Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.mft
File: 0zDcrR41MkVJwcmhlBerak0JreA.mft (raw, json)
Hash identifier: ssLKGXMyaLwGTwQ0xLAFaAYh+J6sbSp+Q+WZt5De7d8=
Subject key identifier: 79:FE:C8:0E:08:82:31:75:C4:D2:0C:50:7B:D1:58:BB:F8:81:B5:55
Authority key identifier: D3:30:DC:AD:1E:35:32:45:49:C1:C9:A1:94:17:AB:6A:4D:09:AD:E0
Certificate issuer: /CN=d330dcad1e35324549c1c9a19417ab6a4d09ade0
Certificate serial: 019A4EF4D9903675A3B00C0887B9363B43EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0zDcrR41MkVJwcmhlBerak0JreA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.mft
Manifest number: 0DE2
Signing time: Tue 04 Nov 2025 13:01:00 +0000
Manifest this update: Tue 04 Nov 2025 13:01:00 +0000
Manifest next update: Wed 05 Nov 2025 13:01:00 +0000
Files and hashes: 1: 0zDcrR41MkVJwcmhlBerak0JreA.crl (hash: WGu3/weMW1fex+OGc1GMDH9cFeEqNUvPd87gSw+HJRA=)
2: LPCDu87vvEM5O8HyjWDakdHtl2E.roa (hash: Wurynnxc4HmLUHSiIQ2miFmjlyoy/berebBUDyFaz/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0zDcrR41MkVJwcmhlBerak0JreA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:d9:90:36:75:a3:b0:0c:08:87:b9:36:3b:43:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d330dcad1e35324549c1c9a19417ab6a4d09ade0
Validity
Not Before: Nov 4 13:01:00 2025 GMT
Not After : Nov 5 13:01:00 2025 GMT
Subject: CN=79fec80e08823175c4d20c507bd158bbf881b555
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:68:a7:8a:ce:4d:a9:9c:f7:09:bf:eb:30:f0:
e3:78:c5:23:be:72:3d:4f:fc:8a:2a:55:50:a8:95:
0f:a0:51:9d:9a:0d:4a:4b:b0:b9:1e:c2:ae:4a:dc:
7e:97:77:7e:68:8e:97:5d:10:f4:54:53:9c:7f:2f:
98:bd:6f:79:a2:b3:fa:f5:a0:d6:1e:70:4f:bf:2b:
06:bb:7d:f9:5f:03:50:0d:24:92:78:61:fb:ff:73:
6a:4b:94:cc:2e:83:e6:2b:82:9c:21:c6:9b:ab:d5:
9c:fc:5d:39:68:af:11:2c:3c:89:59:03:24:68:fe:
cb:d6:93:19:5d:bb:67:90:68:f9:ba:c3:ea:00:7e:
a2:43:66:03:b9:3d:98:c0:21:e7:ea:32:b7:cf:d3:
df:87:ec:99:d2:45:df:c4:2c:b4:23:52:e1:f2:51:
44:09:0b:ad:4d:9d:f8:ba:c2:f3:ca:7c:08:7d:f5:
32:58:a3:ae:ef:af:8c:03:83:88:57:49:13:1e:5a:
02:cd:26:82:63:7b:11:23:ca:f9:8e:56:ee:c6:e9:
77:98:80:c1:37:f3:e2:12:ff:32:56:50:b7:38:e4:
c3:bb:d5:a5:b4:0b:2f:ac:fd:9e:43:5a:b1:7e:13:
69:cd:69:8d:62:fc:f2:32:77:41:ed:83:7f:a1:88:
61:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:FE:C8:0E:08:82:31:75:C4:D2:0C:50:7B:D1:58:BB:F8:81:B5:55
X509v3 Authority Key Identifier:
keyid:D3:30:DC:AD:1E:35:32:45:49:C1:C9:A1:94:17:AB:6A:4D:09:AD:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0zDcrR41MkVJwcmhlBerak0JreA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:17:2b:fc:37:10:fd:78:79:64:c5:75:88:b9:3a:2a:37:72:
e9:1d:ad:ba:da:ee:0d:d3:5e:17:11:80:01:9f:17:12:de:1e:
9c:8a:96:c9:8c:c2:f0:12:e4:58:39:dd:90:6f:e6:d3:b4:6a:
f6:f0:70:68:d1:72:11:12:66:0c:08:2b:fd:cb:c7:aa:7f:fb:
10:58:b1:d5:7c:e5:e9:c1:2c:a3:f8:9b:80:48:e8:c2:eb:2e:
fa:22:70:e3:7e:b5:35:b9:78:0a:28:1d:35:20:79:f9:ee:b8:
65:5e:bd:a7:df:c8:77:07:30:54:f5:5f:e7:b7:6d:fe:3d:64:
d7:cf:62:02:03:93:f9:ca:7b:bc:93:40:b9:31:33:56:dc:a2:
6c:33:5e:a1:d1:c1:95:e7:1b:e2:d4:2e:c4:f6:e2:d6:5a:84:
e9:81:33:67:3e:79:81:1c:c5:3d:1f:b8:6a:d0:64:14:bf:0a:
a5:b4:26:e2:c5:f7:25:f1:d8:a8:e0:89:cf:29:a2:12:f3:1d:
05:1c:89:39:3a:14:ca:ca:de:9d:58:9c:67:84:15:82:e7:22:
f9:15:c1:51:22:be:fd:01:bf:32:1c:67:cf:bc:68:5e:c2:3f:
06:91:73:1d:81:f2:73:b6:c0:e6:a0:05:8d:8c:1e:47:9d:d0:
0d:8b:5c:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:09:33 2025 by rpki-client