Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.mft
File: 0lgUed7jtZlPEcnZVkYxv1pATAc.mft (raw, json)
Hash identifier: EZMpF8fLqLovj3t9nxlesiskyBZS3VJMKK+dQhriMr0=
Subject key identifier: B2:FF:9B:3D:21:26:B2:1C:A6:92:F6:6A:8A:4A:F3:E4:89:33:67:19
Authority key identifier: D2:58:14:79:DE:E3:B5:99:4F:11:C9:D9:56:46:31:BF:5A:40:4C:07
Certificate issuer: /CN=d2581479dee3b5994f11c9d9564631bf5a404c07
Certificate serial: 019A39ECD3E7EF10D16BF586B6829C0BE7B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0lgUed7jtZlPEcnZVkYxv1pATAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.mft
Manifest number: 080F
Signing time: Fri 31 Oct 2025 11:00:13 +0000
Manifest this update: Fri 31 Oct 2025 11:00:13 +0000
Manifest next update: Sat 01 Nov 2025 11:00:13 +0000
Files and hashes: 1: 0lgUed7jtZlPEcnZVkYxv1pATAc.crl (hash: 73cWHTDggCMCuHDxPlaojKCJTdWH+DPGitAEpAZMyeE=)
2: Z-dfosDrlzVSKVFTGJ7LYewGU6w.roa (hash: lSxGudn5Fs3j65oqD2ZSmu7gAATGql89N/KwokwP/NY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0lgUed7jtZlPEcnZVkYxv1pATAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Nov 2025 11:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:39:ec:d3:e7:ef:10:d1:6b:f5:86:b6:82:9c:0b:e7:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2581479dee3b5994f11c9d9564631bf5a404c07
Validity
Not Before: Oct 31 11:00:13 2025 GMT
Not After : Nov 1 11:00:13 2025 GMT
Subject: CN=b2ff9b3d2126b21ca692f66a8a4af3e489336719
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:44:e5:69:4e:71:27:cb:f4:e3:dc:1b:a8:84:
1a:51:94:51:20:cf:c6:78:dc:47:a5:c0:0c:ac:82:
ce:fa:4d:fe:af:12:c0:e8:ff:ea:e4:a2:06:44:d1:
3f:a2:b3:6c:f0:0c:0f:3e:00:1b:77:3c:81:9b:13:
2c:41:e9:b7:7a:2e:aa:c4:fe:e3:79:0b:81:14:da:
68:37:3e:2f:c7:5f:99:1c:7a:a1:7a:76:03:cc:40:
ef:8d:c2:78:d1:43:a9:c1:e7:c1:24:f1:09:0d:fb:
5e:c7:22:a4:37:3d:f2:97:ee:fa:15:ce:6d:d5:69:
f1:1f:e0:a8:6c:39:01:b0:73:8f:f6:da:74:68:38:
ca:95:d6:78:98:fa:e6:dc:2e:c8:33:4d:6e:8b:2a:
1b:e4:69:cd:e4:97:02:d6:71:f1:1f:ff:0f:9d:d5:
be:69:36:e4:f7:9f:3c:63:2e:33:da:e4:00:c2:8e:
9e:89:5d:55:2d:2b:ee:db:c2:3c:01:1b:8b:94:f4:
fc:fb:cd:8a:d3:71:1b:0e:c2:8a:91:63:d4:05:56:
54:6b:c9:69:5d:e2:46:3a:ed:c4:93:ed:ba:3b:d9:
f1:cb:62:97:52:03:a3:fe:84:d4:0e:f7:82:cf:e6:
5c:16:b8:57:db:8f:21:c3:2c:34:0b:99:b0:76:95:
c7:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:FF:9B:3D:21:26:B2:1C:A6:92:F6:6A:8A:4A:F3:E4:89:33:67:19
X509v3 Authority Key Identifier:
keyid:D2:58:14:79:DE:E3:B5:99:4F:11:C9:D9:56:46:31:BF:5A:40:4C:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0lgUed7jtZlPEcnZVkYxv1pATAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:03:17:7d:f7:6d:89:58:fb:92:e2:24:54:9e:69:d8:3b:b7:
07:98:d0:94:2f:f5:30:ca:6c:81:c1:d4:9e:e4:2f:f0:ad:01:
bc:14:8d:59:4d:e5:6b:da:30:f5:e0:8a:94:57:c4:95:28:51:
ca:c8:89:90:75:a8:2e:61:3e:a1:10:d2:12:4b:f4:13:a2:ed:
e2:de:ed:31:78:3c:51:00:5e:8c:57:cd:fb:84:50:05:fc:23:
37:f4:2f:5e:30:d8:5a:85:17:c6:4b:6e:13:7e:e3:c9:a7:2b:
f3:a1:a4:c5:be:8f:76:68:62:dc:6b:39:5d:42:9f:75:66:bf:
96:6a:3d:d2:4c:52:13:01:56:57:53:b8:52:b8:8b:cf:df:14:
43:50:10:c7:93:a1:ed:f6:13:93:86:db:ae:99:07:90:27:c0:
5d:49:c9:72:a8:79:21:e3:57:c0:dd:06:6d:2e:04:78:d2:a9:
e8:63:81:24:63:24:a0:ba:f7:47:d4:b3:b6:e2:c2:dc:c8:90:
54:ba:1f:06:2a:dc:65:af:b3:a8:93:ba:63:31:57:d3:53:da:
3c:a4:74:15:92:f7:1e:2d:cc:f7:cd:49:ee:86:e1:aa:48:a3:
3d:de:18:34:c0:dc:bc:61:a8:35:59:fc:18:8a:49:c3:1d:e3:
8c:db:28:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 31 19:18:24 2025 by rpki-client