Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/6ffcd2-5bf1-41e2-86a8-7bc1e4f56c88/1/0rvJBVXW0NNDK6u5W2DN7upYD1g.mft
File: 0rvJBVXW0NNDK6u5W2DN7upYD1g.mft (raw, json)
Hash identifier: 9M3ZNxaovnuVaKkdZ/c9rs4tme8rJdazwnssP0ienk0=
Subject key identifier: E6:18:06:57:CE:50:78:DF:C9:F7:F8:60:4A:48:C7:2F:0B:09:D8:1C
Authority key identifier: D2:BB:C9:05:55:D6:D0:D3:43:2B:AB:B9:5B:60:CD:EE:EA:58:0F:58
Certificate issuer: /CN=d2bbc90555d6d0d3432babb95b60cdeeea580f58
Certificate serial: 019A0222AE3B58858FF92E22527429A41586
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0rvJBVXW0NNDK6u5W2DN7upYD1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/6ffcd2-5bf1-41e2-86a8-7bc1e4f56c88/1/0rvJBVXW0NNDK6u5W2DN7upYD1g.mft
Manifest number: 157A
Signing time: Mon 20 Oct 2025 15:00:18 +0000
Manifest this update: Mon 20 Oct 2025 15:00:18 +0000
Manifest next update: Tue 21 Oct 2025 15:00:18 +0000
Files and hashes: 1: 0rvJBVXW0NNDK6u5W2DN7upYD1g.crl (hash: DJMLZNln4kA4urIPmKPpMn6R+jfpv/RukPjHge7B3hk=)
2: mSUuaNY6UdkYm0lDvwtHqv3NvLU.roa (hash: omo8awS6hh3Xi+tQ6clfUM9W5KqXeL6pdkyIRs6JAvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/6ffcd2-5bf1-41e2-86a8-7bc1e4f56c88/1/0rvJBVXW0NNDK6u5W2DN7upYD1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/6ffcd2-5bf1-41e2-86a8-7bc1e4f56c88/1/0rvJBVXW0NNDK6u5W2DN7upYD1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/0rvJBVXW0NNDK6u5W2DN7upYD1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:22:ae:3b:58:85:8f:f9:2e:22:52:74:29:a4:15:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2bbc90555d6d0d3432babb95b60cdeeea580f58
Validity
Not Before: Oct 20 15:00:18 2025 GMT
Not After : Oct 21 15:00:18 2025 GMT
Subject: CN=e6180657ce5078dfc9f7f8604a48c72f0b09d81c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:33:b6:51:62:df:54:da:61:e7:e8:39:3d:23:
82:5e:ea:1e:8b:d0:dc:bc:6c:94:1e:d9:9c:32:9a:
60:d4:4d:19:81:7e:c2:2c:80:e3:15:19:7f:27:07:
cd:e7:5b:59:e9:48:7e:60:be:de:fc:99:65:04:b8:
1d:0c:49:9e:08:33:de:d7:53:a6:5c:2a:fd:3d:b8:
16:e4:2f:47:e9:7b:24:72:18:bc:16:45:1e:e1:d8:
34:49:2d:c0:7b:9c:ed:cb:1f:bb:c3:b9:a8:11:c2:
1d:7e:c4:8e:d8:cc:fa:26:e0:19:18:91:9d:39:d8:
81:71:5f:5f:a3:1e:6b:7f:bf:9d:4b:06:74:5f:46:
f3:ac:ac:5d:5e:e9:ad:4a:70:0a:bc:60:7a:0d:28:
f6:fd:19:2a:87:b8:61:f8:2d:18:6f:d8:9c:e0:e7:
5a:06:9e:87:39:f9:33:df:3b:72:bd:bf:6a:38:09:
f9:42:81:c3:50:e8:59:40:fb:d4:66:74:d5:55:65:
86:cc:5a:c6:4a:dd:e9:fc:ba:02:5d:e8:3f:59:86:
9d:62:30:b9:b7:d1:63:e4:59:e8:c0:e2:63:e3:40:
43:85:8b:f0:d9:73:32:05:4f:11:41:c4:9b:58:d9:
ab:d7:dc:3d:9b:0e:cd:20:a6:cc:62:90:56:65:96:
0e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:18:06:57:CE:50:78:DF:C9:F7:F8:60:4A:48:C7:2F:0B:09:D8:1C
X509v3 Authority Key Identifier:
keyid:D2:BB:C9:05:55:D6:D0:D3:43:2B:AB:B9:5B:60:CD:EE:EA:58:0F:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0rvJBVXW0NNDK6u5W2DN7upYD1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6ffcd2-5bf1-41e2-86a8-7bc1e4f56c88/1/0rvJBVXW0NNDK6u5W2DN7upYD1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6ffcd2-5bf1-41e2-86a8-7bc1e4f56c88/1/0rvJBVXW0NNDK6u5W2DN7upYD1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:ed:8b:d4:bf:eb:97:58:b6:d0:04:ed:b5:91:4f:ab:d6:c0:
5a:a3:6f:74:4a:62:a8:fa:e0:60:01:92:33:e9:16:4b:a4:53:
57:9c:e2:48:cd:8d:c2:ab:a0:d2:0d:b8:3f:32:45:d2:28:f2:
34:8a:78:5b:f7:2f:4d:8c:fe:87:26:87:9b:f4:34:bd:87:57:
20:f0:ce:a8:87:ef:d3:99:f8:c0:58:08:f9:e1:8a:41:ef:f0:
81:af:82:35:07:89:ea:30:94:7c:26:81:a7:89:f6:f1:9c:c6:
08:c1:1f:ac:20:26:52:0a:0a:ba:bc:ba:b2:04:b8:b9:d3:b0:
a3:01:6a:97:ce:a3:ac:31:57:3c:e9:4a:ef:0e:81:81:9a:0b:
8e:af:43:4a:cd:9d:ae:e1:59:2b:4d:e9:3b:e3:cd:45:f2:0d:
6d:a1:22:99:c9:1e:fa:fa:42:35:85:a6:e4:ef:93:0e:6a:47:
aa:35:91:d3:35:16:5e:44:c2:a0:34:0c:10:57:1e:81:d2:27:
83:61:71:53:5f:4a:8c:09:4b:59:cb:ca:e1:1a:05:56:4c:ec:
f7:42:03:8f:79:96:67:58:34:6d:a7:7c:43:39:0c:f3:5f:7f:
ca:a9:ad:02:2c:5b:89:49:34:7e:57:50:f0:47:9d:7a:53:b2:
02:90:56:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:12:02 2025 by rpki-client