Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft
File: 0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft (raw, json)
Hash identifier: BF3RpHqxnJHjGJHJKGJGv0So2MNZIKYBGXzN/DrZPhE=
Subject key identifier: 29:BE:48:FA:A8:9F:9A:42:5F:A1:D9:58:10:98:0F:C8:C9:11:64:50
Authority key identifier: D3:36:7D:BA:3A:22:00:60:E6:7D:4E:C6:80:B0:F9:9F:24:7A:87:2C
Certificate issuer: /CN=d3367dba3a220060e67d4ec680b0f99f247a872c
Certificate serial: 019A4F6234FA6BFB774BC9F65208465DE37F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft
Manifest number: 0FF4
Signing time: Tue 04 Nov 2025 15:00:27 +0000
Manifest this update: Tue 04 Nov 2025 15:00:27 +0000
Manifest next update: Wed 05 Nov 2025 15:00:27 +0000
Files and hashes: 1: 0zZ9ujoiAGDmfU7GgLD5nyR6hyw.crl (hash: gyT4OZaNd8NN/Wn9WFwe7FAB1yUSsa+BISBSpAzkhDQ=)
2: UesYrwjQAt5n35nunWJPeTym_vc.roa (hash: xvLW7BNqth0hAIyaZRHIz1XgxFZZgFJP35nzCDnm5eg=)
3: VkrZn1OK4ewvaG0hvjQYI0AmlKU.roa (hash: hX22Joel+B6dtADSTT6SWZZD0pTzxNgeLdaxKxr+J+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:34:fa:6b:fb:77:4b:c9:f6:52:08:46:5d:e3:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3367dba3a220060e67d4ec680b0f99f247a872c
Validity
Not Before: Nov 4 15:00:27 2025 GMT
Not After : Nov 5 15:00:27 2025 GMT
Subject: CN=29be48faa89f9a425fa1d95810980fc8c9116450
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:81:63:80:43:c1:aa:bc:d1:21:89:dc:3f:b7:
d4:e8:1d:de:21:de:cc:5c:a5:ca:03:4b:5f:37:02:
5e:eb:38:8c:9d:3a:3b:e8:04:b3:f2:4e:9d:02:9b:
10:b8:60:05:95:c9:a7:6e:88:b4:f1:57:ab:e6:e9:
58:65:0e:c4:19:2b:8c:98:4f:8e:aa:96:6d:ef:fe:
e9:ba:4a:df:69:5a:6e:c2:eb:6e:58:de:1b:e6:32:
b8:3d:4d:31:4a:0c:7f:b1:b1:eb:0b:a0:d8:37:21:
81:5c:19:82:53:4e:05:a8:5a:9f:da:bf:19:ac:7b:
40:37:f7:db:c5:d3:d3:03:ee:16:ff:3a:0d:39:db:
93:8f:98:40:39:18:d1:c4:3a:96:49:fe:fd:39:1b:
dc:25:7c:ac:df:b2:e5:2a:ed:9f:f6:e7:92:1a:38:
89:e8:22:6b:09:72:87:4a:2e:ba:59:b3:f8:7f:75:
ea:cf:09:51:9f:d4:43:5e:89:07:20:81:32:37:53:
e9:d0:92:e6:e6:c3:ca:33:d2:7b:dc:8b:9c:49:94:
9d:38:55:b8:2c:d5:e0:f1:d5:b0:bd:4b:78:05:6d:
0c:cd:b7:ba:16:6e:29:fe:c7:80:8c:1d:75:25:c4:
60:a1:6c:bd:c5:ff:24:d4:ed:3c:e1:4e:15:91:57:
af:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:BE:48:FA:A8:9F:9A:42:5F:A1:D9:58:10:98:0F:C8:C9:11:64:50
X509v3 Authority Key Identifier:
keyid:D3:36:7D:BA:3A:22:00:60:E6:7D:4E:C6:80:B0:F9:9F:24:7A:87:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:77:ec:af:59:2b:30:80:96:46:90:5a:04:d3:33:17:03:0b:
74:4b:e2:3c:ab:f6:72:f2:f4:60:91:bb:60:4b:bb:92:44:d1:
69:ad:62:c5:c1:38:5e:d9:11:2e:2c:bd:86:bb:c9:b7:fc:06:
ff:26:3b:28:6a:fb:74:05:40:fc:4f:0b:d0:07:7c:4f:cb:a5:
25:27:ae:69:94:60:7c:9f:0e:7b:00:c8:2f:e1:20:3f:12:a2:
7d:92:6b:3b:db:9a:bb:42:9b:68:c6:5b:e4:0a:62:be:5c:1b:
ce:f3:f3:4d:75:b2:e2:d0:68:61:a0:27:16:10:e3:11:b0:ef:
fa:da:f4:8c:e3:fa:f7:17:e1:00:0d:0a:07:f5:5e:10:98:5f:
94:31:fc:85:1e:6f:45:7b:e8:8c:72:8f:68:f2:58:cf:69:e7:
5a:97:96:a4:8d:31:4c:95:38:27:a9:a3:5e:53:93:a1:e6:61:
f8:a0:9c:78:4e:d7:5d:e3:b8:7c:c5:c9:20:8e:68:7d:14:d7:
54:28:44:09:9c:11:c8:c5:2a:8b:de:84:60:05:5e:69:b9:6f:
64:b5:ed:a9:75:3f:3a:4f:0e:12:38:a8:41:ab:fc:a0:be:45:
6e:33:24:22:94:d7:23:70:ad:1f:63:1a:cb:45:db:50:82:c0:
f3:ff:52:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:42:46 2025 by rpki-client