Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.mft
File: 0z4TEAje9wWkF_DUDRSKNvJaGjk.mft (raw, json)
Hash identifier: 2O3X1HCA3hHgPF+zmJNp9mcLW4iaEnh2oLa3OBOPKLI=
Subject key identifier: 33:9A:5A:70:F2:AA:41:FD:1E:69:A3:CF:0D:B7:36:53:55:BD:85:C5
Authority key identifier: D3:3E:13:10:08:DE:F7:05:A4:17:F0:D4:0D:14:8A:36:F2:5A:1A:39
Certificate issuer: /CN=d33e131008def705a417f0d40d148a36f25a1a39
Certificate serial: 019A4D744765F8D27B87C90ABEF68E4211B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0z4TEAje9wWkF_DUDRSKNvJaGjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.mft
Manifest number: 1107
Signing time: Tue 04 Nov 2025 06:00:57 +0000
Manifest this update: Tue 04 Nov 2025 06:00:57 +0000
Manifest next update: Wed 05 Nov 2025 06:00:57 +0000
Files and hashes: 1: 0z4TEAje9wWkF_DUDRSKNvJaGjk.crl (hash: LPitxcfi8/ygKIRBk7PoqlAALnI63lfAFUUNjNqWA6c=)
2: A2oqQd54ayoxJnfGY2DGuTLyEzs.roa (hash: cZ73AwWXPJWCopyDomwFy40Gv6sNmCFfCzUBeTVXsq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/0z4TEAje9wWkF_DUDRSKNvJaGjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:47:65:f8:d2:7b:87:c9:0a:be:f6:8e:42:11:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d33e131008def705a417f0d40d148a36f25a1a39
Validity
Not Before: Nov 4 06:00:57 2025 GMT
Not After : Nov 5 06:00:57 2025 GMT
Subject: CN=339a5a70f2aa41fd1e69a3cf0db7365355bd85c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1f:b2:3c:88:2e:31:46:1b:2a:af:cd:dc:11:
e7:67:c2:fb:ae:de:62:ee:a3:58:9c:30:73:df:8a:
f7:46:bc:13:bd:d3:d1:fb:ae:97:c6:b7:58:95:b6:
ae:32:b8:cc:50:63:ec:d4:c4:e7:48:b5:39:22:9e:
3b:5c:84:c4:66:1c:6a:a4:4a:aa:a4:6b:52:11:76:
36:6c:b6:a0:d8:57:7d:25:55:67:03:1c:a5:99:44:
46:7d:e7:bc:5e:19:01:82:e0:21:60:7b:29:9d:42:
40:68:c7:3d:94:61:2c:61:92:98:21:52:24:90:22:
94:ff:3b:10:bb:11:7c:3c:22:52:6e:b4:db:3e:d0:
2b:13:7c:2f:c7:bf:3f:ae:63:3d:d8:9c:a4:e5:6a:
08:45:21:e0:6e:2a:28:56:1d:6d:5c:17:2d:05:6e:
15:2a:9e:b9:4b:00:85:57:c3:72:05:2a:3e:0a:17:
7c:c4:ff:0a:75:f4:83:dc:15:8d:27:17:2f:31:5f:
88:08:75:44:60:00:3f:31:55:d0:37:61:24:3b:3a:
2f:dc:7b:bf:4f:5c:1e:45:bf:da:cd:37:77:ff:bf:
31:ee:96:58:96:55:c4:e2:a8:a7:40:ff:20:b3:46:
9f:0f:13:d1:e8:b4:3f:30:46:5e:6c:66:6e:ad:b6:
40:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:9A:5A:70:F2:AA:41:FD:1E:69:A3:CF:0D:B7:36:53:55:BD:85:C5
X509v3 Authority Key Identifier:
keyid:D3:3E:13:10:08:DE:F7:05:A4:17:F0:D4:0D:14:8A:36:F2:5A:1A:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0z4TEAje9wWkF_DUDRSKNvJaGjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:9e:29:a9:42:b0:03:79:d8:e7:01:0d:2b:90:53:88:d6:d2:
91:d4:72:b5:f3:6a:7f:c4:ef:52:1d:4d:71:e2:85:8c:88:ce:
fc:7d:58:f1:a0:d1:e4:46:9a:b4:63:5d:80:89:cb:44:f5:6c:
e6:7d:7b:f8:e7:38:a3:98:32:41:ad:02:c5:e8:c3:95:2f:55:
40:0b:41:0f:64:42:61:b1:bd:43:18:e7:9c:b4:93:a3:2a:d8:
2f:55:9c:05:2c:8a:ae:28:01:7a:6d:3a:8a:48:69:f1:f0:64:
a8:b2:9d:6c:00:cc:91:5a:00:52:c7:08:20:aa:42:26:b7:54:
97:ff:73:d0:d9:2a:bc:0c:65:f1:d4:77:fa:80:01:c8:c0:82:
e1:3c:32:7c:73:3a:a3:33:97:1c:b8:83:e4:cc:bd:02:6c:38:
9b:e5:be:91:5c:89:43:f5:0a:ae:b2:60:a4:52:87:88:c3:d4:
67:c0:eb:0a:c4:8b:fe:6e:7a:74:f7:0b:a2:cf:5d:7a:f1:2d:
02:af:4b:fb:2e:01:8b:9d:dc:ef:d6:64:7b:53:80:b4:b8:91:
c3:d3:18:6b:c6:09:25:76:e3:a9:ac:7a:bd:d8:a9:c7:c9:3c:
d7:d1:ab:80:16:fc:8c:02:38:c7:73:e9:b8:a6:34:f2:cb:bc:
76:91:8b:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNdEdl+NJ7h8kKvvaOQhGyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzM2UxMzEwMDhkZWY3MDVhNDE3ZjBkNDBkMTQ4YTM2ZjI1
YTFhMzkwHhcNMjUxMTA0MDYwMDU3WhcNMjUxMTA1MDYwMDU3WjAzMTEwLwYDVQQD
EygzMzlhNWE3MGYyYWE0MWZkMWU2OWEzY2YwZGI3MzY1MzU1YmQ4NWM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArB+yPIguMUYbKq/N3BHnZ8L7rt5i
7qNYnDBz34r3RrwTvdPR+66XxrdYlbauMrjMUGPs1MTnSLU5Ip47XITEZhxqpEqq
pGtSEXY2bLag2Fd9JVVnAxylmURGfee8XhkBguAhYHspnUJAaMc9lGEsYZKYIVIk
kCKU/zsQuxF8PCJSbrTbPtArE3wvx78/rmM92Jyk5WoIRSHgbiooVh1tXBctBW4V
Kp65SwCFV8NyBSo+Chd8xP8KdfSD3BWNJxcvMV+ICHVEYAA/MVXQN2EkOzov3Hu/
T1weRb/azTd3/78x7pZYllXE4qinQP8gs0afDxPR6LQ/MEZebGZurbZANQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDOaWnDyqkH9Hmmjzw23NlNVvYXFMB8GA1UdIwQY
MBaAFNM+ExAI3vcFpBfw1A0UijbyWho5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHo0VEVBamU5d1drRl9EVURSU0tOdkphR2prLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC81NDZkZDktYWE0OC00NDVlLWJlNjAt
MDkwN2FkMzRjYjlmLzEvMHo0VEVBamU5d1drRl9EVURSU0tOdkphR2prLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC81NDZkZDktYWE0OC00NDVlLWJlNjAtMDkwN2FkMzRjYjlm
LzEvMHo0VEVBamU5d1drRl9EVURSU0tOdkphR2prLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc54pqUKw
A3nY5wENK5BTiNbSkdRytfNqf8TvUh1NceKFjIjO/H1Y8aDR5EaatGNdgInLRPVs
5n17+Oc4o5gyQa0CxejDlS9VQAtBD2RCYbG9QxjnnLSToyrYL1WcBSyKrigBem06
ikhp8fBkqLKdbADMkVoAUscIIKpCJrdUl/9z0NkqvAxl8dR3+oAByMCC4TwyfHM6
ozOXHLiD5My9Amw4m+W+kVyJQ/UKrrJgpFKHiMPUZ8DrCsSL/m56dPcLos9devEt
Aq9L+y4Bi53c79Zke1OAtLiRw9MYa8YJJXbjqax6vdipx8k819GrgBb8jAI4x3Pp
uKY08su8dpGL3w==
-----END CERTIFICATE-----
Generated at Tue Nov 4 10:46:16 2025 by rpki-client