Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/ebbdda-9571-4ff5-b56e-75220d53a55c/1/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.mft
File: 0fUZZO3hK0wDZz0jzUTIN1MV9Fo.mft (raw, json)
Hash identifier: uCSncUs8j4fUuxw6rPIb2QXJ6SYw6aIRTzHni4G3OkU=
Subject key identifier: ED:20:0A:FB:41:BF:32:DD:4E:03:55:3E:43:0A:2B:C2:6A:86:BE:0D
Authority key identifier: D1:F5:19:64:ED:E1:2B:4C:03:67:3D:23:CD:44:C8:37:53:15:F4:5A
Certificate issuer: /CN=d1f51964ede12b4c03673d23cd44c8375315f45a
Certificate serial: 019A70DBF61F37A32895337A1A27009E9864
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/ebbdda-9571-4ff5-b56e-75220d53a55c/1/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.mft
Manifest number: 060A
Signing time: Tue 11 Nov 2025 03:00:54 +0000
Manifest this update: Tue 11 Nov 2025 03:00:54 +0000
Manifest next update: Wed 12 Nov 2025 03:00:54 +0000
Files and hashes: 1: 0fUZZO3hK0wDZz0jzUTIN1MV9Fo.crl (hash: 3Ptmm+bjhfBtqB7rnKxaNJy39mx/FJFPv5oUNhLjJUE=)
2: cotZl6z9OJ-fauLOJe6XV8WAuTo.roa (hash: pFgMJLMj7SXSgI1OYpF9YOIHVLweh2wDrctvJeRJL4M=)
3: kchelfWvJ5H-ipXayPr2lYfELpU.roa (hash: 9NIJWgo1KUO6egMwGucTZhKbewDIQ9m/pLPQ1oGGlaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/ebbdda-9571-4ff5-b56e-75220d53a55c/1/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/ebbdda-9571-4ff5-b56e-75220d53a55c/1/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:db:f6:1f:37:a3:28:95:33:7a:1a:27:00:9e:98:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1f51964ede12b4c03673d23cd44c8375315f45a
Validity
Not Before: Nov 11 03:00:54 2025 GMT
Not After : Nov 12 03:00:54 2025 GMT
Subject: CN=ed200afb41bf32dd4e03553e430a2bc26a86be0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:1e:44:18:cd:8b:1b:e3:3e:38:70:7b:27:34:
0e:2d:11:58:33:b0:e1:5f:89:4c:4b:2d:e1:ec:37:
e7:da:d7:e1:2c:65:4e:5a:b5:83:9e:e9:99:ba:d0:
fa:c5:6e:83:18:5d:02:b9:4e:3c:b7:88:df:ab:20:
0d:e0:4b:8b:d0:de:e5:e2:19:2a:3f:b8:e3:8b:67:
55:3b:a7:71:d1:b3:3c:cc:3e:e0:54:02:92:45:1c:
6a:73:fa:f3:b2:a7:63:c6:89:45:a9:29:6b:ae:6d:
99:91:68:be:0f:a5:5e:8f:03:9c:41:91:77:17:17:
94:21:c3:05:a4:7c:6a:77:c1:18:82:ba:d3:42:39:
fc:ac:02:ba:4e:2b:e8:0f:71:2f:f1:57:34:a2:a8:
42:5a:a1:9a:a1:44:0d:5f:38:7c:6c:b2:eb:26:57:
7a:38:19:f9:97:2b:9e:38:4a:2b:61:b9:c6:2b:0c:
aa:74:6f:dc:1b:4c:5e:48:7f:53:c9:e9:eb:04:60:
75:4c:8c:dd:77:53:15:80:c6:98:7a:37:c0:9d:12:
6c:67:05:c9:2d:d1:16:1a:50:cf:48:0e:82:81:f5:
c0:c0:9e:95:c9:41:07:c0:29:0f:1f:78:c8:dc:04:
98:48:41:b0:d7:2f:e7:a1:2a:df:f3:c3:07:a9:97:
ba:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:20:0A:FB:41:BF:32:DD:4E:03:55:3E:43:0A:2B:C2:6A:86:BE:0D
X509v3 Authority Key Identifier:
keyid:D1:F5:19:64:ED:E1:2B:4C:03:67:3D:23:CD:44:C8:37:53:15:F4:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ebbdda-9571-4ff5-b56e-75220d53a55c/1/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ebbdda-9571-4ff5-b56e-75220d53a55c/1/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:9b:0b:f1:01:fc:a3:65:fb:a0:2a:3d:bf:80:5a:94:12:ec:
f5:f4:6e:9d:2a:01:8f:4b:87:57:fc:32:8f:f6:47:e3:9d:4d:
72:9a:e2:ed:f5:c5:bf:f8:81:57:db:25:d6:55:e3:82:85:d4:
7a:a2:df:53:7a:ac:3b:53:32:a8:e8:ec:13:24:34:57:67:0d:
12:c2:0a:67:9a:81:e6:4f:8f:ee:da:40:cc:0c:6d:d0:fa:ee:
53:48:1c:d1:c0:46:85:54:4e:8e:0b:d5:0b:76:2b:5b:99:8f:
55:90:65:bb:15:b9:82:2c:3f:f7:e9:ee:37:e1:b2:6a:ad:35:
b4:93:73:f3:b0:fe:57:80:6c:47:40:fc:24:87:a9:95:45:68:
fa:a4:9a:a3:cf:1c:8d:f2:54:9e:60:4b:f0:a3:a4:07:ff:7b:
e9:3d:fd:06:dd:43:d2:c2:7c:88:eb:89:e6:7f:9f:61:d2:06:
d0:1e:20:27:68:8f:73:e2:51:35:79:20:1b:74:40:76:86:96:
d9:c1:3d:4b:21:98:6e:89:38:dd:a4:59:46:57:12:77:f9:16:
0f:5f:4b:4b:a9:01:12:db:f1:1a:ea:93:e6:b9:7e:d7:1f:93:
5f:81:c8:e2:a2:d1:c5:a1:f5:d6:ce:49:cb:26:7c:d1:bc:20:
d7:25:87:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpw2/YfN6MolTN6GicAnphkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxZjUxOTY0ZWRlMTJiNGMwMzY3M2QyM2NkNDRjODM3NTMx
NWY0NWEwHhcNMjUxMTExMDMwMDU0WhcNMjUxMTEyMDMwMDU0WjAzMTEwLwYDVQQD
EyhlZDIwMGFmYjQxYmYzMmRkNGUwMzU1M2U0MzBhMmJjMjZhODZiZTBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgx5EGM2LG+M+OHB7JzQOLRFYM7Dh
X4lMSy3h7Dfn2tfhLGVOWrWDnumZutD6xW6DGF0CuU48t4jfqyAN4EuL0N7l4hkq
P7jji2dVO6dx0bM8zD7gVAKSRRxqc/rzsqdjxolFqSlrrm2ZkWi+D6VejwOcQZF3
FxeUIcMFpHxqd8EYgrrTQjn8rAK6TivoD3Ev8Vc0oqhCWqGaoUQNXzh8bLLrJld6
OBn5lyueOEorYbnGKwyqdG/cG0xeSH9TyenrBGB1TIzdd1MVgMaYejfAnRJsZwXJ
LdEWGlDPSA6CgfXAwJ6VyUEHwCkPH3jI3ASYSEGw1y/noSrf88MHqZe6IQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO0gCvtBvzLdTgNVPkMKK8Jqhr4NMB8GA1UdIwQY
MBaAFNH1GWTt4StMA2c9I81EyDdTFfRaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGZVWlpPM2hLMHdEWnowanpVVElOMU1WOUZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9lYmJkZGEtOTU3MS00ZmY1LWI1NmUt
NzUyMjBkNTNhNTVjLzEvMGZVWlpPM2hLMHdEWnowanpVVElOMU1WOUZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi9lYmJkZGEtOTU3MS00ZmY1LWI1NmUtNzUyMjBkNTNhNTVj
LzEvMGZVWlpPM2hLMHdEWnowanpVVElOMU1WOUZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANJsL8QH8
o2X7oCo9v4BalBLs9fRunSoBj0uHV/wyj/ZH451Ncpri7fXFv/iBV9sl1lXjgoXU
eqLfU3qsO1MyqOjsEyQ0V2cNEsIKZ5qB5k+P7tpAzAxt0PruU0gc0cBGhVROjgvV
C3YrW5mPVZBluxW5giw/9+nuN+Gyaq01tJNz87D+V4BsR0D8JIeplUVo+qSao88c
jfJUnmBL8KOkB/976T39Bt1D0sJ8iOuJ5n+fYdIG0B4gJ2iPc+JRNXkgG3RAdoaW
2cE9SyGYbok43aRZRlcSd/kWD19LS6kBEtvxGuqT5rl+1x+TX4HI4qLRxaH11s5J
yyZ80bwg1yWHYg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:47 2025 by rpki-client