Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.mft
File: 0z4TEAje9wWkF_DUDRSKNvJaGjk.mft (raw, json)
Hash identifier: /pP8oyZnPVw7JiLooFUQbgSmltc/CD7LodzYK2RgcCw=
Subject key identifier: 5F:3F:4E:9F:99:04:00:CD:3F:C3:88:E1:4D:A2:6F:BA:4E:E2:6F:6A
Authority key identifier: D3:3E:13:10:08:DE:F7:05:A4:17:F0:D4:0D:14:8A:36:F2:5A:1A:39
Certificate issuer: /CN=d33e131008def705a417f0d40d148a36f25a1a39
Certificate serial: 019A7225B4E3E1A2C7908519C5E3B9F12B4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0z4TEAje9wWkF_DUDRSKNvJaGjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.mft
Manifest number: 111A
Signing time: Tue 11 Nov 2025 09:01:04 +0000
Manifest this update: Tue 11 Nov 2025 09:01:04 +0000
Manifest next update: Wed 12 Nov 2025 09:01:04 +0000
Files and hashes: 1: 0z4TEAje9wWkF_DUDRSKNvJaGjk.crl (hash: vE+L/ZRTCCQ9t1pN122rYHijn6B2NMjBfAJk84m32/Q=)
2: A2oqQd54ayoxJnfGY2DGuTLyEzs.roa (hash: cZ73AwWXPJWCopyDomwFy40Gv6sNmCFfCzUBeTVXsq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/0z4TEAje9wWkF_DUDRSKNvJaGjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:b4:e3:e1:a2:c7:90:85:19:c5:e3:b9:f1:2b:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d33e131008def705a417f0d40d148a36f25a1a39
Validity
Not Before: Nov 11 09:01:04 2025 GMT
Not After : Nov 12 09:01:04 2025 GMT
Subject: CN=5f3f4e9f990400cd3fc388e14da26fba4ee26f6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:52:80:13:f6:2e:d0:be:80:11:7b:15:aa:6e:
24:3d:3f:a4:dd:72:e3:58:3f:cf:6e:72:88:27:13:
03:34:74:3e:59:d1:1c:69:5e:45:db:dd:d5:73:d2:
fd:83:32:5a:c0:7f:0a:9a:05:d6:be:fc:00:78:40:
9d:ff:29:4e:fe:0b:08:94:48:04:57:ec:2b:47:90:
34:9d:63:3c:e9:b5:e9:f1:d2:1a:ce:cd:84:a9:a1:
fa:99:bd:cf:10:e2:de:24:d2:cb:aa:b5:7d:fb:c7:
98:09:b6:89:3c:10:03:9f:83:4f:f0:b9:39:c7:08:
70:b9:7a:05:1f:de:e7:6b:3c:be:9c:5b:3c:63:71:
ce:31:f9:d4:8b:2d:72:3b:f8:5c:a8:8e:33:4b:7e:
d1:51:c4:2a:50:43:d6:d8:e3:7d:93:17:d0:de:1a:
c6:56:58:b2:41:a1:c6:59:c6:7b:21:72:7b:e5:4d:
f2:a8:4a:6d:4e:45:f4:a1:cb:3f:d9:e5:ab:6d:19:
51:52:97:98:5d:1d:6f:75:ae:f2:a3:86:48:4c:7b:
14:8d:f1:c1:b7:c7:61:8e:d4:7c:75:20:54:bf:56:
f7:99:cf:c0:d1:98:42:4b:11:c0:52:f6:68:b4:f0:
2f:ae:bc:d5:cf:88:3f:ba:30:6e:9b:7a:c2:91:3c:
79:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:3F:4E:9F:99:04:00:CD:3F:C3:88:E1:4D:A2:6F:BA:4E:E2:6F:6A
X509v3 Authority Key Identifier:
keyid:D3:3E:13:10:08:DE:F7:05:A4:17:F0:D4:0D:14:8A:36:F2:5A:1A:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0z4TEAje9wWkF_DUDRSKNvJaGjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:8f:4e:32:3b:de:36:60:8f:8a:53:84:76:2c:8d:42:72:1c:
6b:39:e2:1d:5f:c7:b2:bb:55:bf:1f:23:0a:0c:0f:76:46:2a:
f9:6f:c1:5f:a4:d9:ba:1a:ba:e3:6a:47:b2:63:df:12:97:8e:
f9:7b:a8:9c:70:91:bf:7f:3c:ea:ab:c9:60:6a:0d:10:62:81:
f1:a2:31:36:03:4e:fe:d7:0f:35:92:8f:64:42:9d:26:a9:28:
63:83:f9:62:ed:93:82:83:c2:dc:ff:25:25:61:a7:9e:4c:98:
84:1c:65:6f:c9:6d:1f:b5:66:72:2e:ad:4b:9d:37:8d:72:ab:
4a:b8:58:d4:59:c0:c4:cb:11:2f:6c:99:02:5b:48:f3:14:72:
6e:6d:1a:d3:f8:e1:f4:ba:b3:17:41:4d:bf:ea:13:b7:5d:32:
67:a7:03:90:f9:48:76:14:bf:1d:b3:8c:35:92:d0:61:e8:bb:
90:a9:89:7c:1b:23:6d:6c:25:b6:1c:65:09:bc:1a:07:d2:dc:
ff:41:a2:82:da:89:5c:d0:11:e7:04:95:46:df:68:94:54:31:
8f:c9:88:00:a2:94:3a:bf:a8:c3:19:0f:01:d9:f8:23:91:9f:
73:f3:97:3a:5d:5c:57:e4:8f:6e:de:d0:a2:3b:40:82:f5:71:
8d:34:ba:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:19:35 2025 by rpki-client