Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/51d445-f070-4ca9-a02b-2e1f9be95573/1/0y0esOyO9aIwRXqXAueqOWhYGAw.mft
File: 0y0esOyO9aIwRXqXAueqOWhYGAw.mft (raw, json)
Hash identifier: 9zQDdEkgmsRWTcPVxSEpLQLFcTk6uCnOcZ292Mceta4=
Subject key identifier: 42:53:D9:D5:80:4F:65:AA:C9:B5:BD:61:75:83:C0:D0:89:80:72:4B
Authority key identifier: D3:2D:1E:B0:EC:8E:F5:A2:30:45:7A:97:02:E7:AA:39:68:58:18:0C
Certificate issuer: /CN=d32d1eb0ec8ef5a230457a9702e7aa396858180c
Certificate serial: 019A4E4FBC7971F549CD79405F15C91C01C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0y0esOyO9aIwRXqXAueqOWhYGAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/51d445-f070-4ca9-a02b-2e1f9be95573/1/0y0esOyO9aIwRXqXAueqOWhYGAw.mft
Manifest number: 0B1B
Signing time: Tue 04 Nov 2025 10:00:39 +0000
Manifest this update: Tue 04 Nov 2025 10:00:39 +0000
Manifest next update: Wed 05 Nov 2025 10:00:39 +0000
Files and hashes: 1: 0y0esOyO9aIwRXqXAueqOWhYGAw.crl (hash: EkXwiNaEgM8JFNhuEgr3gTO/cTH1z395CuQd2aQveO8=)
2: sK3ZBrWvjwd-LkmXtEXI8mmDAIM.roa (hash: OKskFb0lNjQYUF2WZOv8rV/0FbI0umbg74GYmLaJ8S4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/51d445-f070-4ca9-a02b-2e1f9be95573/1/0y0esOyO9aIwRXqXAueqOWhYGAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/51d445-f070-4ca9-a02b-2e1f9be95573/1/0y0esOyO9aIwRXqXAueqOWhYGAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0y0esOyO9aIwRXqXAueqOWhYGAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:bc:79:71:f5:49:cd:79:40:5f:15:c9:1c:01:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d32d1eb0ec8ef5a230457a9702e7aa396858180c
Validity
Not Before: Nov 4 10:00:39 2025 GMT
Not After : Nov 5 10:00:39 2025 GMT
Subject: CN=4253d9d5804f65aac9b5bd617583c0d08980724b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:70:d9:f5:0f:d8:31:37:8e:68:e5:f9:ac:37:
48:04:50:18:55:d5:b7:61:25:28:8c:34:e3:4f:8e:
58:46:36:3c:33:db:04:da:17:b1:26:a6:8b:87:13:
5e:46:64:ed:19:db:00:23:5b:c5:ad:61:d7:fb:2d:
15:c2:fa:11:5a:b2:c0:a8:cd:70:f7:84:ac:0e:d1:
bf:81:d4:63:09:03:ec:0a:9c:2d:f5:77:ff:09:c7:
57:83:eb:83:0a:ab:f4:ac:c3:e6:fd:f1:86:0a:67:
3b:d4:c4:cc:da:b4:f1:5b:01:90:9b:c1:63:50:f8:
6d:12:bf:48:73:89:68:6f:3b:0f:b2:eb:53:9d:e1:
b7:81:40:88:8f:b5:04:44:44:1f:b2:a9:a7:53:5e:
42:14:b5:0f:fc:8b:6e:b8:4b:3f:e5:f3:09:d3:09:
9d:24:10:38:ca:40:83:d0:23:8d:fa:0b:5e:1a:7e:
57:e5:de:d8:23:a5:43:d2:61:37:a1:19:06:d7:15:
2a:ba:bb:7b:d3:b1:23:66:6b:76:25:99:e5:a3:a2:
4e:33:8e:11:a7:19:46:a7:52:78:1d:f1:4f:1d:fa:
cc:39:43:04:bf:46:4a:dd:13:da:f8:ea:b2:ed:29:
8a:f3:8c:16:e4:67:31:e5:aa:01:c1:15:ef:0a:51:
58:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:53:D9:D5:80:4F:65:AA:C9:B5:BD:61:75:83:C0:D0:89:80:72:4B
X509v3 Authority Key Identifier:
keyid:D3:2D:1E:B0:EC:8E:F5:A2:30:45:7A:97:02:E7:AA:39:68:58:18:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0y0esOyO9aIwRXqXAueqOWhYGAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/51d445-f070-4ca9-a02b-2e1f9be95573/1/0y0esOyO9aIwRXqXAueqOWhYGAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/51d445-f070-4ca9-a02b-2e1f9be95573/1/0y0esOyO9aIwRXqXAueqOWhYGAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:1e:9e:8e:64:bf:61:4f:0d:39:6c:d1:a1:c0:d2:53:50:b1:
be:01:60:a8:f8:60:65:45:4d:5d:ea:6c:ed:8b:e8:23:26:2c:
72:1f:79:08:8e:61:2c:11:be:15:0e:b0:8f:d5:94:39:18:e9:
04:b4:3e:f0:ff:57:1f:2a:84:9f:95:2f:2b:23:ad:9b:cc:3b:
81:3c:fa:0b:17:f6:b2:ce:9c:0f:6b:db:e5:ee:77:14:e2:e8:
00:4f:98:3b:87:2f:b7:89:49:89:78:3c:d8:3e:b8:0c:0e:7e:
e8:ac:72:ba:18:84:ab:37:4a:79:cd:43:76:eb:02:ab:97:f5:
bb:94:6a:95:86:3e:66:a7:93:0f:62:91:5b:7c:96:23:1b:49:
f4:55:0f:b3:04:65:35:f5:63:94:4c:26:c6:06:f7:59:91:e6:
22:13:c7:43:4c:d1:f1:da:23:56:54:64:90:37:a2:b2:0f:0f:
6d:df:20:d4:43:bb:59:f5:2a:e6:da:cd:89:cb:2a:0d:3d:87:
ea:05:7a:11:0d:db:c9:4d:64:f8:e0:9a:c0:41:ad:dd:2c:b2:
fd:3b:8e:c0:36:ed:44:e5:9a:2e:c9:ea:17:cc:a6:19:55:2e:
ba:af:cd:7d:05:b4:8a:28:81:29:a7:1e:b0:78:40:7b:c0:f5:
22:48:34:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:01:24 2025 by rpki-client