Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/c4b401-e595-4a00-9123-f21ab7e9e1f5/1/oMoz5_ZyXrTuh7qRsd0uHEIWjDk.mft
File: oMoz5_ZyXrTuh7qRsd0uHEIWjDk.mft (raw, json)
Hash identifier: DLnYArp5BTDdwnl6/R+PpIPECpyjyX5JVQrezgwgtQo=
Subject key identifier: CE:32:D2:27:6B:F0:E8:CA:09:4B:1D:0B:8A:0B:27:42:04:AE:AF:CE
Authority key identifier: A0:CA:33:E7:F6:72:5E:B4:EE:87:BA:91:B1:DD:2E:1C:42:16:8C:39
Certificate issuer: /CN=a0ca33e7f6725eb4ee87ba91b1dd2e1c42168c39
Certificate serial: 019A71B87726C0EA95DB8098BD1A31EF9C13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oMoz5_ZyXrTuh7qRsd0uHEIWjDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/c4b401-e595-4a00-9123-f21ab7e9e1f5/1/oMoz5_ZyXrTuh7qRsd0uHEIWjDk.mft
Manifest number: 12EF
Signing time: Tue 11 Nov 2025 07:01:45 +0000
Manifest this update: Tue 11 Nov 2025 07:01:45 +0000
Manifest next update: Wed 12 Nov 2025 07:01:45 +0000
Files and hashes: 1: oMoz5_ZyXrTuh7qRsd0uHEIWjDk.crl (hash: Xy0wTJo8sG4agwPyKM7SCcMI3CkDVVMDKLSoy4xA6Zw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/c4b401-e595-4a00-9123-f21ab7e9e1f5/1/oMoz5_ZyXrTuh7qRsd0uHEIWjDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/c4b401-e595-4a00-9123-f21ab7e9e1f5/1/oMoz5_ZyXrTuh7qRsd0uHEIWjDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/oMoz5_ZyXrTuh7qRsd0uHEIWjDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:77:26:c0:ea:95:db:80:98:bd:1a:31:ef:9c:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0ca33e7f6725eb4ee87ba91b1dd2e1c42168c39
Validity
Not Before: Nov 11 07:01:45 2025 GMT
Not After : Nov 12 07:01:45 2025 GMT
Subject: CN=ce32d2276bf0e8ca094b1d0b8a0b274204aeafce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:b7:03:d1:86:4c:e7:63:f3:d6:d0:39:f3:d9:
35:aa:80:85:0e:a6:f2:ef:48:d5:d4:3c:3c:99:da:
45:e1:b6:c3:30:17:99:25:09:17:63:1e:2c:a4:36:
73:ce:5b:6f:8a:d8:dc:9b:58:5d:ce:db:67:ce:37:
55:cd:57:7b:68:7a:df:e9:3d:cf:f2:34:fa:14:dc:
60:74:b7:d1:35:83:a5:9d:a3:75:85:e5:6d:5e:b1:
f0:69:22:0c:86:86:ba:cb:c0:8c:a8:08:b5:7b:27:
2d:90:fd:ec:d4:ce:2d:e6:ff:b5:bb:c9:29:0a:21:
92:dc:52:43:40:53:f6:b1:aa:37:29:ce:56:b0:57:
3f:0e:54:1a:75:da:94:dc:c3:64:69:b3:29:f6:73:
c8:32:d3:e4:fa:28:0b:08:e3:3a:8a:20:1b:89:7d:
30:80:3f:46:70:08:3f:ca:07:9c:6d:b4:32:9e:93:
50:c9:e6:ea:d2:61:39:3b:88:ab:2f:6c:81:f2:3f:
3a:12:31:cb:fe:b4:9a:73:1a:4f:ee:b6:42:7a:7f:
9b:81:3f:bc:52:63:9a:85:30:ae:d3:a5:5a:4e:5d:
b9:2f:38:76:d2:c0:ff:4b:db:fb:1a:d1:c7:83:86:
93:8a:6b:03:ac:35:10:5b:89:c1:8f:75:20:46:e7:
0c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:32:D2:27:6B:F0:E8:CA:09:4B:1D:0B:8A:0B:27:42:04:AE:AF:CE
X509v3 Authority Key Identifier:
keyid:A0:CA:33:E7:F6:72:5E:B4:EE:87:BA:91:B1:DD:2E:1C:42:16:8C:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oMoz5_ZyXrTuh7qRsd0uHEIWjDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/c4b401-e595-4a00-9123-f21ab7e9e1f5/1/oMoz5_ZyXrTuh7qRsd0uHEIWjDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/c4b401-e595-4a00-9123-f21ab7e9e1f5/1/oMoz5_ZyXrTuh7qRsd0uHEIWjDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:9f:76:22:db:5c:62:62:65:35:9b:db:a5:ff:89:9d:5d:46:
77:e9:a0:73:4d:e1:06:61:00:0e:dd:5f:dd:f4:0f:b6:7d:98:
02:10:55:11:4a:13:30:ee:26:46:a3:42:73:6c:3b:74:36:35:
45:00:87:08:17:fe:eb:fa:36:f6:42:c6:80:34:bb:87:aa:60:
6c:be:30:c2:ca:65:98:a8:d2:10:ab:26:f5:42:1f:53:a0:65:
26:81:1b:f5:23:d4:80:2b:91:93:58:3a:70:1e:60:7e:fe:ca:
27:4f:1f:03:98:ba:fb:5f:68:1f:54:f9:4b:2d:63:90:bf:9a:
27:61:a2:c4:9b:d7:53:fb:42:98:49:96:a1:5d:94:d8:85:f5:
3c:ba:89:51:57:33:c5:4e:1d:ba:6c:96:4d:f6:1b:68:e4:0f:
25:ce:0d:37:56:a9:45:e1:a8:71:27:06:72:60:ac:3e:d8:77:
97:f6:84:c7:0d:97:0e:ce:b9:5c:c5:56:1d:ee:53:cf:2c:8f:
b3:28:27:a4:14:af:b6:b9:cb:fd:1e:d1:3c:04:77:3d:a3:f3:
be:91:73:0c:13:fa:69:8c:9c:63:4e:cf:95:cf:b8:9d:6e:01:
af:1c:07:05:e6:b5:f1:90:0b:86:c8:05:7a:fe:b9:88:87:03:
f6:45:24:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:08 2025 by rpki-client