Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/468065-2233-4dc7-b95c-a7bb38a1a53d/1/0y0AA2jB1U8Ip3gsB2c7aKk-38U.mft
File: 0y0AA2jB1U8Ip3gsB2c7aKk-38U.mft (raw, json)
Hash identifier: aTE/7djdzOUXKXD9rlrmIJFBH0ijKvwqRsEmUq08Iaw=
Subject key identifier: 33:F2:36:32:58:D0:13:00:1C:E8:9C:20:4D:4B:54:62:88:BA:5A:06
Authority key identifier: D3:2D:00:03:68:C1:D5:4F:08:A7:78:2C:07:67:3B:68:A9:3E:DF:C5
Certificate issuer: /CN=d32d000368c1d54f08a7782c07673b68a93edfc5
Certificate serial: 019A4E18B68E4CC97F32C9AF1D091734CB33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0y0AA2jB1U8Ip3gsB2c7aKk-38U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/468065-2233-4dc7-b95c-a7bb38a1a53d/1/0y0AA2jB1U8Ip3gsB2c7aKk-38U.mft
Manifest number: 1316
Signing time: Tue 04 Nov 2025 09:00:33 +0000
Manifest this update: Tue 04 Nov 2025 09:00:33 +0000
Manifest next update: Wed 05 Nov 2025 09:00:33 +0000
Files and hashes: 1: 0y0AA2jB1U8Ip3gsB2c7aKk-38U.crl (hash: SCwuI7p8fRds9sqy68R7+hdPTWFl1QQinkGGXEx7S6E=)
2: jQ4CExkfR5inS0zDHfJTtnlJ6V8.roa (hash: GXyBOWfkGPF9vLeodoo4anr9TA244Yte3dkyFGm9PtM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/468065-2233-4dc7-b95c-a7bb38a1a53d/1/0y0AA2jB1U8Ip3gsB2c7aKk-38U.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/468065-2233-4dc7-b95c-a7bb38a1a53d/1/0y0AA2jB1U8Ip3gsB2c7aKk-38U.mft
rsync://rpki.ripe.net/repository/DEFAULT/0y0AA2jB1U8Ip3gsB2c7aKk-38U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:b6:8e:4c:c9:7f:32:c9:af:1d:09:17:34:cb:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d32d000368c1d54f08a7782c07673b68a93edfc5
Validity
Not Before: Nov 4 09:00:33 2025 GMT
Not After : Nov 5 09:00:33 2025 GMT
Subject: CN=33f2363258d013001ce89c204d4b546288ba5a06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:ef:a4:90:dc:49:c7:78:1e:99:97:9d:fe:c3:
1e:8f:de:ce:02:f1:5b:db:21:25:35:73:9d:56:9d:
ee:8c:d8:61:a1:26:79:f9:a3:a3:c0:d5:bc:cc:0d:
83:15:af:dd:61:53:f6:c4:8b:01:f4:51:e0:93:e4:
a0:5a:32:69:ff:b9:cf:7c:66:0c:ff:e8:b9:c9:3a:
8c:5f:54:43:76:20:0e:29:93:2a:ab:e3:99:f7:6b:
9b:ea:a2:03:e0:ed:82:bc:ac:4e:8e:bc:c0:4f:22:
2c:2a:d5:9e:49:e9:d7:74:62:1c:a5:ee:0d:c0:e5:
ae:ca:ea:c6:83:a0:d6:2d:09:bd:f7:14:98:ca:54:
32:84:1c:c7:20:6f:7a:0b:cc:86:f2:77:91:a5:5e:
7b:5d:81:d9:b4:52:31:22:f2:ad:4b:a2:1a:76:6f:
b1:5f:d6:0b:0f:c1:16:6b:cb:32:92:86:7c:0a:bf:
fc:3a:49:ea:ee:ea:26:e9:b5:5c:0e:1c:cf:ac:19:
26:6c:e9:fc:e4:75:40:de:53:03:22:97:e1:19:80:
6a:c6:fd:91:b3:60:c6:ed:1a:f6:bf:55:c1:b8:59:
1d:1f:2d:93:45:62:b1:77:e5:3c:d7:c1:6c:4c:00:
11:fb:33:e3:e6:73:8f:4f:d8:01:ee:48:08:55:fa:
0a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:F2:36:32:58:D0:13:00:1C:E8:9C:20:4D:4B:54:62:88:BA:5A:06
X509v3 Authority Key Identifier:
keyid:D3:2D:00:03:68:C1:D5:4F:08:A7:78:2C:07:67:3B:68:A9:3E:DF:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0y0AA2jB1U8Ip3gsB2c7aKk-38U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/468065-2233-4dc7-b95c-a7bb38a1a53d/1/0y0AA2jB1U8Ip3gsB2c7aKk-38U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/468065-2233-4dc7-b95c-a7bb38a1a53d/1/0y0AA2jB1U8Ip3gsB2c7aKk-38U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:f5:ec:37:e0:60:96:af:0c:01:50:52:d0:a7:2a:32:a6:93:
a3:75:11:b0:c9:d3:0b:9a:c0:cf:12:d2:02:54:9a:0d:8d:19:
b7:4f:17:4a:be:80:12:c1:14:2c:b7:68:bd:35:d5:97:cc:cc:
b9:3e:2a:6e:a1:22:e5:7c:66:24:c1:e2:be:77:53:96:9b:87:
5c:14:2b:20:02:94:88:3b:a1:f5:ea:c8:00:1c:dd:5c:82:4c:
37:34:b5:86:19:fd:13:7f:73:36:1f:17:65:81:9c:03:5e:ad:
ea:32:c0:6f:7b:44:96:71:99:d6:08:87:c8:3d:1f:59:92:28:
cb:2e:c3:d4:db:8d:72:82:cf:f8:bf:e7:43:dc:3b:87:77:3a:
29:7f:67:e5:18:d4:27:94:e4:6e:10:ab:96:d9:5f:78:52:6e:
55:03:f4:c6:ac:92:35:dc:24:4b:60:90:17:19:1c:8b:4d:d1:
a8:49:f9:b9:a2:f6:82:39:3a:a5:13:0f:9e:0b:78:f9:cf:29:
07:4b:58:4d:4c:25:f3:fa:d5:dc:8f:03:fe:61:d8:33:d1:04:
9b:a6:26:4f:55:79:76:79:b3:d2:b7:ac:d2:97:67:51:ee:0e:
95:38:d3:78:c3:50:6c:5a:18:31:14:57:1c:7b:71:d1:92:c3:
bf:12:3e:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:08:15 2025 by rpki-client