Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/50d4d2-cb94-40f5-9bce-90dde85d8fa7/1/0VZGo8mstqSyAbtjJqnwB0Ik84c.mft
File: 0VZGo8mstqSyAbtjJqnwB0Ik84c.mft (raw, json)
Hash identifier: m7j7bnP5eNjppw7Oh+s33Mi6KhEJLUmZjQd8AmUOZCo=
Subject key identifier: CA:0E:E5:74:B3:14:48:92:38:AC:E9:54:29:C0:43:78:2F:20:64:5A
Authority key identifier: D1:56:46:A3:C9:AC:B6:A4:B2:01:BB:63:26:A9:F0:07:42:24:F3:87
Certificate issuer: /CN=d15646a3c9acb6a4b201bb6326a9f0074224f387
Certificate serial: 019A71B7B66A5FBE10E4F0847717AF6DDA07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0VZGo8mstqSyAbtjJqnwB0Ik84c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/50d4d2-cb94-40f5-9bce-90dde85d8fa7/1/0VZGo8mstqSyAbtjJqnwB0Ik84c.mft
Manifest number: 08B4
Signing time: Tue 11 Nov 2025 07:00:56 +0000
Manifest this update: Tue 11 Nov 2025 07:00:56 +0000
Manifest next update: Wed 12 Nov 2025 07:00:56 +0000
Files and hashes: 1: 0VZGo8mstqSyAbtjJqnwB0Ik84c.crl (hash: qHpG2em8bdSDsgReYTpy11UErbCQGhFhyB8Rrof1DqU=)
2: 5kBRIytnJyvZSwOvYDew9C5v8g8.roa (hash: vyD1EDIJkExeSnXzO8jxWYNY6MqP1zOjQuUSZZBKDjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/50d4d2-cb94-40f5-9bce-90dde85d8fa7/1/0VZGo8mstqSyAbtjJqnwB0Ik84c.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/50d4d2-cb94-40f5-9bce-90dde85d8fa7/1/0VZGo8mstqSyAbtjJqnwB0Ik84c.mft
rsync://rpki.ripe.net/repository/DEFAULT/0VZGo8mstqSyAbtjJqnwB0Ik84c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:b6:6a:5f:be:10:e4:f0:84:77:17:af:6d:da:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d15646a3c9acb6a4b201bb6326a9f0074224f387
Validity
Not Before: Nov 11 07:00:56 2025 GMT
Not After : Nov 12 07:00:56 2025 GMT
Subject: CN=ca0ee574b314489238ace95429c043782f20645a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c8:2a:d9:25:4f:f4:18:da:be:3b:34:40:81:
a2:f9:43:38:03:0f:43:42:f1:37:1c:b4:5b:81:30:
b5:c9:fc:70:84:05:56:cb:80:2b:14:53:b2:17:68:
0e:2d:58:81:cd:6d:90:6f:d8:cb:68:30:78:ad:19:
7d:d3:c4:f9:51:fb:4e:65:d1:57:84:e7:55:30:98:
50:d4:bb:71:c9:e2:a0:9b:83:8e:dc:d7:a1:78:2d:
6d:8c:c6:bf:60:3f:e2:a0:e8:ce:a1:d5:6e:c2:43:
0d:9a:7e:7a:cd:94:b2:22:dd:9d:86:4d:5a:e6:24:
ff:b3:2b:e2:d6:ee:04:72:4b:45:02:8c:d6:45:11:
ff:6c:21:5f:49:02:5a:7b:b5:ef:ca:37:eb:e5:7b:
b8:75:16:2c:92:19:3e:f6:17:d0:2e:41:85:2d:6a:
4c:43:45:39:ec:f6:55:a8:99:ca:c2:56:8c:17:b0:
c6:dc:d6:d1:25:60:b7:30:70:47:f7:1d:9a:5d:03:
49:d6:8a:e3:b2:23:81:6c:70:e9:ec:ad:f0:7a:4f:
33:52:8d:7b:87:50:47:18:24:58:1e:2d:26:d4:39:
28:e5:80:7a:60:8c:4c:9e:10:67:dc:6d:9a:92:14:
d3:da:9e:db:a0:ae:43:b1:4e:72:3f:45:90:cc:d8:
f1:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:0E:E5:74:B3:14:48:92:38:AC:E9:54:29:C0:43:78:2F:20:64:5A
X509v3 Authority Key Identifier:
keyid:D1:56:46:A3:C9:AC:B6:A4:B2:01:BB:63:26:A9:F0:07:42:24:F3:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0VZGo8mstqSyAbtjJqnwB0Ik84c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/50d4d2-cb94-40f5-9bce-90dde85d8fa7/1/0VZGo8mstqSyAbtjJqnwB0Ik84c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/50d4d2-cb94-40f5-9bce-90dde85d8fa7/1/0VZGo8mstqSyAbtjJqnwB0Ik84c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:5e:dc:01:c4:b3:ac:8c:64:14:69:0c:7a:65:11:b0:00:2b:
b9:95:85:69:a4:d5:76:6d:4a:b9:d0:6e:fe:4d:6f:29:ce:7c:
99:ee:0e:dc:fe:5f:92:91:c2:09:63:a4:ab:6d:e6:a5:5d:3b:
8f:bd:76:32:05:35:3d:3f:67:50:44:67:fc:21:19:df:7f:d6:
21:bb:26:cb:81:8c:5d:0a:d5:7a:b1:4b:39:cd:e4:96:4a:a4:
c4:a3:6f:0f:66:9b:22:de:94:a7:cf:16:02:c3:d5:e5:8b:90:
7a:6a:0c:c8:74:4c:b5:ca:c2:20:79:cd:13:4c:82:ae:fc:74:
7f:6b:20:6c:a9:78:9a:68:ac:1b:97:30:ee:1b:44:36:04:e5:
cf:be:23:82:f9:ff:61:af:a1:d8:53:98:d8:85:3e:63:05:16:
c6:af:1f:6e:7e:dc:0b:c6:f0:c3:46:cd:2d:a4:3a:92:7e:e6:
85:ef:59:80:55:a9:ae:27:1d:7d:48:84:82:c2:de:f5:12:b0:
79:58:6a:c1:5e:28:76:00:a2:00:8a:fd:ba:38:27:b1:be:18:
30:94:52:4a:51:82:f3:3a:62:cb:e7:a6:64:a3:f0:3d:88:95:
30:49:57:65:9e:1b:9a:fa:79:db:77:4a:fc:fb:b4:a7:8f:57:
b3:93:27:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:41:47 2025 by rpki-client