Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/468065-2233-4dc7-b95c-a7bb38a1a53d/1/0y0AA2jB1U8Ip3gsB2c7aKk-38U.mft
File: 0y0AA2jB1U8Ip3gsB2c7aKk-38U.mft (raw, json)
Hash identifier: YvxJvk3UaLHsBsh0FSSpfHelkmqgkvE53q5tsF6fWmg=
Subject key identifier: AB:04:75:7F:54:E0:F4:CD:56:D7:33:E0:9C:62:9F:D8:34:A7:4B:C9
Authority key identifier: D3:2D:00:03:68:C1:D5:4F:08:A7:78:2C:07:67:3B:68:A9:3E:DF:C5
Certificate issuer: /CN=d32d000368c1d54f08a7782c07673b68a93edfc5
Certificate serial: 019A70DC727A415DC0998F849D1683C1CD28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0y0AA2jB1U8Ip3gsB2c7aKk-38U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/468065-2233-4dc7-b95c-a7bb38a1a53d/1/0y0AA2jB1U8Ip3gsB2c7aKk-38U.mft
Manifest number: 1328
Signing time: Tue 11 Nov 2025 03:01:26 +0000
Manifest this update: Tue 11 Nov 2025 03:01:26 +0000
Manifest next update: Wed 12 Nov 2025 03:01:26 +0000
Files and hashes: 1: 0y0AA2jB1U8Ip3gsB2c7aKk-38U.crl (hash: l9shWn0NwP4ZXYdcjXPbe83xHW1MwnLzUo4KDDhEgWo=)
2: jQ4CExkfR5inS0zDHfJTtnlJ6V8.roa (hash: GXyBOWfkGPF9vLeodoo4anr9TA244Yte3dkyFGm9PtM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/468065-2233-4dc7-b95c-a7bb38a1a53d/1/0y0AA2jB1U8Ip3gsB2c7aKk-38U.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/468065-2233-4dc7-b95c-a7bb38a1a53d/1/0y0AA2jB1U8Ip3gsB2c7aKk-38U.mft
rsync://rpki.ripe.net/repository/DEFAULT/0y0AA2jB1U8Ip3gsB2c7aKk-38U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:72:7a:41:5d:c0:99:8f:84:9d:16:83:c1:cd:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d32d000368c1d54f08a7782c07673b68a93edfc5
Validity
Not Before: Nov 11 03:01:26 2025 GMT
Not After : Nov 12 03:01:26 2025 GMT
Subject: CN=ab04757f54e0f4cd56d733e09c629fd834a74bc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f0:06:5c:12:2f:1f:13:7d:02:0b:ed:c1:ea:
6e:82:c4:3c:9e:c3:46:44:f6:da:d0:4b:6f:91:12:
da:52:ff:74:70:26:8d:9f:74:31:cc:50:70:f2:df:
47:c4:b2:3a:62:15:ba:87:c8:ed:0f:57:d7:79:21:
2d:63:e1:c5:eb:f6:85:21:c8:38:d4:97:25:85:b1:
ae:f6:18:74:ba:94:86:13:c7:06:a8:ee:a5:4d:30:
bb:a3:c2:3b:01:2f:f8:cb:73:bb:d2:d4:35:8c:86:
71:7c:7c:51:2b:0a:1a:58:b7:ab:14:b5:79:b0:89:
68:3c:0b:a5:5c:0d:7f:2e:64:11:1a:37:a1:3f:1f:
4a:1b:80:55:57:d0:26:8d:c9:ae:e4:64:7a:bb:5c:
67:46:61:67:62:78:bd:73:71:01:cf:49:12:60:60:
c9:22:2b:75:00:47:fe:07:b7:2b:dd:3a:cc:a1:01:
f2:6e:14:c7:a7:eb:93:c2:e6:6f:d1:d5:93:e8:0f:
af:8b:4e:8b:1c:5b:4f:de:5e:06:28:d8:19:30:eb:
42:4d:10:be:6b:76:d4:85:7b:67:ab:62:0b:be:7b:
d7:b4:4a:63:70:c1:8b:db:99:31:b9:8b:9d:2b:d3:
36:d2:46:59:31:36:c9:69:44:9e:97:47:e5:a4:8f:
a6:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:04:75:7F:54:E0:F4:CD:56:D7:33:E0:9C:62:9F:D8:34:A7:4B:C9
X509v3 Authority Key Identifier:
keyid:D3:2D:00:03:68:C1:D5:4F:08:A7:78:2C:07:67:3B:68:A9:3E:DF:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0y0AA2jB1U8Ip3gsB2c7aKk-38U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/468065-2233-4dc7-b95c-a7bb38a1a53d/1/0y0AA2jB1U8Ip3gsB2c7aKk-38U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/468065-2233-4dc7-b95c-a7bb38a1a53d/1/0y0AA2jB1U8Ip3gsB2c7aKk-38U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:20:85:2e:b9:58:a8:2d:9e:fe:ac:c8:e8:d8:5b:9c:3d:28:
ff:00:f0:4d:0d:6f:8f:1c:41:5a:e6:9d:5d:c5:4d:de:0f:fd:
f1:92:0d:87:81:66:6c:31:b5:e4:64:c9:12:f5:de:fe:8e:99:
4e:9b:9c:7c:2a:b1:f7:51:5c:55:66:ae:95:e2:22:ab:6a:bf:
c2:b9:31:32:11:3a:b5:f2:8f:7c:f8:95:ea:31:b6:ca:82:8a:
0b:66:4c:52:05:a5:a1:c4:e2:5d:2c:ca:fa:46:c4:85:2f:35:
3b:ef:0a:64:5e:14:8b:9d:90:16:2a:bf:36:6c:dc:2e:0e:bd:
40:03:c6:18:5a:e9:a4:d9:b7:ae:56:72:70:3f:66:8f:cc:d8:
cc:15:72:97:9a:fc:4a:38:2d:9e:db:8c:b4:a4:56:67:57:fb:
7e:c9:c2:0d:bd:7a:56:dc:1e:db:9f:39:1b:98:d5:26:50:d0:
3a:00:4c:a0:87:b0:15:04:23:6e:66:36:fe:9f:9e:70:35:36:
78:22:cb:41:03:d7:01:74:ca:6c:c3:97:b7:ad:9b:ea:99:c8:
db:e2:11:01:06:52:41:7d:a5:3e:70:d2:dc:5c:03:14:f8:3c:
81:fb:e8:82:a5:14:98:e8:aa:51:d2:0c:9a:e9:43:30:b5:43:
50:ef:a5:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:49 2025 by rpki-client