Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.mft
File: 0z1rVZ02xBMHaSp7D7Pvd6pgF84.mft (raw, json)
Hash identifier: 8skEEM050spsdC8qK26wqPk64KEJfO+H8Vt9ALE0PBg=
Subject key identifier: B8:4E:18:61:37:C9:4C:25:F7:E2:EE:1F:48:B1:42:AC:49:0A:EF:B7
Authority key identifier: D3:3D:6B:55:9D:36:C4:13:07:69:2A:7B:0F:B3:EF:77:AA:60:17:CE
Certificate issuer: /CN=d33d6b559d36c41307692a7b0fb3ef77aa6017ce
Certificate serial: 019A725CAAFF236A200F2C2688D2F4C04092
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0z1rVZ02xBMHaSp7D7Pvd6pgF84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.mft
Manifest number: 0C94
Signing time: Tue 11 Nov 2025 10:01:06 +0000
Manifest this update: Tue 11 Nov 2025 10:01:06 +0000
Manifest next update: Wed 12 Nov 2025 10:01:06 +0000
Files and hashes: 1: 0z1rVZ02xBMHaSp7D7Pvd6pgF84.crl (hash: 5GIBwK9A9aRQ8vNJgQCCqDr6r52brLlOPzzsBhQQKlA=)
2: It_RR5RDy-OVRDGDczZ_wIsJmfg.roa (hash: Xudxun2iPicL1+7TPznqWQiuqD3U5fvxLgSLN+SZ2rM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.mft
rsync://rpki.ripe.net/repository/DEFAULT/0z1rVZ02xBMHaSp7D7Pvd6pgF84.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:aa:ff:23:6a:20:0f:2c:26:88:d2:f4:c0:40:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d33d6b559d36c41307692a7b0fb3ef77aa6017ce
Validity
Not Before: Nov 11 10:01:06 2025 GMT
Not After : Nov 12 10:01:06 2025 GMT
Subject: CN=b84e186137c94c25f7e2ee1f48b142ac490aefb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:94:79:17:b3:83:7d:53:12:63:92:8f:a9:1e:
3c:a9:6d:5a:5d:de:b5:86:63:15:67:f7:30:db:f0:
8c:3c:13:4f:36:e4:a7:31:2c:d4:87:e5:74:51:fb:
2c:d8:5b:13:df:0b:a4:6a:a7:6e:5c:cb:1d:20:53:
00:b3:16:cb:d0:41:2c:ca:d2:12:e8:ca:68:b6:47:
c0:a3:fc:a1:28:aa:c1:e9:29:e9:b9:55:d2:75:9d:
41:5f:ed:2b:a3:3e:cc:77:bd:c9:8a:0a:99:de:94:
dd:03:6f:d3:56:08:99:c3:53:54:01:56:e8:f3:7d:
e1:be:df:15:2b:46:65:ba:16:0f:6c:b0:0c:32:27:
3e:ac:85:3c:1b:b6:31:0c:54:c1:6d:06:74:96:48:
d6:23:d1:87:36:9b:fd:60:98:9a:94:fe:4d:8d:f4:
89:32:e7:7b:06:86:d3:1f:14:13:56:31:33:71:8f:
1b:8a:30:d0:58:13:3f:8b:a4:3f:66:fc:84:02:fe:
21:fa:9a:1d:b6:a4:15:58:0c:6d:bc:69:1c:cb:c7:
77:af:5f:5a:ab:cd:5b:04:25:95:ae:e5:d0:5f:38:
b8:13:ac:54:84:ed:20:7b:aa:5a:b2:d7:6b:f4:de:
f3:e5:de:59:bd:bf:4b:a8:1a:75:49:08:fb:c1:fa:
ae:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:4E:18:61:37:C9:4C:25:F7:E2:EE:1F:48:B1:42:AC:49:0A:EF:B7
X509v3 Authority Key Identifier:
keyid:D3:3D:6B:55:9D:36:C4:13:07:69:2A:7B:0F:B3:EF:77:AA:60:17:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0z1rVZ02xBMHaSp7D7Pvd6pgF84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:c6:d0:fa:26:15:9b:52:90:e1:63:30:c6:2f:c6:90:e2:4d:
4f:e4:7f:c2:94:41:79:68:b2:ef:9b:da:0c:2d:5b:fe:55:55:
91:e3:fe:3f:1e:de:50:b2:67:ba:ed:a6:a3:61:53:fa:d5:1f:
3a:7d:5a:36:c6:94:77:43:35:c2:cd:43:73:04:bd:fe:36:6a:
db:bd:c0:5c:b9:11:72:1c:6d:6b:42:7f:2c:6a:29:f9:26:66:
3d:02:90:71:51:f6:01:2d:80:e3:fb:cd:26:2a:6d:51:0c:56:
92:f8:0f:25:26:01:51:c7:30:1e:34:d1:aa:3c:94:f1:36:9a:
5f:4e:a0:3f:68:db:37:9b:10:cd:26:2e:5f:30:cc:a6:16:25:
7c:f1:f5:5d:1e:9e:5d:8e:1c:cb:c6:78:6f:e4:34:72:77:d5:
ed:9e:f4:a9:73:4d:83:ab:d4:61:00:f7:58:99:f7:8f:e4:33:
b3:d1:f7:ab:41:1d:8e:7c:76:e0:3b:2e:dd:f8:5d:fa:87:d1:
76:31:3a:68:c5:72:bb:b5:9a:28:fa:88:5c:32:ea:50:a5:4f:
e5:49:c1:83:68:73:5a:60:8d:1c:1b:51:17:f9:11:b9:37:09:
e5:22:88:ce:91:bc:5c:76:97:bd:78:df:09:8f:3f:c0:57:17:
2d:67:aa:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:20:22 2025 by rpki-client