Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.mft
File: Z31OosAWzieXr3rrc30TKHVmnxI.mft (raw, json)
Hash identifier: to1sYfyU4C9NaO+ICU7vv4gnqNXEqtmhrTOan54NAeA=
Subject key identifier: 0E:0D:B2:16:BB:81:0A:5A:C2:A9:A5:94:DE:71:65:9A:B2:4A:35:7A
Authority key identifier: 67:7D:4E:A2:C0:16:CE:27:97:AF:7A:EB:73:7D:13:28:75:66:9F:12
Certificate issuer: /CN=677d4ea2c016ce2797af7aeb737d132875669f12
Certificate serial: 019A4F2B8331989CCA054C1AB6FDB729D4E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z31OosAWzieXr3rrc30TKHVmnxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.mft
Manifest number: 0C1C
Signing time: Tue 04 Nov 2025 14:00:42 +0000
Manifest this update: Tue 04 Nov 2025 14:00:42 +0000
Manifest next update: Wed 05 Nov 2025 14:00:42 +0000
Files and hashes: 1: Z31OosAWzieXr3rrc30TKHVmnxI.crl (hash: SnA/CRcw+Cuip7GRhtLz028wlDOZPT1h2fBj8lWw7l8=)
2: dWBxYutd_7kq_EDB_JG4WIKLpyo.roa (hash: xSMt2hTKh36QhaSaerON9NeweGqlZocu9OE/cvG7CnM=)
3: sRhEXZaGwXqtptay-RphiAgSVt4.roa (hash: Ig5fF+EKhddnEzfin5M+0IE9DvCIWQxASy6NfoLnblk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z31OosAWzieXr3rrc30TKHVmnxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:83:31:98:9c:ca:05:4c:1a:b6:fd:b7:29:d4:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=677d4ea2c016ce2797af7aeb737d132875669f12
Validity
Not Before: Nov 4 14:00:42 2025 GMT
Not After : Nov 5 14:00:42 2025 GMT
Subject: CN=0e0db216bb810a5ac2a9a594de71659ab24a357a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:cf:8f:90:8a:ad:9e:34:06:8e:d3:b0:8c:dd:
f0:0d:18:70:6e:cb:50:5a:81:86:a1:05:47:ea:1a:
1f:58:73:47:5c:cf:37:b0:84:3c:5f:67:c4:98:ba:
be:17:bf:ec:97:17:f2:72:7b:3c:af:da:35:af:93:
85:88:08:71:d1:b0:5b:e9:e1:20:3b:01:17:80:e3:
32:ba:d0:d3:d4:ce:04:dd:53:0a:0e:27:64:f9:db:
77:6e:16:ae:74:c3:1f:d7:75:83:e6:80:5c:e1:45:
c3:bf:4f:c1:80:31:ee:fa:30:45:b0:a9:26:a7:89:
ed:15:ec:53:85:cc:4b:9a:a3:b2:4d:b1:0c:40:49:
d6:00:b3:5c:3f:fc:75:8e:27:31:54:b1:f6:b9:e9:
f1:36:18:3b:88:24:30:a6:90:22:bc:e1:3f:9e:73:
17:b1:c9:08:44:6a:54:37:ae:47:56:66:1b:ad:ba:
6e:80:a5:c9:fa:b5:e4:32:1a:01:d1:b7:0f:4c:ef:
84:c3:87:81:31:2c:dd:b1:e3:60:99:f9:16:ef:e1:
47:78:d6:bd:5d:6c:32:6f:e1:a2:99:03:8d:81:e9:
d3:ec:ab:a5:0e:11:ac:6a:85:76:47:b8:c1:a4:7e:
59:50:ca:4a:fb:ad:90:4d:96:3c:a8:fd:95:2f:81:
0a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:0D:B2:16:BB:81:0A:5A:C2:A9:A5:94:DE:71:65:9A:B2:4A:35:7A
X509v3 Authority Key Identifier:
keyid:67:7D:4E:A2:C0:16:CE:27:97:AF:7A:EB:73:7D:13:28:75:66:9F:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z31OosAWzieXr3rrc30TKHVmnxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:a7:19:be:89:71:c4:75:0d:55:51:00:36:7d:66:0c:54:48:
24:23:16:a1:ce:85:ec:fa:f5:25:0c:5c:40:e5:31:1c:e6:2a:
d7:11:28:22:b8:30:89:03:0a:0a:9d:27:2e:c9:6c:2c:8c:60:
f1:0c:25:7c:f2:49:a4:68:83:49:65:3e:bf:c8:9a:28:c4:cb:
4a:63:d7:ba:be:26:a3:eb:a0:73:d3:2b:90:64:d0:00:5f:b0:
2f:ea:f8:d5:d5:7b:55:20:9f:5b:b3:5f:6f:8e:f9:4f:7f:ed:
88:8b:24:8d:b8:53:b8:1f:73:d3:e0:d4:56:4c:a7:32:a4:ab:
ce:66:6d:72:74:52:66:34:67:b1:8c:b3:be:d6:16:ea:04:94:
4d:db:1b:a8:1f:8c:fa:64:99:0f:1e:e3:fc:eb:aa:3e:64:11:
0a:23:81:7b:d5:19:17:35:f9:2c:a5:8e:4f:c0:86:48:be:ae:
c7:32:b3:9e:3d:74:07:35:a2:73:1e:a9:44:7c:1a:ab:83:1d:
c3:57:12:ca:41:12:c3:7b:8f:6f:a0:2d:e4:d9:d1:ad:3c:e4:
89:a5:9a:26:56:69:ce:4f:bb:5e:33:93:4a:21:f6:7c:e3:0d:
74:d7:c8:ab:85:b0:21:65:60:9f:4a:c0:72:6d:7e:dd:f8:cc:
6b:68:28:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:06:45 2025 by rpki-client