Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/936915-213a-40d9-978b-7f7bab83bda0/1/0ZF4u0phFOq5i-AEeMx_E7CtICo.mft
File: 0ZF4u0phFOq5i-AEeMx_E7CtICo.mft (raw, json)
Hash identifier: zNasw3c/zG73wOGX3lDeLVqG15ziDJ1yXudK1xWYYEY=
Subject key identifier: 74:31:18:A8:3A:B5:AE:E3:3D:20:FC:9C:D4:9F:5B:7D:6F:12:C5:79
Authority key identifier: D1:91:78:BB:4A:61:14:EA:B9:8B:E0:04:78:CC:7F:13:B0:AD:20:2A
Certificate issuer: /CN=d19178bb4a6114eab98be00478cc7f13b0ad202a
Certificate serial: 019A718097E3EFA5A62662430AF12807A5EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ZF4u0phFOq5i-AEeMx_E7CtICo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/936915-213a-40d9-978b-7f7bab83bda0/1/0ZF4u0phFOq5i-AEeMx_E7CtICo.mft
Manifest number: 1670
Signing time: Tue 11 Nov 2025 06:00:44 +0000
Manifest this update: Tue 11 Nov 2025 06:00:44 +0000
Manifest next update: Wed 12 Nov 2025 06:00:44 +0000
Files and hashes: 1: 0ZF4u0phFOq5i-AEeMx_E7CtICo.crl (hash: r6fY26GqbelAj2j4eDAwq9fPjcxGvST5E1Gv7zjho+c=)
2: TEBgTQfk8TTugPkvZbXZbIl-DzU.roa (hash: X8lYrbJg3w88o9ijNvVCeQ1nN96EvrcQjM0+hkV2C/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/936915-213a-40d9-978b-7f7bab83bda0/1/0ZF4u0phFOq5i-AEeMx_E7CtICo.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/936915-213a-40d9-978b-7f7bab83bda0/1/0ZF4u0phFOq5i-AEeMx_E7CtICo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0ZF4u0phFOq5i-AEeMx_E7CtICo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 06:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:80:97:e3:ef:a5:a6:26:62:43:0a:f1:28:07:a5:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d19178bb4a6114eab98be00478cc7f13b0ad202a
Validity
Not Before: Nov 11 06:00:44 2025 GMT
Not After : Nov 12 06:00:44 2025 GMT
Subject: CN=743118a83ab5aee33d20fc9cd49f5b7d6f12c579
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:97:20:40:a2:b6:a0:ab:59:df:e9:b6:9a:62:
78:6b:c5:90:a4:8d:22:81:f2:d9:01:9b:e7:80:2a:
56:f4:b0:ca:b9:4a:75:60:c9:7a:5f:50:c0:83:7f:
6b:81:90:ed:ba:a6:11:19:26:f3:bc:5e:4e:2c:88:
d4:9b:35:a7:b3:fc:b2:d3:2e:53:2e:c0:50:24:c3:
29:de:a1:cb:1c:eb:59:9d:8a:54:46:e2:40:8a:4a:
a9:04:16:ee:53:06:3e:db:b4:09:e9:89:b4:28:39:
63:a9:af:2d:de:8d:fc:40:97:79:84:b6:83:8f:c4:
93:0e:64:d0:64:91:d8:4b:0f:fe:67:70:bb:a0:eb:
d2:8b:94:6c:7f:e7:79:d7:7a:7b:5e:2c:35:07:5c:
de:35:84:28:e5:6e:95:7c:db:8e:c5:5b:91:ef:e5:
a2:14:36:25:39:9c:8d:ab:5d:78:7a:9d:47:19:5a:
fe:e7:cd:88:3d:f1:06:03:e4:28:52:50:0b:2f:a1:
da:f7:26:c4:5c:88:a3:a9:4d:51:da:eb:ae:0e:39:
c9:31:1c:8c:e8:25:11:c3:ca:f9:69:b4:f7:4b:1c:
d1:ac:ff:89:99:13:1c:dd:85:3a:41:6c:09:42:4e:
6e:02:0b:16:bf:93:b7:54:dc:7c:ba:ea:97:b5:d3:
e3:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:31:18:A8:3A:B5:AE:E3:3D:20:FC:9C:D4:9F:5B:7D:6F:12:C5:79
X509v3 Authority Key Identifier:
keyid:D1:91:78:BB:4A:61:14:EA:B9:8B:E0:04:78:CC:7F:13:B0:AD:20:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ZF4u0phFOq5i-AEeMx_E7CtICo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/936915-213a-40d9-978b-7f7bab83bda0/1/0ZF4u0phFOq5i-AEeMx_E7CtICo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/936915-213a-40d9-978b-7f7bab83bda0/1/0ZF4u0phFOq5i-AEeMx_E7CtICo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:9b:6e:e3:9b:80:da:14:66:6f:ae:de:36:20:dd:d3:76:42:
85:45:ba:5a:bd:c9:82:c5:b1:c0:6f:78:a6:3c:99:91:cd:60:
04:68:07:c4:56:83:2f:05:fc:bd:6d:84:52:1a:7e:d6:45:61:
82:85:38:7b:91:66:b1:f1:d2:df:c2:bf:75:b3:9c:72:34:ab:
7e:1b:6a:87:a7:dc:71:9b:88:b3:e3:40:95:9e:e5:96:81:34:
ea:36:24:f6:58:41:f0:35:07:8a:44:f4:a0:07:00:b3:af:af:
30:ca:d2:30:5a:72:73:b8:0b:29:b3:f8:96:3a:4c:3b:4b:e0:
a3:ec:0f:a2:bb:f5:ad:94:b9:6c:fd:fb:99:71:bc:1d:14:d6:
2a:3e:55:d2:52:d8:58:a2:b5:7c:59:4d:3f:31:23:15:46:c0:
42:7d:24:b0:ad:eb:e0:b5:cb:53:3e:37:ef:c4:9f:68:77:10:
de:a5:5c:e3:5f:ec:4c:5f:cc:96:65:af:f6:0a:9e:db:e4:92:
0d:f8:cb:51:9d:a0:a9:e2:a2:ab:43:17:e1:d8:5e:ae:b8:d5:
57:8b:32:71:cb:7d:15:0c:c6:14:46:6c:37:4a:78:ac:93:65:
48:64:d0:6f:c4:cf:71:19:d8:55:ca:76:9d:a6:67:19:af:d3:
ee:42:20:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:50 2025 by rpki-client