Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/0ca4df-2e06-4406-9688-78f02805c709/1/dIZPUCPsYmPvnxb5AYf18oBh0RU.mft
File: dIZPUCPsYmPvnxb5AYf18oBh0RU.mft (raw, json)
Hash identifier: HOMFRn4MMoNB3CWN0VzrZXBin22LRUUn9Q3mpduR0aY=
Subject key identifier: CC:93:8E:E9:34:11:24:99:6B:52:48:F0:80:4B:6D:4E:EB:A3:1E:6B
Authority key identifier: 74:86:4F:50:23:EC:62:63:EF:9F:16:F9:01:87:F5:F2:80:61:D1:15
Certificate issuer: /CN=74864f5023ec6263ef9f16f90187f5f28061d115
Certificate serial: 019A503E4212CC295BA5981A6F2AD29FC0FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dIZPUCPsYmPvnxb5AYf18oBh0RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/0ca4df-2e06-4406-9688-78f02805c709/1/dIZPUCPsYmPvnxb5AYf18oBh0RU.mft
Manifest number: 0CFB
Signing time: Tue 04 Nov 2025 19:00:48 +0000
Manifest this update: Tue 04 Nov 2025 19:00:48 +0000
Manifest next update: Wed 05 Nov 2025 19:00:48 +0000
Files and hashes: 1: dIZPUCPsYmPvnxb5AYf18oBh0RU.crl (hash: R1xZtkvpGB9w6KxZJaPglk2SMxhypxPR/MZNyTeydMw=)
2: vj_VJ7c4UiwkU_5yyGsly7O6qIk.roa (hash: RoD9r1uYXNwcvEQVZCci6nqFAbGm9X9wv8JUg9I5naM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/0ca4df-2e06-4406-9688-78f02805c709/1/dIZPUCPsYmPvnxb5AYf18oBh0RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/0ca4df-2e06-4406-9688-78f02805c709/1/dIZPUCPsYmPvnxb5AYf18oBh0RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/dIZPUCPsYmPvnxb5AYf18oBh0RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3e:42:12:cc:29:5b:a5:98:1a:6f:2a:d2:9f:c0:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74864f5023ec6263ef9f16f90187f5f28061d115
Validity
Not Before: Nov 4 19:00:48 2025 GMT
Not After : Nov 5 19:00:48 2025 GMT
Subject: CN=cc938ee9341124996b5248f0804b6d4eeba31e6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:2a:95:2c:06:d5:17:3b:d8:69:c0:fc:d2:41:
1a:4d:a4:98:6d:11:e2:91:e5:2b:d2:9d:a4:db:60:
18:0b:03:e2:5a:93:d3:b4:d9:1b:02:ca:af:e5:87:
a9:0c:27:b6:63:12:e8:ea:01:0e:32:18:a1:10:b6:
91:99:11:64:c4:b9:d7:72:b8:b4:0b:05:08:ee:1b:
4b:da:0f:32:9e:67:16:d4:f6:a1:d1:f4:e9:3e:74:
0a:8a:b6:d8:36:df:22:5b:ee:60:ab:3c:7e:46:57:
db:21:c2:9d:98:73:30:d0:e4:23:91:3a:b1:ea:e1:
47:22:07:47:60:b2:22:d3:a6:8c:aa:e7:0e:fb:12:
3a:af:31:00:7a:2d:05:d4:32:c8:3d:d1:a0:a3:8a:
e8:1d:22:e0:9f:67:8b:83:79:fa:94:c4:24:a4:4d:
c9:98:f5:6a:dc:f9:34:44:12:e8:11:4b:56:17:5b:
d1:b3:60:c7:ed:7e:c2:95:03:b3:be:de:c4:a1:7d:
16:67:f8:8d:f0:80:ad:46:a7:4f:bd:28:4d:06:39:
83:6c:17:c9:d9:95:c9:d6:62:a9:cf:76:ef:c9:49:
db:3f:a6:ff:08:7a:5e:22:6a:02:63:34:b9:cb:d5:
8d:ed:41:db:ae:08:96:25:23:52:cb:d0:b5:6e:aa:
a5:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:93:8E:E9:34:11:24:99:6B:52:48:F0:80:4B:6D:4E:EB:A3:1E:6B
X509v3 Authority Key Identifier:
keyid:74:86:4F:50:23:EC:62:63:EF:9F:16:F9:01:87:F5:F2:80:61:D1:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dIZPUCPsYmPvnxb5AYf18oBh0RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0ca4df-2e06-4406-9688-78f02805c709/1/dIZPUCPsYmPvnxb5AYf18oBh0RU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0ca4df-2e06-4406-9688-78f02805c709/1/dIZPUCPsYmPvnxb5AYf18oBh0RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:12:95:4d:53:38:33:59:08:3e:b6:ad:c7:d0:d0:ba:6d:a7:
c8:9f:e9:7b:5c:ab:a8:47:f3:39:38:d7:b1:4e:6b:10:12:50:
55:97:80:a1:37:f2:01:94:ea:ec:c0:16:17:8a:7a:40:a7:28:
c7:a3:5e:f7:60:73:3e:fe:fa:97:0f:91:bb:fc:6b:2f:2e:26:
f6:2c:de:ef:6b:7f:4c:ae:3b:7a:98:a2:ec:aa:32:63:33:63:
ce:11:f7:84:89:b3:cb:99:26:27:25:16:c8:9a:28:83:2b:6b:
52:f5:ea:3b:47:2a:c2:9a:10:1b:01:22:82:ed:e5:73:c1:95:
0c:38:2a:d5:be:73:c4:c0:54:3e:17:e6:92:4c:1b:c0:f9:ce:
d7:76:6e:1f:7a:86:8d:db:09:fd:10:80:38:b4:2d:73:3b:c0:
4e:9c:a4:c5:79:f2:24:3a:40:f4:5b:40:e9:c6:89:90:60:cf:
d2:f5:38:47:9c:da:6a:b0:7f:b6:da:5e:1d:c6:1a:66:4c:6d:
47:2c:05:1d:4d:54:a7:28:12:3b:9a:6a:18:46:86:86:a1:b4:
02:fb:cb:a8:af:f2:bb:94:7c:25:c8:0a:e7:f4:18:13:85:f8:
b0:b7:57:b7:36:91:2d:c1:1b:a2:d0:ee:45:a3:51:16:a9:f9:
af:eb:c5:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:24:00 2025 by rpki-client