Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/d20b8c-9fac-41f7-9e79-c410062d4d52/1/iZJ3h0cqfL3Zff209Tt077O7vFs.mft
File: iZJ3h0cqfL3Zff209Tt077O7vFs.mft (raw, json)
Hash identifier: zGNYd/RlGrwt9pL91AGeDhMCFELwKyy0eACQCVJ7zNQ=
Subject key identifier: 0B:4F:1B:AA:7E:69:3A:32:46:FC:06:49:F6:2C:6A:32:28:D6:D4:4F
Authority key identifier: 89:92:77:87:47:2A:7C:BD:D9:7D:FD:B4:F5:3B:74:EF:B3:BB:BC:5B
Certificate issuer: /CN=89927787472a7cbdd97dfdb4f53b74efb3bbbc5b
Certificate serial: 019A7112E02C08935C2B8F10DB4F14612582
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iZJ3h0cqfL3Zff209Tt077O7vFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/d20b8c-9fac-41f7-9e79-c410062d4d52/1/iZJ3h0cqfL3Zff209Tt077O7vFs.mft
Manifest number: 124F
Signing time: Tue 11 Nov 2025 04:00:53 +0000
Manifest this update: Tue 11 Nov 2025 04:00:53 +0000
Manifest next update: Wed 12 Nov 2025 04:00:53 +0000
Files and hashes: 1: iZJ3h0cqfL3Zff209Tt077O7vFs.crl (hash: D5GNSG/kK8UghOokv7WSz2WdUHkA4o7dkrH4k2tIrRw=)
2: k_0z9yImMkkx7Q7hZaLKVoTRO74.roa (hash: bY1XGYbefYoSOVyj59OiTxL9N9Rlyyr/sbaOhEye3EE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/d20b8c-9fac-41f7-9e79-c410062d4d52/1/iZJ3h0cqfL3Zff209Tt077O7vFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/d20b8c-9fac-41f7-9e79-c410062d4d52/1/iZJ3h0cqfL3Zff209Tt077O7vFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/iZJ3h0cqfL3Zff209Tt077O7vFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:e0:2c:08:93:5c:2b:8f:10:db:4f:14:61:25:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89927787472a7cbdd97dfdb4f53b74efb3bbbc5b
Validity
Not Before: Nov 11 04:00:53 2025 GMT
Not After : Nov 12 04:00:53 2025 GMT
Subject: CN=0b4f1baa7e693a3246fc0649f62c6a3228d6d44f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f5:99:37:6a:4d:43:ee:bc:d0:3d:cc:86:07:
62:0e:64:77:40:49:b7:d1:f2:c0:b6:7a:4b:e4:e7:
46:72:a1:85:64:a5:bd:6d:49:7b:c9:a8:88:76:ee:
63:58:c0:0c:d9:15:da:77:4f:15:7c:08:ac:96:62:
b3:f7:d9:4f:f3:f9:18:d8:6c:3b:f6:cc:c6:9b:21:
36:16:57:07:20:e7:8a:d2:ad:6c:82:8c:73:a5:0e:
b1:63:83:61:20:54:94:f4:2f:55:d6:ba:74:b8:ab:
58:e6:57:fc:17:81:a7:00:cf:4c:09:ac:28:cd:ba:
4e:bb:a4:21:1d:e5:ff:3f:a1:02:f2:41:18:20:32:
4b:95:84:fb:61:b7:a8:14:00:22:1e:99:31:6c:5b:
a5:15:d7:82:89:33:4b:cf:bd:a0:e7:fa:56:cb:51:
ed:e0:0f:97:9d:65:94:d0:84:d8:c0:df:53:88:a6:
ef:f8:3f:57:d6:b4:e1:bb:b7:06:c8:93:70:74:60:
28:c1:a5:7e:aa:c3:38:84:b3:ed:20:f7:fd:8e:1f:
a9:80:1d:5d:e2:1f:8d:dd:55:a0:3c:54:77:a7:36:
9d:16:4b:55:c5:d5:d4:29:70:9e:c7:08:88:c0:f1:
70:21:3a:dc:ba:73:1e:9d:95:b7:48:16:c0:65:d7:
dd:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:4F:1B:AA:7E:69:3A:32:46:FC:06:49:F6:2C:6A:32:28:D6:D4:4F
X509v3 Authority Key Identifier:
keyid:89:92:77:87:47:2A:7C:BD:D9:7D:FD:B4:F5:3B:74:EF:B3:BB:BC:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iZJ3h0cqfL3Zff209Tt077O7vFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d20b8c-9fac-41f7-9e79-c410062d4d52/1/iZJ3h0cqfL3Zff209Tt077O7vFs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d20b8c-9fac-41f7-9e79-c410062d4d52/1/iZJ3h0cqfL3Zff209Tt077O7vFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:aa:b5:fa:6d:00:ae:5e:1e:2d:55:ed:45:7c:d5:ba:28:75:
df:03:16:41:3d:ca:43:9d:41:49:c3:63:cc:8c:1b:67:2a:c6:
2c:fb:3f:f9:0a:d5:3a:1c:c3:16:7a:4c:0a:c6:86:12:be:cb:
04:81:83:77:a7:42:37:3e:90:9f:84:11:04:a3:3d:6b:bc:6d:
ca:df:a2:11:af:f3:a7:ee:b9:fb:ce:9a:87:11:f9:42:2b:90:
96:78:41:f7:9b:5f:38:9d:8d:23:d3:46:d7:9f:5b:b5:d6:36:
16:b4:70:5d:9a:97:cc:f2:eb:0b:c7:d1:a5:73:d1:22:a4:b8:
d5:68:97:34:a2:4e:75:74:79:90:69:ed:ad:16:1e:50:27:7b:
6a:6b:46:55:b3:f6:8e:27:8f:0a:20:97:9e:dc:6b:dc:54:b4:
68:76:a9:78:01:1c:c7:bd:e5:f3:af:61:a5:62:a3:35:70:f7:
31:1e:92:92:3e:3b:4d:c1:9d:90:dd:96:20:e2:35:da:24:03:
3b:ec:bd:8c:63:9b:18:8a:2d:19:12:05:11:f2:47:a7:cc:de:
ba:05:f3:78:fc:4f:6d:3f:c6:7f:72:00:b7:99:41:78:b3:4e:
41:ff:5e:3e:70:0e:c6:86:a0:12:41:b3:7e:d6:70:55:14:cb:
c4:ae:88:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:42 2025 by rpki-client