c1:74:ec:
72:bc:f1:ac:07:c6:5e:e9:cd:b4:6a:12:c8:1c:5e:
cb:85:a0:ad:41:9e:f2:0a:ee:e8:99:e3:0d:d2:a6:
c0:17:e7:31:d7:5e:43:29:7c:37:f6:f0:c4:c9:37:
a9:67:12:c7:45:3f:8f:99:35:79:6a:c3:c2:cd:c3:
b1:54:8b:18:6a:c2:d6:b1:4f:fe:b1:28:bf:5f:de:
24:74:a0:00:e0:26:ef:4e:e2:d3:ec:cf:fe:3f:a1:
83:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:7B:48:65:94:33:55:EE:B1:E2:75:E2:8D:DD:B1:76:4E:FE:E7:9A
X509v3 Authority Key Identifier:
keyid:D2:2F:3B:D0:BA:E6:03:AB:79:06:02:A9:6B:BB:C4:2B:53:22:E8:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0i870LrmA6t5BgKpa7vEK1Mi6I8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:ce:e0:1a:04:0f:df:1d:00:21:fb:87:45:54:11:ae:57:57:
b1:d6:35:c5:a3:91:35:50:a2:6f:78:6d:42:de:2b:5b:c4:06:
42:bc:fb:6a:f4:45:a8:00:21:37:89:15:a9:be:02:bb:8b:a2:
ed:1b:1a:51:1f:47:44:b6:40:f1:26:8b:02:d7:80:e1:87:0c:
b7:ba:c4:7c:7a:73:10:dd:56:df:ab:3d:9b:ba:23:71:fb:ff:
6b:a4:73:b5:a2:a7:40:85:60:d5:94:0c:8a:56:ad:3d:a5:05:
7a:94:fa:5e:c2:9f:db:b3:73:4f:1f:99:6d:6c:2e:21:05:25:
a7:f6:51:cd:0f:dd:da:f9:96:e8:6e:40:7c:d2:37:7c:4a:6c:
67:f8:4a:af:92:c2:99:cf:6f:28:06:5e:8e:d4:5e:b7:c4:80:
39:26:19:76:da:91:b5:ba:03:20:79:ab:1d:75:11:10:33:d2:
af:34:c1:d1:28:37:bb:87:6f:a2:4f:93:38:45:cd:3c:a1:f4:
03:4f:82:a6:3f:8a:f0:03:1c:c8:82:89:d3:70:f4:72:be:c4:
9e:ce:08:74:09:4b:64:61:cb:83:c7:f0:d9:38:20:13:d0:de:
0c:4a:da:48:21:20:6c:1b:4a:52:dc:1d:25:5e:2a:11:6c:7f:
c1:ef:bc:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpMmBi3zFd4qzK8BR8wB0nJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyMmYzYmQwYmFlNjAzYWI3OTA2MDJhOTZiYmJjNDJiNTMy
MmU4OGYwHhcNMjUxMTA0MDIwMDI3WhcNMjUxMTA1MDIwMDI3WjAzMTEwLwYDVQQD
Eyg3MzdiNDg2NTk0MzM1NWVlYjFlMjc1ZTI4ZGRkYjE3NjRlZmVlNzlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkLbZU1lGy6LSqN0eBfIB6gnyo7g9
wAo8dn6S0EmFJhLc1bURkaeNrJBfri2nY/itbb0jEyw/840TmnW0rIcxnX4bLgCF
rq2YXFQBNisj6t2Xlqo+PLk2nRBludxm3nAlj403Yi3sguHGtybH4Quf8jQ3zAtE
fDcv4NExPEgGV/UAfeX5zuxB4e3CM1RbV1HPzAYuhYg1FCRZMrhjb4difkXBdOxy
vPGsB8Ze6c20ahLIHF7LhaCtQZ7yCu7omeMN0qbAF+cx115DKXw39vDEyTepZxLH
RT+PmTV5asPCzcOxVIsYasLWsU/+sSi/X94kdKAA4CbvTuLT7M/+P6GDtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHN7SGWUM1XuseJ14o3dsXZO/ueaMB8GA1UdIwQY
MBaAFNIvO9C65gOreQYCqWu7xCtTIuiPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGk4NzBMcm1BNnQ1QmdLcGE3dkVLMU1pNkk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS82ZTUxY2ItNTE3Zi00Y2IxLWEzYTAt
ZDcyMWJkMmU5ZDUzLzEvMGk4NzBMcm1BNnQ1QmdLcGE3dkVLMU1pNkk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS82ZTUxY2ItNTE3Zi00Y2IxLWEzYTAtZDcyMWJkMmU5ZDUz
LzEvMGk4NzBMcm1BNnQ1QmdLcGE3dkVLMU1pNkk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVM7gGgQP
3x0AIfuHRVQRrldXsdY1xaORNVCib3htQt4rW8QGQrz7avRFqAAhN4kVqb4Cu4ui
7RsaUR9HRLZA8SaLAteA4YcMt7rEfHpzEN1W36s9m7ojcfv/a6RztaKnQIVg1ZQM
ilatPaUFepT6XsKf27NzTx+ZbWwuIQUlp/ZRzQ/d2vmW6G5AfNI3fEpsZ/hKr5LC
mc9vKAZejtRet8SAOSYZdtqRtboDIHmrHXUREDPSrzTB0Sg3u4dvok+TOEXNPKH0
A0+Cpj+K8AMcyIKJ03D0cr7Ens4IdAlLZGHLg8fw2TggE9DeDEraSCEgbBtKUtwd
JV4qEWx/we+8bQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 04:01:14 2025 by rpki-client