Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.mft
File: 0ZiDQdNgeGX1D1uwKpo_XC3lipI.mft (raw, json)
Hash identifier: 0h9QyTYSseWK34I7l+tqgNtDUGgfUXtlP7HPqNjhpFc=
Subject key identifier: 43:00:40:81:01:7A:DE:ED:AF:B0:56:71:F8:B4:E2:81:B0:2B:0D:E6
Authority key identifier: D1:98:83:41:D3:60:78:65:F5:0F:5B:B0:2A:9A:3F:5C:2D:E5:8A:92
Certificate issuer: /CN=d1988341d3607865f50f5bb02a9a3f5c2de58a92
Certificate serial: 019932368F0E49A49A0758BBA3C09C50DDE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ZiDQdNgeGX1D1uwKpo_XC3lipI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.mft
Manifest number: 01DC
Signing time: Wed 10 Sep 2025 06:01:00 +0000
Manifest this update: Wed 10 Sep 2025 06:01:00 +0000
Manifest next update: Thu 11 Sep 2025 06:01:00 +0000
Files and hashes: 1: 0ZiDQdNgeGX1D1uwKpo_XC3lipI.crl (hash: Fjqe5Axe3jrQb0hcs2T9NhWGx4BqfsA2azk6bur2AnY=)
2: 7YhU_vK5G08AkR9W5LfWHGVyypQ.roa (hash: RlhL4E2mBOXIjwSddZ4sZnexQ4dNTH+ubROkoPIYvn0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0ZiDQdNgeGX1D1uwKpo_XC3lipI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:32:36:8f:0e:49:a4:9a:07:58:bb:a3:c0:9c:50:dd:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1988341d3607865f50f5bb02a9a3f5c2de58a92
Validity
Not Before: Sep 10 06:01:00 2025 GMT
Not After : Sep 11 06:01:00 2025 GMT
Subject: CN=43004081017adeedafb05671f8b4e281b02b0de6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:31:e9:11:2c:c2:d9:3b:a0:69:22:17:2b:d2:
51:73:16:a4:5a:05:14:1a:12:8d:62:1c:f6:99:6e:
57:7a:e7:7c:e2:4d:77:28:41:8e:1d:58:f3:dc:7c:
2d:09:f5:aa:6f:e5:bd:82:68:18:59:97:e9:2c:ba:
af:d6:8e:f3:b6:94:bc:cd:df:65:1f:c9:45:c4:4b:
33:a6:bd:27:72:48:83:7c:99:27:b7:6e:8d:f1:e8:
93:46:cf:e9:c6:3f:09:38:6c:6f:94:cb:72:4b:53:
fc:75:c7:76:31:6d:78:91:31:94:6d:c6:98:da:67:
49:53:07:ba:e4:82:d6:b0:74:dd:ae:d8:4a:37:b9:
6c:be:83:68:c3:9c:f8:58:ac:43:56:77:54:8d:0a:
0d:bd:66:bb:06:93:8c:53:1c:70:ce:83:dc:d6:2f:
d3:3e:f7:39:66:b8:79:18:fc:56:24:88:f4:92:06:
82:0a:a0:77:41:62:71:de:3e:de:36:4f:40:3c:7f:
dd:6a:4c:bc:4c:4d:3e:71:b6:c8:fa:1e:6d:15:0b:
0e:3e:af:60:3b:b1:d2:63:2d:95:42:af:6d:02:95:
7f:41:7b:fb:25:09:d5:12:69:7e:8f:32:06:61:ab:
1f:c1:ac:e5:80:7b:61:a1:70:51:62:10:c9:89:a7:
14:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:00:40:81:01:7A:DE:ED:AF:B0:56:71:F8:B4:E2:81:B0:2B:0D:E6
X509v3 Authority Key Identifier:
keyid:D1:98:83:41:D3:60:78:65:F5:0F:5B:B0:2A:9A:3F:5C:2D:E5:8A:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ZiDQdNgeGX1D1uwKpo_XC3lipI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:e9:0c:bd:50:05:e4:ea:b7:dc:40:12:fa:f6:ea:69:27:f9:
eb:62:48:bf:96:c1:47:ea:30:75:24:0d:58:64:87:7c:ad:8b:
a6:6d:e9:b0:7d:02:72:49:0b:ba:22:f1:94:e5:56:a6:e3:3a:
f4:28:06:e8:43:cb:f4:69:43:63:a6:6d:8d:38:e2:4c:ef:21:
e4:15:38:0e:e9:0e:32:92:68:01:11:ab:e8:d4:fb:e0:76:ec:
db:0a:4c:9e:11:97:e4:9e:59:39:40:e5:43:5d:d7:08:0e:3f:
40:a9:1f:a1:ff:5f:d8:56:00:4b:1e:63:d3:74:c4:c3:76:e6:
78:2f:90:b6:3b:83:d1:66:7f:6b:54:e6:e7:fa:8b:77:91:09:
65:2b:06:a7:b2:52:53:b8:2f:76:e8:af:23:fb:07:bf:99:1d:
50:90:9d:64:f8:d7:a7:3f:fe:69:00:2f:45:ef:92:b0:a9:2d:
83:93:20:1a:24:f1:98:a5:83:bc:92:d9:36:af:e5:09:ba:cf:
33:9f:74:60:74:3f:0c:04:99:64:f9:bb:ae:cf:64:35:10:93:
14:78:58:38:07:cb:67:35:a8:fe:2a:86:19:26:f6:ef:68:a6:
f6:14:d9:a5:96:e2:00:5c:7d:ce:9e:46:fe:7d:11:34:12:f5:
48:3f:db:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 10:25:51 2025 by rpki-client