Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/ebbdda-9571-4ff5-b56e-75220d53a55c/1/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.mft
File: 0fUZZO3hK0wDZz0jzUTIN1MV9Fo.mft (raw, json)
Hash identifier: YioEccXTTnguR2hbFBfmsVWlQ98c5fi9YWkNG47tyI4=
Subject key identifier: 19:52:76:03:6D:D5:5E:D5:1A:B5:C7:8C:03:6D:2E:9A:1A:E3:39:80
Authority key identifier: D1:F5:19:64:ED:E1:2B:4C:03:67:3D:23:CD:44:C8:37:53:15:F4:5A
Certificate issuer: /CN=d1f51964ede12b4c03673d23cd44c8375315f45a
Certificate serial: 019A53E3BB473ACA2F95159C22622E3EDC0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/ebbdda-9571-4ff5-b56e-75220d53a55c/1/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.mft
Manifest number: 05FB
Signing time: Wed 05 Nov 2025 12:00:24 +0000
Manifest this update: Wed 05 Nov 2025 12:00:24 +0000
Manifest next update: Thu 06 Nov 2025 12:00:24 +0000
Files and hashes: 1: 0fUZZO3hK0wDZz0jzUTIN1MV9Fo.crl (hash: pVQbr2BJwPnB5/jEQUZdUATWIAhDqKASO+NDe1Yolzo=)
2: cotZl6z9OJ-fauLOJe6XV8WAuTo.roa (hash: pFgMJLMj7SXSgI1OYpF9YOIHVLweh2wDrctvJeRJL4M=)
3: kchelfWvJ5H-ipXayPr2lYfELpU.roa (hash: 9NIJWgo1KUO6egMwGucTZhKbewDIQ9m/pLPQ1oGGlaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/ebbdda-9571-4ff5-b56e-75220d53a55c/1/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/ebbdda-9571-4ff5-b56e-75220d53a55c/1/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:e3:bb:47:3a:ca:2f:95:15:9c:22:62:2e:3e:dc:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1f51964ede12b4c03673d23cd44c8375315f45a
Validity
Not Before: Nov 5 12:00:24 2025 GMT
Not After : Nov 6 12:00:24 2025 GMT
Subject: CN=195276036dd55ed51ab5c78c036d2e9a1ae33980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:be:88:51:36:c7:ef:04:22:82:58:6b:01:0a:
6d:29:76:6b:59:ec:d3:3a:1a:88:6e:50:2b:3d:e8:
66:80:4f:c1:cc:6e:8e:84:a6:c3:15:61:03:08:2b:
90:2c:aa:53:0a:bc:55:df:fd:05:a8:f2:38:3b:af:
d0:bc:cf:67:01:35:5e:46:12:e7:b6:cc:0d:4f:db:
36:2b:8a:9c:1a:b8:2c:d4:12:1d:bf:1a:cc:e8:32:
36:13:51:5d:94:82:a6:b1:bb:34:65:f7:ce:bb:00:
57:be:e7:07:62:7c:e6:e3:32:46:37:36:90:24:fd:
a9:7b:c4:6a:50:0b:36:36:83:df:db:fa:37:f9:43:
7f:f5:39:2b:fe:1e:72:d0:49:67:cc:60:eb:c5:39:
ea:c7:ea:9b:d3:5e:67:e9:16:66:5f:27:fc:0d:bf:
af:13:c1:51:16:32:f7:22:bb:10:f8:33:ae:dc:66:
0e:e4:08:2a:31:5c:57:fd:de:61:0c:2d:89:44:b9:
12:0c:97:09:f9:13:06:b8:a6:cd:a3:c5:13:ad:6c:
e3:99:d2:7f:86:3e:7f:92:7b:1a:23:7c:28:6e:ee:
94:f9:42:7d:54:ea:ef:e5:13:9d:7b:32:a7:db:5d:
e9:98:37:37:8d:a9:ed:f3:80:ea:59:31:6c:09:3b:
a0:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:52:76:03:6D:D5:5E:D5:1A:B5:C7:8C:03:6D:2E:9A:1A:E3:39:80
X509v3 Authority Key Identifier:
keyid:D1:F5:19:64:ED:E1:2B:4C:03:67:3D:23:CD:44:C8:37:53:15:F4:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ebbdda-9571-4ff5-b56e-75220d53a55c/1/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ebbdda-9571-4ff5-b56e-75220d53a55c/1/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:7c:7a:e7:46:82:34:48:8a:68:9e:82:25:df:a6:b6:0b:49:
e8:cf:57:41:e9:f8:cc:52:d4:60:d2:f1:d8:83:8e:86:f9:de:
c1:b3:22:8f:65:05:df:8f:21:dc:f4:d3:11:c7:19:75:58:27:
24:ad:d9:70:9b:34:99:a2:4f:5d:4e:bd:a2:ad:b6:f7:63:06:
13:c4:ac:14:4b:1f:ea:30:5b:fc:8b:f0:cb:9b:db:82:fb:f3:
b7:fb:e8:92:96:11:24:c3:ec:20:b1:5a:8c:de:dd:5c:b4:f9:
71:fe:97:49:a4:1d:aa:7e:c6:6c:8b:b3:c1:3a:f2:69:75:23:
2b:2e:46:1b:b9:12:65:ad:d8:8c:2a:6f:30:0a:ce:86:a1:3f:
5a:f8:6d:79:17:7d:36:ca:4a:0c:20:b6:a0:a1:07:dd:99:b9:
12:d6:37:49:2c:32:45:75:14:f8:f4:88:56:0b:d9:76:c2:b2:
18:0e:53:62:23:99:5b:c6:b3:0b:36:1e:ec:45:57:28:bd:31:
6f:8b:d8:c5:db:ec:89:ca:30:04:92:89:aa:e6:69:37:bd:61:
55:16:74:ac:52:a2:37:ff:b0:c7:40:60:0f:99:48:90:bd:22:
37:63:08:dc:80:be:3d:f0:18:23:56:75:b8:b8:ad:b0:a7:5c:
2a:fd:b4:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:42:35 2025 by rpki-client