Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/44038b-8031-44e0-91c4-cc5676c7de9f/1/0mjZoqZF18wv0lOzZwQIBV5W__k.mft
File: 0mjZoqZF18wv0lOzZwQIBV5W__k.mft (raw, json)
Hash identifier: LbQj7JH9RVAzcTekDrzxFHYqYCxDwenyViVf9sklgsY=
Subject key identifier: 48:38:4F:39:FB:4E:E5:93:48:3A:54:CA:14:4E:5E:84:7A:5D:20:09
Authority key identifier: D2:68:D9:A2:A6:45:D7:CC:2F:D2:53:B3:67:04:08:05:5E:56:FF:F9
Certificate issuer: /CN=d268d9a2a645d7cc2fd253b3670408055e56fff9
Certificate serial: 019A71B8E9B05324BDFF6BF07542874927DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0mjZoqZF18wv0lOzZwQIBV5W__k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/44038b-8031-44e0-91c4-cc5676c7de9f/1/0mjZoqZF18wv0lOzZwQIBV5W__k.mft
Manifest number: 0E01
Signing time: Tue 11 Nov 2025 07:02:15 +0000
Manifest this update: Tue 11 Nov 2025 07:02:15 +0000
Manifest next update: Wed 12 Nov 2025 07:02:15 +0000
Files and hashes: 1: 0mjZoqZF18wv0lOzZwQIBV5W__k.crl (hash: Tyo02IoJcXXCPSPO6NR50DNS8TOjI7Rwt4EZEsqONKo=)
2: 1-1Q-JUTaDXQnn29QzjTcxKcU51M.roa (hash: S2RyOo3MnGOBQQfCCR1Slz5mB03LVga93H7HVY19x7w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/44038b-8031-44e0-91c4-cc5676c7de9f/1/0mjZoqZF18wv0lOzZwQIBV5W__k.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/44038b-8031-44e0-91c4-cc5676c7de9f/1/0mjZoqZF18wv0lOzZwQIBV5W__k.mft
rsync://rpki.ripe.net/repository/DEFAULT/0mjZoqZF18wv0lOzZwQIBV5W__k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:e9:b0:53:24:bd:ff:6b:f0:75:42:87:49:27:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d268d9a2a645d7cc2fd253b3670408055e56fff9
Validity
Not Before: Nov 11 07:02:15 2025 GMT
Not After : Nov 12 07:02:15 2025 GMT
Subject: CN=48384f39fb4ee593483a54ca144e5e847a5d2009
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c0:e9:b1:23:27:fc:e8:7a:fe:14:2a:36:74:
60:51:1f:ef:28:cd:60:49:08:76:b8:83:cf:41:74:
e8:b6:1e:32:ec:b5:37:46:a7:d7:91:9f:77:84:57:
8c:1f:82:6c:5f:89:93:b7:d3:27:e1:f0:f9:1c:2d:
55:d2:89:09:4f:a0:d1:81:03:b4:fb:67:e1:c1:bb:
79:0a:09:8d:fc:6a:f8:b9:ac:9e:24:a7:19:ed:58:
d3:57:e2:fa:7a:fc:5c:96:bd:fa:60:3e:5c:92:a3:
52:28:7f:84:6d:74:cd:f7:dd:1e:05:75:23:e2:b7:
4a:3a:a2:a1:54:50:94:85:82:27:a6:e5:5f:d6:9c:
79:cd:05:3b:d4:e5:bb:d2:b2:98:3c:f7:66:86:c6:
be:75:c0:c0:57:55:3b:f3:2a:01:42:54:3d:1c:06:
8e:6c:d6:74:14:eb:2b:38:36:a9:b2:b4:22:9c:6f:
d1:6f:93:96:10:9c:33:1f:e7:c7:fa:fe:40:9d:18:
16:2d:bc:7e:5c:ab:d6:c3:9f:17:71:4e:35:37:26:
d7:b3:55:31:97:43:cc:d0:a1:38:51:61:86:00:b4:
03:9d:2b:a2:7c:7a:22:5e:48:27:d4:cb:48:7c:20:
3c:c0:30:b8:50:0a:11:cd:5d:43:20:4a:f3:9a:2c:
9f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:38:4F:39:FB:4E:E5:93:48:3A:54:CA:14:4E:5E:84:7A:5D:20:09
X509v3 Authority Key Identifier:
keyid:D2:68:D9:A2:A6:45:D7:CC:2F:D2:53:B3:67:04:08:05:5E:56:FF:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mjZoqZF18wv0lOzZwQIBV5W__k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/44038b-8031-44e0-91c4-cc5676c7de9f/1/0mjZoqZF18wv0lOzZwQIBV5W__k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/44038b-8031-44e0-91c4-cc5676c7de9f/1/0mjZoqZF18wv0lOzZwQIBV5W__k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:19:3a:e7:f8:12:4a:a9:47:7f:6f:20:04:0d:0b:86:8c:98:
74:62:de:01:e8:85:fc:1c:c7:98:95:a2:26:3e:ff:6c:14:f6:
8a:48:78:35:b7:b8:6c:23:24:d0:ef:f1:89:17:8a:81:13:fe:
6f:33:e4:a2:c4:76:57:61:e4:89:3f:c4:2c:f5:be:14:80:3c:
a6:ef:a0:af:e0:02:64:45:53:18:7f:7a:e9:64:16:39:0b:e7:
44:38:4f:94:4e:0f:13:f3:83:32:be:0c:76:36:dd:bc:47:78:
24:cd:43:11:23:31:37:f1:81:c0:82:f0:66:c0:8c:ad:e7:e5:
bf:4c:18:e6:db:89:18:6e:02:fa:8b:dd:12:7a:48:56:ef:b5:
cf:a7:e1:25:bf:91:79:98:00:f0:5c:b5:3a:1e:72:f3:05:13:
b6:c4:c7:5b:ba:ce:e7:f5:f6:ac:cb:eb:b8:0b:d2:ea:3d:7c:
9d:fe:f9:3d:e3:01:fd:2b:bf:ca:05:2e:2d:f7:44:f2:fb:96:
33:96:3e:da:94:da:2a:f0:b9:ee:df:d0:c0:55:7f:c4:89:ef:
fb:28:6c:10:28:14:05:52:02:0c:82:df:0c:93:f1:87:77:9e:
52:bd:d4:44:03:6a:e6:21:c8:17:d4:73:e6:7d:5e:91:5b:7d:
c4:3f:0b:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:44:39 2025 by rpki-client