Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/25f4f4-a547-4238-a1da-f18d7818f84a/1/rOzwm4XZHNaCsGdDy2xZMOH8VRw.mft
File: rOzwm4XZHNaCsGdDy2xZMOH8VRw.mft (raw, json)
Hash identifier: uvmzeLavqVtBbYiMpn1Bc6N5HtDlX38XKlDYCHCVyDk=
Subject key identifier: 16:71:B1:75:30:6D:41:9F:EA:53:E5:90:96:68:EA:13:87:F9:E9:0D
Authority key identifier: AC:EC:F0:9B:85:D9:1C:D6:82:B0:67:43:CB:6C:59:30:E1:FC:55:1C
Certificate issuer: /CN=acecf09b85d91cd682b06743cb6c5930e1fc551c
Certificate serial: 019A725C79B07A80CEA392A518FEDF6D4130
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rOzwm4XZHNaCsGdDy2xZMOH8VRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/25f4f4-a547-4238-a1da-f18d7818f84a/1/rOzwm4XZHNaCsGdDy2xZMOH8VRw.mft
Manifest number: 0342
Signing time: Tue 11 Nov 2025 10:00:54 +0000
Manifest this update: Tue 11 Nov 2025 10:00:54 +0000
Manifest next update: Wed 12 Nov 2025 10:00:54 +0000
Files and hashes: 1: 2-l-7yT7_u7_OYzRYJFyaa75TPk.roa (hash: bYwJQxGV83lRBUqEUc8QOqElQ+XjkvUc1MyoxR+0EMk=)
2: rOzwm4XZHNaCsGdDy2xZMOH8VRw.crl (hash: S+77EWUjOr7UnrXUkBeqq0DsgAEqPXVVD2vEI9dihKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/25f4f4-a547-4238-a1da-f18d7818f84a/1/rOzwm4XZHNaCsGdDy2xZMOH8VRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/25f4f4-a547-4238-a1da-f18d7818f84a/1/rOzwm4XZHNaCsGdDy2xZMOH8VRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/rOzwm4XZHNaCsGdDy2xZMOH8VRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:79:b0:7a:80:ce:a3:92:a5:18:fe:df:6d:41:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acecf09b85d91cd682b06743cb6c5930e1fc551c
Validity
Not Before: Nov 11 10:00:54 2025 GMT
Not After : Nov 12 10:00:54 2025 GMT
Subject: CN=1671b175306d419fea53e5909668ea1387f9e90d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ac:f5:7f:23:b0:2b:e7:b3:e5:f1:7a:b9:a2:
50:cc:3b:09:eb:f9:1c:7b:4d:48:d1:a3:1d:d9:6e:
f9:50:32:25:3b:84:53:2a:2c:ca:4f:02:2c:ec:bb:
02:cf:3a:69:db:a4:72:33:d7:32:b7:d3:db:a9:12:
07:d5:62:c7:e2:71:2a:4a:e8:7b:3f:70:e6:ab:e9:
2f:cf:0a:c4:c1:35:96:25:13:14:8e:46:ff:d2:f0:
c0:c3:cc:4b:f6:b8:4f:a6:af:b7:54:b8:f6:b7:72:
73:4d:7b:d2:f2:1c:6e:a6:7a:91:ef:b4:d1:69:f8:
c8:0c:e7:9f:ae:57:4f:e9:30:9e:ef:e5:a5:51:cd:
41:47:a7:b0:7f:bb:6e:c1:3f:a8:ff:11:cd:5c:0c:
48:28:17:e5:29:e8:c5:c0:bf:85:51:63:2c:a1:a1:
73:e4:0f:c2:50:7a:5f:c1:ed:10:d2:0a:f1:30:98:
75:7b:53:f3:90:71:61:bf:f3:c0:2f:97:d1:0f:33:
02:fd:1c:95:d7:0a:70:b8:15:64:21:dd:09:4c:85:
c9:74:34:dc:b4:90:9f:72:58:8c:25:b2:0e:f8:85:
33:7e:79:d1:14:27:a0:c3:27:68:fb:e9:50:44:97:
86:bc:39:81:47:a8:33:24:59:6a:0d:cb:29:b6:66:
e3:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:71:B1:75:30:6D:41:9F:EA:53:E5:90:96:68:EA:13:87:F9:E9:0D
X509v3 Authority Key Identifier:
keyid:AC:EC:F0:9B:85:D9:1C:D6:82:B0:67:43:CB:6C:59:30:E1:FC:55:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rOzwm4XZHNaCsGdDy2xZMOH8VRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/25f4f4-a547-4238-a1da-f18d7818f84a/1/rOzwm4XZHNaCsGdDy2xZMOH8VRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/25f4f4-a547-4238-a1da-f18d7818f84a/1/rOzwm4XZHNaCsGdDy2xZMOH8VRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:d6:8e:2b:ec:4f:e2:6c:f4:56:fb:21:b9:13:0b:9d:d9:36:
d8:6c:3c:6b:b6:d7:1a:87:d7:22:6f:bb:4c:8c:38:cc:e9:1b:
c1:12:14:45:01:e9:57:3e:4b:37:c4:d0:a0:5e:e1:e1:3f:6a:
3f:58:74:75:73:b1:57:7c:49:11:55:b9:3b:58:d2:ac:d8:3e:
b1:41:69:c4:cc:27:24:1e:a3:71:ca:88:ca:65:dd:4c:a4:19:
0d:96:72:4d:f4:20:54:46:6d:04:2e:96:55:22:f8:e0:c0:03:
73:58:8d:18:76:f5:1e:b0:2a:ce:67:57:09:4d:27:ed:16:4a:
d3:bb:42:e1:bb:a9:62:2e:90:1a:b3:11:31:55:a7:3f:f0:58:
2a:a4:66:cf:ae:69:28:19:46:23:e0:3b:dd:99:2d:6b:77:54:
bf:b8:52:c0:96:39:f0:aa:f9:e3:8f:cd:c8:6e:05:eb:2d:78:
48:df:3b:33:fc:7a:2e:25:75:55:1b:a1:d2:a4:cc:22:72:57:
e0:37:05:1e:85:f3:eb:ac:95:12:a8:ca:89:f8:66:29:a6:52:
2a:da:31:9b:86:c3:5e:12:b0:52:d2:28:00:1d:f8:19:b2:0c:
2c:42:e3:d1:f0:a0:b9:bb:89:00:82:ef:52:9b:cb:20:cc:47:
59:1c:3e:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:44 2025 by rpki-client