Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/2a4ee3-d76d-48be-add6-78f992475e1f/1/0zpiCyrMj8MLjE1Rj5KX4_fJpgo.mft
File: 0zpiCyrMj8MLjE1Rj5KX4_fJpgo.mft (raw, json)
Hash identifier: Vr4ycM4AeH8Q/ZH07yfYrJZ3LXcvNmxJ45Y0dyt21JY=
Subject key identifier: 30:EB:75:F1:D3:64:78:16:0B:94:A5:E3:2E:2D:90:50:31:03:13:03
Authority key identifier: D3:3A:62:0B:2A:CC:8F:C3:0B:8C:4D:51:8F:92:97:E3:F7:C9:A6:0A
Certificate issuer: /CN=d33a620b2acc8fc30b8c4d518f9297e3f7c9a60a
Certificate serial: 019A71B9191886F87E37EB42CD6A9A9B8296
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0zpiCyrMj8MLjE1Rj5KX4_fJpgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/2a4ee3-d76d-48be-add6-78f992475e1f/1/0zpiCyrMj8MLjE1Rj5KX4_fJpgo.mft
Manifest number: 0D0C
Signing time: Tue 11 Nov 2025 07:02:27 +0000
Manifest this update: Tue 11 Nov 2025 07:02:27 +0000
Manifest next update: Wed 12 Nov 2025 07:02:27 +0000
Files and hashes: 1: 0zpiCyrMj8MLjE1Rj5KX4_fJpgo.crl (hash: rOIRknFtLAc9OV0BmeVSNwSqZff7uiPELb0ZCxgKhTI=)
2: dQBlElXfO8pSdNwEKXjKZ-O9USg.roa (hash: S1t1SaIMwKXjVRHsk1Cwo0eWHwRLwztBGFQg3vgYpOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/2a4ee3-d76d-48be-add6-78f992475e1f/1/0zpiCyrMj8MLjE1Rj5KX4_fJpgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/2a4ee3-d76d-48be-add6-78f992475e1f/1/0zpiCyrMj8MLjE1Rj5KX4_fJpgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0zpiCyrMj8MLjE1Rj5KX4_fJpgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:19:18:86:f8:7e:37:eb:42:cd:6a:9a:9b:82:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d33a620b2acc8fc30b8c4d518f9297e3f7c9a60a
Validity
Not Before: Nov 11 07:02:27 2025 GMT
Not After : Nov 12 07:02:27 2025 GMT
Subject: CN=30eb75f1d36478160b94a5e32e2d905031031303
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b5:41:aa:b8:ad:c8:b9:66:53:3c:48:4d:28:
4a:d6:ae:73:5c:59:8f:7a:fa:c2:66:51:0f:27:9f:
33:a3:a3:dc:b4:4c:ef:64:71:f8:06:4e:51:e0:1d:
4b:d0:f6:9c:c5:60:ff:e5:9f:5d:c7:81:82:93:2d:
cc:0c:29:68:a1:8c:62:5b:7a:42:33:dd:6c:08:60:
a5:5f:69:3f:0b:50:aa:d8:32:70:b0:4a:e6:1b:d9:
41:6f:74:09:b5:92:f1:b7:4d:e4:11:8e:34:28:a6:
3f:a2:78:74:20:49:bf:8d:76:46:9d:8e:33:ec:02:
a2:54:59:81:b4:75:44:59:1d:d6:79:93:7e:ee:bf:
b8:a3:c7:22:e6:4d:04:d2:bc:b0:7e:6d:e9:c3:6d:
81:88:53:79:8d:08:f3:49:95:ae:cf:04:2c:48:6f:
15:f1:91:c4:7a:ce:8a:1c:8c:a6:2e:ad:72:5b:63:
a2:70:cd:9c:ed:78:14:30:2c:20:5c:33:a8:be:e6:
43:a6:05:22:98:22:37:3c:7b:0c:39:fe:3b:b9:c9:
75:7b:52:3e:f3:b5:e6:e4:e9:c7:24:e3:f9:34:92:
2d:24:4e:ce:ff:e0:66:68:ef:c1:b1:9a:76:f6:a4:
8f:74:63:ef:29:e8:f4:20:58:d8:1b:e8:b5:1e:57:
f7:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:EB:75:F1:D3:64:78:16:0B:94:A5:E3:2E:2D:90:50:31:03:13:03
X509v3 Authority Key Identifier:
keyid:D3:3A:62:0B:2A:CC:8F:C3:0B:8C:4D:51:8F:92:97:E3:F7:C9:A6:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0zpiCyrMj8MLjE1Rj5KX4_fJpgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/2a4ee3-d76d-48be-add6-78f992475e1f/1/0zpiCyrMj8MLjE1Rj5KX4_fJpgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/2a4ee3-d76d-48be-add6-78f992475e1f/1/0zpiCyrMj8MLjE1Rj5KX4_fJpgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e0:d2:9b:b9:7b:62:9b:57:e0:bb:b6:df:fb:d8:0e:af:e4:64:
1f:61:7a:ca:2f:6c:4b:fc:17:18:cb:ed:18:f3:25:a1:16:d9:
01:28:96:4d:b2:85:46:8e:96:78:2d:e9:e2:39:26:65:9c:5f:
cd:b8:63:ac:22:47:7d:6e:42:ce:0b:38:f0:17:06:2c:ab:3b:
a1:3f:1b:3c:23:aa:0b:37:54:40:e3:fc:79:3e:59:ea:9b:ea:
ef:f8:5a:16:8d:27:dd:dc:cb:cb:2a:f4:92:2c:0a:4c:e2:97:
68:d3:ab:d0:9e:f8:d7:f5:14:ef:6d:b7:27:e3:47:a8:9c:35:
96:87:58:27:a3:3e:18:85:e2:6b:b4:a4:a5:6b:50:43:c7:8e:
24:17:65:fd:4c:8d:d6:41:40:f9:79:27:84:52:74:d9:25:4d:
20:09:c1:a0:fb:48:fd:c6:1e:a6:52:8d:dd:3c:ea:d9:8c:90:
ba:d3:a1:6d:42:12:a4:fe:76:d8:c7:cc:a1:81:64:39:bb:7e:
45:cd:03:d1:e6:26:2a:e1:14:d9:2e:78:9b:3e:0b:36:96:8a:
63:20:69:8b:8b:f2:c6:27:4d:ed:ff:95:d0:b1:d5:ed:ac:dc:
1d:f4:52:6f:f2:4c:6b:fb:fd:8b:e6:bd:9a:23:bc:7f:f0:d3:
39:a6:dc:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:51:42 2025 by rpki-client