Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/136b3f-459e-4a96-a4ab-3b990878a52b/1/0MzQmlS_pjFBmXzWU7d7yZOS72I.mft
File: 0MzQmlS_pjFBmXzWU7d7yZOS72I.mft (raw, json)
Hash identifier: 2bxV0/vPvlGIKb5gQzocqKstXZ5sJBB/LScweoxfmy4=
Subject key identifier: 08:32:37:56:E4:AD:EC:FE:01:59:69:EE:1E:55:EC:CC:44:DA:DF:6E
Authority key identifier: D0:CC:D0:9A:54:BF:A6:31:41:99:7C:D6:53:B7:7B:C9:93:92:EF:62
Certificate issuer: /CN=d0ccd09a54bfa63141997cd653b77bc99392ef62
Certificate serial: 019A503DFC70D5B2EF52C2A1454F33725485
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0MzQmlS_pjFBmXzWU7d7yZOS72I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/136b3f-459e-4a96-a4ab-3b990878a52b/1/0MzQmlS_pjFBmXzWU7d7yZOS72I.mft
Manifest number: 091F
Signing time: Tue 04 Nov 2025 19:00:30 +0000
Manifest this update: Tue 04 Nov 2025 19:00:30 +0000
Manifest next update: Wed 05 Nov 2025 19:00:30 +0000
Files and hashes: 1: 0MzQmlS_pjFBmXzWU7d7yZOS72I.crl (hash: yRkMUrf75DQBtAj/1KXkkcIxFH2XxeeBVMfIvEkO4og=)
2: DqE8gRgoYoMtwrum6k0T5AcgbA0.roa (hash: 7aUKY9kAGmruCwUgSEXbHojzDkwM52NN/3MTuZeZTP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/136b3f-459e-4a96-a4ab-3b990878a52b/1/0MzQmlS_pjFBmXzWU7d7yZOS72I.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/136b3f-459e-4a96-a4ab-3b990878a52b/1/0MzQmlS_pjFBmXzWU7d7yZOS72I.mft
rsync://rpki.ripe.net/repository/DEFAULT/0MzQmlS_pjFBmXzWU7d7yZOS72I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3d:fc:70:d5:b2:ef:52:c2:a1:45:4f:33:72:54:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0ccd09a54bfa63141997cd653b77bc99392ef62
Validity
Not Before: Nov 4 19:00:30 2025 GMT
Not After : Nov 5 19:00:30 2025 GMT
Subject: CN=08323756e4adecfe015969ee1e55eccc44dadf6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e3:bf:e2:64:81:00:c9:b5:d9:b0:86:8a:09:
ef:c5:5d:37:cb:3a:76:2a:c9:5e:66:ef:0a:d9:83:
eb:1e:2a:6a:a3:80:e5:73:83:d0:be:89:23:5c:80:
fe:a7:39:0a:2e:d8:f3:fe:8d:86:00:70:a6:c1:1f:
d5:0b:ab:d4:e2:3f:3e:75:c9:9d:a7:fd:08:d9:8f:
42:dc:0a:20:c5:17:4b:93:3e:e7:5d:bf:71:44:2e:
53:fa:14:e2:78:17:09:ba:ca:69:99:16:70:b4:15:
06:d0:8c:30:2f:8f:8f:40:7b:ea:ad:43:a6:45:d2:
35:32:24:eb:29:67:35:54:57:78:e2:76:28:53:26:
d3:18:6e:dc:0f:9f:76:df:02:60:2b:6b:05:cf:10:
78:9c:77:ed:cc:c3:5a:b1:2c:b2:32:55:db:bf:c3:
1d:59:90:dd:f7:a4:42:8e:bf:e8:8c:13:38:26:71:
b6:44:89:73:a1:28:2f:12:ea:e4:c5:76:07:aa:5e:
d7:64:d0:88:55:85:33:62:3e:f5:be:2e:c2:9d:be:
24:85:24:46:33:37:65:c3:e2:a6:42:76:e0:6e:72:
32:4c:6f:52:0a:a3:2e:93:9e:82:61:a2:14:06:4f:
4c:a0:2a:50:b4:8f:a8:e5:f1:d5:b5:1b:29:f9:d4:
59:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:32:37:56:E4:AD:EC:FE:01:59:69:EE:1E:55:EC:CC:44:DA:DF:6E
X509v3 Authority Key Identifier:
keyid:D0:CC:D0:9A:54:BF:A6:31:41:99:7C:D6:53:B7:7B:C9:93:92:EF:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0MzQmlS_pjFBmXzWU7d7yZOS72I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/136b3f-459e-4a96-a4ab-3b990878a52b/1/0MzQmlS_pjFBmXzWU7d7yZOS72I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/136b3f-459e-4a96-a4ab-3b990878a52b/1/0MzQmlS_pjFBmXzWU7d7yZOS72I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:e4:80:39:ab:67:57:ae:73:3f:2a:92:54:83:e8:8a:a5:98:
e6:fd:c7:13:67:62:b8:01:5f:37:ce:b7:df:15:e5:2d:bc:39:
f8:bd:56:8d:09:4d:89:d8:ea:27:1f:34:c1:d1:57:77:e9:86:
5b:74:05:c3:45:d4:3a:45:db:5d:19:83:3d:20:7c:81:37:e9:
04:19:20:5f:8a:f2:53:ff:71:d2:c0:50:32:24:97:fa:97:cd:
ed:ed:98:7c:0b:6e:77:b3:3c:06:3f:3a:3c:f7:1f:d1:d7:4f:
a0:f9:de:0a:68:88:bb:24:6f:89:3a:8f:55:85:2a:a1:4e:51:
62:19:cc:25:49:d1:15:8f:b0:77:f3:dc:9d:ad:21:00:bf:8b:
88:18:72:8a:a3:77:a7:d8:62:84:52:4a:0d:5d:58:4d:6f:10:
51:cf:a4:c4:e1:ef:8c:39:34:52:cb:da:a9:5a:fe:09:6d:18:
da:47:d9:22:a1:e6:ec:ea:de:64:ff:4e:58:60:b1:54:ba:39:
87:96:f2:3f:04:f2:f5:a7:e3:48:0d:4b:13:f1:29:24:de:e9:
f2:57:93:65:1b:b9:35:b2:27:be:7d:b7:6c:91:c6:7d:69:4c:
e3:c9:97:3d:91:d4:a8:1b:54:9c:43:39:db:df:ca:f6:9b:af:
44:9b:28:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:38:57 2025 by rpki-client