Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/0dvzH9k3nKtcUK_TkqLukFcYg18.mft
File: 0dvzH9k3nKtcUK_TkqLukFcYg18.mft (raw, json)
Hash identifier: tV6c4dEvlXKXZiNaX9N7/DX4MkViSynttTmaKNVxwJE=
Subject key identifier: F2:5D:C2:57:08:7B:FF:44:CE:2E:E1:AF:59:FB:D3:FD:D0:2F:28:F9
Authority key identifier: D1:DB:F3:1F:D9:37:9C:AB:5C:50:AF:D3:92:A2:EE:90:57:18:83:5F
Certificate issuer: /CN=d1dbf31fd9379cab5c50afd392a2ee905718835f
Certificate serial: 019A00355975C530547FB0690B61DAC1D849
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0dvzH9k3nKtcUK_TkqLukFcYg18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/0dvzH9k3nKtcUK_TkqLukFcYg18.mft
Manifest number: 11FA
Signing time: Mon 20 Oct 2025 06:01:27 +0000
Manifest this update: Mon 20 Oct 2025 06:01:27 +0000
Manifest next update: Tue 21 Oct 2025 06:01:27 +0000
Files and hashes: 1: 0dvzH9k3nKtcUK_TkqLukFcYg18.crl (hash: OyAOdNnPDBrdrRn+/AVQGrCvyOTVZxRTWDBygINplmM=)
2: jM6ObOeKnGJ-XMKGH2l4W5ZCd2A.roa (hash: KTQ2TAHXzAzojs4IsYPpcpBSdUKcZYE1gqliIFvrHcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/0dvzH9k3nKtcUK_TkqLukFcYg18.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/0dvzH9k3nKtcUK_TkqLukFcYg18.mft
rsync://rpki.ripe.net/repository/DEFAULT/0dvzH9k3nKtcUK_TkqLukFcYg18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 06:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:59:75:c5:30:54:7f:b0:69:0b:61:da:c1:d8:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1dbf31fd9379cab5c50afd392a2ee905718835f
Validity
Not Before: Oct 20 06:01:27 2025 GMT
Not After : Oct 21 06:01:27 2025 GMT
Subject: CN=f25dc257087bff44ce2ee1af59fbd3fdd02f28f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b8:4f:44:06:ed:10:c8:f1:df:20:cb:50:e4:
80:a4:e3:44:22:bb:bb:91:e3:1d:d3:c6:78:73:2a:
b1:66:7c:1f:7a:5c:d8:30:c8:23:7b:4b:bb:a5:36:
88:c5:7c:13:a3:bf:74:58:33:0c:0a:be:76:cc:8a:
04:1a:1f:6d:f7:44:d1:0f:bc:70:86:8e:e2:a0:9a:
89:9e:b5:37:f9:1f:93:4e:ca:a3:29:22:90:5f:53:
1b:a9:1b:aa:d9:ca:39:06:47:f5:0a:0d:63:62:9a:
9d:74:3e:72:3d:b1:d7:89:6d:05:9b:97:46:ab:05:
be:c1:7c:dd:7b:94:4f:bb:e9:76:ab:bd:7a:34:8e:
d1:1a:2e:46:0a:e7:7e:f7:d6:b5:f8:2e:97:78:9a:
8c:f8:b0:5c:44:6d:85:93:44:27:fe:58:2e:83:02:
ee:c7:bf:ec:d4:29:a7:d6:c8:f2:2f:1a:d4:f8:3f:
c4:7a:ad:37:7a:2f:74:19:7d:04:bc:2f:60:a9:2f:
e1:a7:c4:d7:c4:29:96:60:62:c8:8e:11:c6:81:58:
66:c2:6c:93:40:21:74:79:c5:0e:90:16:49:a7:de:
34:03:6d:1e:8d:d7:02:b8:ec:de:09:38:4c:c3:d0:
bd:91:ac:b8:53:e4:c5:17:9b:2d:e2:9e:f7:86:7a:
e2:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:5D:C2:57:08:7B:FF:44:CE:2E:E1:AF:59:FB:D3:FD:D0:2F:28:F9
X509v3 Authority Key Identifier:
keyid:D1:DB:F3:1F:D9:37:9C:AB:5C:50:AF:D3:92:A2:EE:90:57:18:83:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0dvzH9k3nKtcUK_TkqLukFcYg18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/0dvzH9k3nKtcUK_TkqLukFcYg18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/0dvzH9k3nKtcUK_TkqLukFcYg18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:e6:f4:fd:28:4f:a7:df:49:40:7c:e2:98:e1:0b:6e:a6:85:
e2:eb:8f:de:d4:e6:9f:59:8e:c3:61:51:4c:74:75:7d:06:60:
3c:5a:d5:4c:a4:55:e2:73:8f:95:73:1d:64:53:71:57:d0:82:
30:f9:65:d3:29:78:01:37:62:78:e0:84:65:82:73:48:4b:84:
32:4e:25:68:6c:0f:9c:5d:99:29:45:63:ac:69:5b:0b:e8:1f:
bb:74:4b:b7:27:c3:be:8d:7f:5e:6f:2e:08:c2:68:85:60:52:
58:8a:ff:d0:07:68:d0:fa:71:95:b3:da:a7:d0:7e:52:41:f9:
59:2c:d4:27:1c:c1:b4:c7:0d:70:a6:56:bf:53:ee:aa:6f:85:
49:5f:4e:85:af:62:75:fd:c1:cd:8a:72:84:97:5b:0c:86:93:
b5:58:f1:1a:fb:db:70:23:f0:22:c7:6f:23:55:b7:6c:fa:43:
ab:87:4c:63:58:ed:10:46:b1:91:40:19:10:f2:83:70:98:20:
0a:e9:cf:ab:5a:45:fa:78:fd:1f:4d:0a:db:0d:6b:43:e0:5a:
10:ea:98:fb:28:7e:65:92:2e:2c:32:3f:2b:d6:6f:57:3e:a1:
00:e5:33:47:c0:a3:bf:15:9e:03:bc:59:6e:37:f6:4d:0f:81:
cf:bb:eb:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:20:58 2025 by rpki-client