Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/_0zNsS_CLrhX-GxWWovFFR0FMrA.mft
File: _0zNsS_CLrhX-GxWWovFFR0FMrA.mft (raw, json)
Hash identifier: jkj3872e+KfkrMVaNgF8Lx5tmhtO9IyjPJmXlRrms+k=
Subject key identifier: 15:1A:3F:B4:DA:C0:96:B7:B5:52:EE:FC:E7:D2:9F:9F:BE:11:1B:AF
Authority key identifier: FF:4C:CD:B1:2F:C2:2E:B8:57:F8:6C:56:5A:8B:C5:15:1D:05:32:B0
Certificate issuer: /CN=ff4ccdb12fc22eb857f86c565a8bc5151d0532b0
Certificate serial: 019A4F2B31197BC45EB9C0F3983F6EF5745C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0zNsS_CLrhX-GxWWovFFR0FMrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/_0zNsS_CLrhX-GxWWovFFR0FMrA.mft
Manifest number: 0794
Signing time: Tue 04 Nov 2025 14:00:21 +0000
Manifest this update: Tue 04 Nov 2025 14:00:21 +0000
Manifest next update: Wed 05 Nov 2025 14:00:21 +0000
Files and hashes: 1: T-Yw2cTI2wr-Y-TJOoMJXVh3bJU.roa (hash: 0NqJgy30YTXcCM9pl9HQ+jtoeVufCCiGR0QgwmWh8es=)
2: _0zNsS_CLrhX-GxWWovFFR0FMrA.crl (hash: HSjEOXsZCMRCcHprP+2qM3Yk5JbcYrcNSnJH0HlH6GM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/_0zNsS_CLrhX-GxWWovFFR0FMrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/_0zNsS_CLrhX-GxWWovFFR0FMrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_0zNsS_CLrhX-GxWWovFFR0FMrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:31:19:7b:c4:5e:b9:c0:f3:98:3f:6e:f5:74:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff4ccdb12fc22eb857f86c565a8bc5151d0532b0
Validity
Not Before: Nov 4 14:00:21 2025 GMT
Not After : Nov 5 14:00:21 2025 GMT
Subject: CN=151a3fb4dac096b7b552eefce7d29f9fbe111baf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:a0:3b:be:68:4d:42:4e:7e:c9:97:1c:ef:71:
56:1a:e5:80:b0:62:cf:69:e4:0a:04:9d:34:98:b9:
b8:28:60:60:fe:57:93:27:00:02:25:91:1f:07:fb:
d0:38:ee:04:b3:9a:6b:1b:32:78:29:24:28:fd:35:
b0:38:57:31:ef:18:c1:ef:e0:92:ae:09:bb:91:62:
04:bc:a6:27:0b:f2:f2:a9:df:fa:70:57:80:e2:0a:
b7:e4:e8:32:d3:a1:60:a5:43:28:b6:57:bb:83:b0:
fe:9c:74:22:44:13:cd:3d:2b:65:e8:2b:3b:b7:b0:
30:0f:9c:89:0b:58:bf:10:cd:e3:5d:3a:d2:b8:8e:
a4:38:f7:82:66:68:65:34:37:46:87:b6:6d:9b:cd:
05:84:29:3e:b1:cf:a1:7a:7f:a4:02:34:a4:ac:9e:
80:ae:7e:9b:45:e0:bb:9f:7e:14:64:1c:a6:03:01:
00:74:11:40:b4:98:58:71:1d:20:ef:98:c9:a2:2c:
d0:f5:08:2b:d2:b3:37:4d:67:92:c2:a4:c6:6d:fc:
5f:0d:be:3a:dc:f4:7d:54:b5:26:95:71:2b:c6:83:
82:70:40:66:85:37:7e:23:77:d8:c6:d6:5e:d5:41:
65:45:f0:9d:04:d4:dd:9b:80:c2:d9:3b:ed:fc:f4:
97:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:1A:3F:B4:DA:C0:96:B7:B5:52:EE:FC:E7:D2:9F:9F:BE:11:1B:AF
X509v3 Authority Key Identifier:
keyid:FF:4C:CD:B1:2F:C2:2E:B8:57:F8:6C:56:5A:8B:C5:15:1D:05:32:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0zNsS_CLrhX-GxWWovFFR0FMrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/_0zNsS_CLrhX-GxWWovFFR0FMrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/_0zNsS_CLrhX-GxWWovFFR0FMrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:5f:79:21:11:c3:f4:b5:0f:66:14:7f:0c:e3:c5:53:de:3b:
1e:04:09:96:b3:ca:03:da:f9:3f:d3:2f:98:3c:d6:5a:6f:1d:
43:ef:8b:78:94:56:0d:bc:2c:e4:88:6d:aa:fe:60:6c:0b:c6:
29:2e:2b:c3:89:41:82:6d:23:06:9d:94:1c:a9:ac:62:9b:46:
f4:c3:f2:97:66:54:4c:84:1e:9a:61:72:45:f0:dc:49:bc:1b:
bc:68:19:18:06:43:22:d1:67:5c:84:9e:df:32:75:43:9b:7c:
af:73:4a:61:f4:5c:74:c7:03:3d:0f:5c:a1:d7:5b:5d:4f:d4:
b1:1a:96:92:c1:1d:66:f5:8f:29:00:f7:ac:bb:bf:7e:89:c7:
be:7b:24:d6:4b:f7:53:92:2d:db:30:2e:89:45:22:dd:0f:42:
b1:a7:32:e7:1b:7d:e9:5b:91:4c:99:66:dc:f4:41:ef:bf:30:
3b:ba:99:0a:e9:b1:0a:e5:2e:6c:f9:81:df:3c:4f:0e:f5:53:
4c:6a:e0:1e:47:49:a1:63:84:72:68:3a:f1:68:62:c7:b3:f9:
c6:22:53:a6:41:14:d9:37:f4:ef:e3:4a:e7:3f:3e:95:36:9e:
62:aa:af:18:2c:f7:64:e6:98:56:8b:a2:ac:db:5d:be:2b:2b:
9a:ac:cc:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:25:02 2025 by rpki-client