Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.mft
File: _0j7nPF97Oat2wju_ZvuhCweK2A.mft (raw, json)
Hash identifier: EHQilV7mHlY4saubOo1IBmTYIDQlr/jRb9X24NHpqCU=
Subject key identifier: AB:45:AF:E1:12:E1:77:AF:B1:E8:44:66:FB:11:51:57:A0:A3:EE:04
Authority key identifier: FF:48:FB:9C:F1:7D:EC:E6:AD:DB:08:EE:FD:9B:EE:84:2C:1E:2B:60
Certificate issuer: /CN=ff48fb9cf17dece6addb08eefd9bee842c1e2b60
Certificate serial: 019A72258AB75A89F7B4BE8A93FE6443B930
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0j7nPF97Oat2wju_ZvuhCweK2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 09:00:54 +0000
Manifest this update: Tue 11 Nov 2025 09:00:54 +0000
Manifest next update: Wed 12 Nov 2025 09:00:54 +0000
Files and hashes: 1: 0CzKrrdUvnNWtnCdr4geJQUloCY.roa (hash: JOOcnO9fPU3J8wcDUIkF0BM15ZCXJdWIZSdrxwMIcgk=)
2: _0j7nPF97Oat2wju_ZvuhCweK2A.crl (hash: 1WOVlT+ht+wBcgEuOsudGQikBFr6kbhB/kWzRNn9ZLg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/_0j7nPF97Oat2wju_ZvuhCweK2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:8a:b7:5a:89:f7:b4:be:8a:93:fe:64:43:b9:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff48fb9cf17dece6addb08eefd9bee842c1e2b60
Validity
Not Before: Nov 11 09:00:54 2025 GMT
Not After : Nov 12 09:00:54 2025 GMT
Subject: CN=ab45afe112e177afb1e84466fb115157a0a3ee04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c3:30:df:7b:77:55:0d:12:a9:24:06:96:2e:
cc:a0:ca:c9:f5:26:6c:49:37:b5:cb:ec:da:a4:ff:
9e:26:7c:9d:be:bf:50:cc:cd:25:c2:d3:f4:26:9d:
e1:6a:07:99:75:f3:84:f5:92:f9:64:86:ab:10:57:
d2:75:99:04:c3:9b:ea:a8:ac:1b:19:10:60:96:f3:
1f:b8:9e:64:7f:e1:9c:6a:52:5c:4f:d4:bb:3a:d3:
ff:ee:16:89:2a:cc:e0:09:5b:3c:6b:2d:64:83:91:
03:50:82:b8:af:3b:c0:bc:7b:dd:ab:c3:6a:17:69:
82:41:84:da:ab:45:ae:0e:2d:b1:3b:22:e9:a9:49:
0a:88:5f:e7:cd:c3:31:82:d8:26:a6:e5:04:1b:51:
a0:23:37:37:a7:53:dc:53:dd:2b:f4:f1:9a:e7:f5:
11:22:8d:0f:f7:88:f7:0b:f1:d8:70:48:e0:99:eb:
9e:54:5e:f6:29:dc:6f:4b:d3:50:8d:c5:d6:b0:d6:
8e:b6:d9:01:72:5e:cf:a5:5e:39:fd:4b:58:e1:d1:
e8:a4:97:d4:0d:5c:56:8d:9a:28:3d:bb:6b:8a:61:
e1:47:ba:d3:64:96:d8:35:cf:56:09:53:c4:ef:25:
a3:06:f1:85:c1:99:e0:c2:2f:b9:99:4a:bc:dd:fa:
6b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:45:AF:E1:12:E1:77:AF:B1:E8:44:66:FB:11:51:57:A0:A3:EE:04
X509v3 Authority Key Identifier:
keyid:FF:48:FB:9C:F1:7D:EC:E6:AD:DB:08:EE:FD:9B:EE:84:2C:1E:2B:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0j7nPF97Oat2wju_ZvuhCweK2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:eb:69:7f:d5:4d:9b:af:98:84:d6:a9:52:5d:a5:16:68:1a:
dc:74:9c:6f:7f:90:60:f5:8a:c2:51:6d:34:29:76:33:99:c2:
18:d7:f3:86:4b:87:64:cd:7f:6f:1d:32:ae:e4:05:28:b7:6a:
74:16:aa:37:f2:77:d4:d6:1c:92:91:c0:78:d5:45:c3:93:65:
ef:c0:24:b7:f7:d3:33:db:83:f2:db:74:35:b5:8b:b1:15:36:
72:b5:da:87:fd:70:c0:82:e3:97:aa:6b:e5:6d:5e:85:25:d6:
75:b8:eb:89:56:f3:14:e0:78:56:0f:5c:ca:04:0b:09:66:51:
be:38:10:b1:00:ed:95:e6:24:00:df:a7:e3:26:8f:07:38:b7:
d6:52:9f:38:c6:13:ad:66:89:1a:9b:ee:dd:af:93:7d:52:cf:
56:53:34:f9:f2:36:54:cb:cd:10:51:3c:7b:ad:86:98:d8:c5:
e3:4d:d3:e5:40:f7:b1:d9:42:88:42:bc:ea:f5:4a:24:03:fc:
9d:f6:da:17:cb:05:53:dd:28:5a:c0:13:38:0c:45:15:05:23:
81:18:d6:1f:e5:d6:aa:0e:59:df:41:93:90:88:cd:33:1a:a6:
f9:89:16:33:4b:7d:c8:10:78:d2:97:07:00:41:34:71:9b:05:
f7:36:3c:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:50:57 2025 by rpki-client