Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/c451f6-866a-4091-aa88-f0abb9558d45/1/A0BZzz9bz7oJObTF2cPThs7NTOw.mft
File: A0BZzz9bz7oJObTF2cPThs7NTOw.mft (raw, json)
Hash identifier: S3Bbv6GJNTNeaSk8jd9zZ+inBz7Br4v4KxvcczSscww=
Subject key identifier: 63:1A:13:E5:7D:16:EA:9F:38:0E:76:59:45:D9:CA:33:24:FB:92:D4
Authority key identifier: 03:40:59:CF:3F:5B:CF:BA:09:39:B4:C5:D9:C3:D3:86:CE:CD:4C:EC
Certificate issuer: /CN=034059cf3f5bcfba0939b4c5d9c3d386cecd4cec
Certificate serial: 019A71EEBC7F1365850558E8FBB623B63A35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A0BZzz9bz7oJObTF2cPThs7NTOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/c451f6-866a-4091-aa88-f0abb9558d45/1/A0BZzz9bz7oJObTF2cPThs7NTOw.mft
Manifest number: EB
Signing time: Tue 11 Nov 2025 08:01:02 +0000
Manifest this update: Tue 11 Nov 2025 08:01:02 +0000
Manifest next update: Wed 12 Nov 2025 08:01:02 +0000
Files and hashes: 1: A0BZzz9bz7oJObTF2cPThs7NTOw.crl (hash: ZazEMiidMUjMB6h3nBRy2CPqLXt1qO4tDmUSs3cWUK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/c451f6-866a-4091-aa88-f0abb9558d45/1/A0BZzz9bz7oJObTF2cPThs7NTOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/c451f6-866a-4091-aa88-f0abb9558d45/1/A0BZzz9bz7oJObTF2cPThs7NTOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/A0BZzz9bz7oJObTF2cPThs7NTOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:bc:7f:13:65:85:05:58:e8:fb:b6:23:b6:3a:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=034059cf3f5bcfba0939b4c5d9c3d386cecd4cec
Validity
Not Before: Nov 11 08:01:02 2025 GMT
Not After : Nov 12 08:01:02 2025 GMT
Subject: CN=631a13e57d16ea9f380e765945d9ca3324fb92d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:38:13:03:20:ea:37:d8:ad:1c:1d:7e:3e:74:
c1:cc:81:1f:b9:c9:0a:29:31:21:20:ee:d8:64:df:
f9:fa:33:6d:12:b9:03:51:3f:71:7f:19:2d:e4:f7:
44:07:c6:e5:95:33:82:63:30:08:23:34:02:75:f4:
e7:45:34:b8:e1:98:c9:d2:7e:d3:5e:cb:80:2b:d5:
49:fb:8d:bb:1f:c2:87:c3:ce:fd:cd:50:3d:0f:a3:
b2:c7:fe:e2:45:90:c5:e4:17:71:10:d4:5c:2b:e1:
2b:77:a6:94:ef:18:46:98:fc:b2:eb:00:76:c9:f4:
97:a4:a0:3d:8a:a4:50:fa:67:39:d9:fd:9d:e6:53:
ee:d1:3a:db:aa:0f:df:f3:01:cc:0b:69:d5:d9:f9:
0a:d9:ba:f7:6f:57:b1:fe:42:60:68:d5:08:d8:d3:
e2:7f:cd:46:e2:0f:1d:f5:bb:52:bd:c5:e8:86:f3:
ef:df:a3:f5:b5:a8:5d:0e:60:7c:80:c4:bf:60:80:
1a:15:e7:04:2e:d3:c0:ed:6c:43:24:58:59:01:a4:
4c:e2:75:19:ae:5a:cd:a2:3e:ed:2b:ac:6f:68:83:
65:2a:9d:1a:3c:ed:97:7c:9e:b9:2c:e3:12:fc:ab:
90:fc:e0:7a:03:e9:b3:e6:dd:52:88:21:02:21:41:
e3:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:1A:13:E5:7D:16:EA:9F:38:0E:76:59:45:D9:CA:33:24:FB:92:D4
X509v3 Authority Key Identifier:
keyid:03:40:59:CF:3F:5B:CF:BA:09:39:B4:C5:D9:C3:D3:86:CE:CD:4C:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A0BZzz9bz7oJObTF2cPThs7NTOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/c451f6-866a-4091-aa88-f0abb9558d45/1/A0BZzz9bz7oJObTF2cPThs7NTOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/c451f6-866a-4091-aa88-f0abb9558d45/1/A0BZzz9bz7oJObTF2cPThs7NTOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:bb:80:f9:e4:ac:7f:1c:10:0d:6b:a2:24:2d:40:4c:b6:eb:
b2:34:8d:9c:86:fe:b3:de:f8:99:e2:07:d8:7b:f3:50:fd:35:
ea:5b:c8:10:5a:1c:44:45:59:fd:da:25:41:f0:98:3b:20:82:
b2:81:ef:f5:4c:3b:cc:65:47:38:82:dc:e3:40:68:80:6f:21:
e2:e0:cb:37:d3:5b:20:ae:e2:fb:87:67:fe:97:db:65:0f:42:
61:bb:68:e1:98:c6:c8:31:90:79:9c:96:5b:f6:63:f4:f6:7d:
51:06:96:26:d7:40:c3:40:c5:f2:95:91:23:cb:4a:c6:df:94:
d0:89:67:fa:50:a5:b3:24:ac:45:3f:b2:c8:7d:b2:68:b3:fe:
87:64:b7:27:81:ac:9c:bd:63:70:e2:a9:d3:f2:7d:a9:f7:4c:
5f:63:16:f8:7c:97:61:ed:fc:45:17:ae:f8:75:4c:5e:7b:02:
f1:2d:34:7e:bf:23:c2:ba:c6:33:e1:d5:e9:23:2c:1d:f1:dc:
3b:5a:87:ea:4d:fe:b0:0f:38:19:f4:52:77:b2:b0:20:a0:49:
e2:ca:dc:27:d3:38:6b:62:11:17:b7:31:b3:0c:71:f3:69:b8:
75:33:b3:fb:8c:0b:46:22:4f:11:b0:bf:56:ba:51:43:34:68:
2a:5d:40:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:16:47 2025 by rpki-client