Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/0zWMPscfwZpqyYRrr03lmDY1cpM.mft
File: 0zWMPscfwZpqyYRrr03lmDY1cpM.mft (raw, json)
Hash identifier: WpdKqVI6t5xrMdfvzC0c1A9aF362nx2HkNFBORfg8lM=
Subject key identifier: A9:28:31:66:39:9C:E6:B5:B2:55:6A:69:7B:0F:EE:ED:FC:A1:15:F8
Authority key identifier: D3:35:8C:3E:C7:1F:C1:9A:6A:C9:84:6B:AF:4D:E5:98:36:35:72:93
Certificate issuer: /CN=d3358c3ec71fc19a6ac9846baf4de59836357293
Certificate serial: 019A52D2177D2F84CB232F7248898B5CC589
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0zWMPscfwZpqyYRrr03lmDY1cpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/0zWMPscfwZpqyYRrr03lmDY1cpM.mft
Manifest number: 16A0
Signing time: Wed 05 Nov 2025 07:01:31 +0000
Manifest this update: Wed 05 Nov 2025 07:01:31 +0000
Manifest next update: Thu 06 Nov 2025 07:01:31 +0000
Files and hashes: 1: 0zWMPscfwZpqyYRrr03lmDY1cpM.crl (hash: EHBR5DIRfYHe3aJIfVAovf6ugJjlEJiqmvXxemp6kXI=)
2: LYl-ckZTCA5UyIouoIve31n38qY.roa (hash: vPSTPP2+IXPu60S6+w3ugZNedqIYo00aGNP955WAY1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/0zWMPscfwZpqyYRrr03lmDY1cpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/0zWMPscfwZpqyYRrr03lmDY1cpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0zWMPscfwZpqyYRrr03lmDY1cpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d2:17:7d:2f:84:cb:23:2f:72:48:89:8b:5c:c5:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3358c3ec71fc19a6ac9846baf4de59836357293
Validity
Not Before: Nov 5 07:01:31 2025 GMT
Not After : Nov 6 07:01:31 2025 GMT
Subject: CN=a9283166399ce6b5b2556a697b0feeedfca115f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:52:6b:dd:c8:d0:6f:eb:bf:53:06:bd:5f:29:
8d:ef:3c:aa:a2:7d:2d:71:90:e4:3a:fc:f2:7b:36:
22:8f:d0:c4:91:52:01:df:69:b3:1a:c5:e9:33:2d:
33:d1:25:10:50:aa:0f:ea:ff:09:e2:da:d4:97:e2:
31:f9:eb:70:d9:d6:54:70:4b:cb:77:f3:fb:f3:b9:
b3:cb:3c:52:88:a3:c5:7a:03:80:ba:2a:b1:ce:dd:
8a:55:30:b2:fe:a4:f7:1c:d0:57:b3:1b:cf:26:94:
28:00:3c:6b:92:30:08:73:6f:fa:5d:5b:5c:be:5a:
d5:45:e4:37:2f:7c:aa:b3:e7:d5:9c:8a:e6:0c:f4:
53:0c:71:cb:a6:25:23:36:43:db:9f:ce:60:3f:14:
42:01:90:a0:8b:32:a7:01:0f:b7:9e:5f:ad:dc:8c:
4f:67:7a:ff:77:15:22:9d:5c:bb:f2:b1:b4:62:f0:
5e:04:01:dc:48:fd:82:f1:30:91:b7:d8:15:94:4a:
34:fe:66:c1:e3:9c:70:9d:8d:20:20:3d:cf:8a:b3:
bb:94:4f:2f:ab:eb:78:fc:a3:95:f0:7d:9e:ff:e5:
50:3a:bc:cd:73:7b:b5:66:9d:99:28:ae:8f:68:01:
b2:63:7a:b8:74:24:10:0c:58:a5:21:ed:74:08:7b:
c5:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:28:31:66:39:9C:E6:B5:B2:55:6A:69:7B:0F:EE:ED:FC:A1:15:F8
X509v3 Authority Key Identifier:
keyid:D3:35:8C:3E:C7:1F:C1:9A:6A:C9:84:6B:AF:4D:E5:98:36:35:72:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0zWMPscfwZpqyYRrr03lmDY1cpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/0zWMPscfwZpqyYRrr03lmDY1cpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/0zWMPscfwZpqyYRrr03lmDY1cpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:b1:cb:f5:0c:e1:87:52:ab:29:7b:ae:4f:84:a2:33:b2:1b:
2c:ff:e2:db:d7:4e:04:a1:80:5e:0b:14:64:69:5a:90:84:3e:
19:bc:a8:3c:1b:09:fb:27:1b:63:d4:9f:2b:fb:0f:7d:78:37:
37:f3:2d:ad:26:25:89:fe:36:07:00:b3:13:58:70:fb:6c:c6:
5a:4a:2a:74:91:9e:5c:22:e6:30:ca:10:0e:6b:28:01:0d:86:
c7:2c:21:5e:18:81:d0:4c:5f:ae:51:62:6b:2e:02:f9:01:15:
d7:79:a0:40:5b:02:1e:92:76:e7:e5:26:62:28:cd:ec:3e:67:
13:e7:70:a7:13:57:f9:3d:c2:6a:0d:96:aa:81:c5:94:26:ae:
33:a8:da:49:e3:d6:b3:02:49:91:d0:b2:3a:cb:9a:1e:41:dd:
98:c9:43:9b:ac:df:38:7b:c1:66:7f:8d:5d:36:70:a5:74:2c:
d7:14:3e:af:9c:32:35:a4:35:6b:c3:72:b8:af:7f:6c:e7:6f:
bc:ce:50:71:7e:91:53:f4:16:04:7f:83:e0:f5:ec:d1:6b:1b:
74:9c:b1:b3:49:4b:29:ad:c8:b2:46:fd:62:a0:c5:7d:b8:95:
66:79:20:92:28:96:c1:8e:16:b8:a5:3f:16:e4:b4:45:31:29:
3f:e5:e3:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:29:21 2025 by rpki-client