Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.mft
File: 0zDcrR41MkVJwcmhlBerak0JreA.mft (raw, json)
Hash identifier: Rw868QsoaBH9kawsksADHNwWWZrGEr4+sm305edH/Gw=
Subject key identifier: B8:55:67:93:0C:04:38:FE:C5:A7:72:81:61:A4:3A:82:FA:EB:0D:65
Authority key identifier: D3:30:DC:AD:1E:35:32:45:49:C1:C9:A1:94:17:AB:6A:4D:09:AD:E0
Certificate issuer: /CN=d330dcad1e35324549c1c9a19417ab6a4d09ade0
Certificate serial: 019A71B8BB17E36083ECA447178B208AE4A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0zDcrR41MkVJwcmhlBerak0JreA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.mft
Manifest number: 0DF4
Signing time: Tue 11 Nov 2025 07:02:03 +0000
Manifest this update: Tue 11 Nov 2025 07:02:03 +0000
Manifest next update: Wed 12 Nov 2025 07:02:03 +0000
Files and hashes: 1: 0zDcrR41MkVJwcmhlBerak0JreA.crl (hash: OQmwindjE9H/nzavY+f12GuvxJ4aoUmb+RZuYAzyULk=)
2: LPCDu87vvEM5O8HyjWDakdHtl2E.roa (hash: Wurynnxc4HmLUHSiIQ2miFmjlyoy/berebBUDyFaz/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0zDcrR41MkVJwcmhlBerak0JreA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:bb:17:e3:60:83:ec:a4:47:17:8b:20:8a:e4:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d330dcad1e35324549c1c9a19417ab6a4d09ade0
Validity
Not Before: Nov 11 07:02:03 2025 GMT
Not After : Nov 12 07:02:03 2025 GMT
Subject: CN=b85567930c0438fec5a7728161a43a82faeb0d65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:8c:3e:4c:98:ea:b8:ef:9d:27:34:a1:9c:5e:
2c:9b:0d:7a:d4:98:2a:58:54:08:90:c2:c7:2b:b3:
ca:bd:24:2d:7c:06:4f:47:66:da:43:54:f3:e6:de:
df:92:bd:1a:c0:63:24:51:21:f1:95:76:b2:5c:fc:
fd:00:4a:77:df:0b:fe:2d:b4:0f:b7:4f:17:bc:ae:
dc:ba:8d:b3:ff:91:30:be:09:12:fd:85:ac:47:30:
93:2d:a7:1e:8e:e5:ed:0e:2d:a9:43:f3:ee:8a:c0:
75:6d:62:94:eb:d5:49:46:51:75:bf:ef:e5:87:71:
bc:19:6c:61:1d:bd:df:e3:ee:02:a8:32:4d:25:59:
0f:cf:64:87:f5:60:7d:d4:f4:ed:fb:2b:f0:f3:13:
dd:20:42:d3:68:7a:ad:ac:9e:6b:42:1a:fe:e8:95:
b8:39:e3:b8:87:46:3f:27:ff:ef:62:3e:93:3a:8c:
8f:4c:33:9d:a6:99:50:92:a3:b7:13:81:05:8b:5c:
35:12:6c:31:ca:34:c6:69:19:4e:20:c5:67:81:3b:
49:21:ca:60:23:e5:30:6e:2c:2c:74:e7:0c:59:38:
6b:64:7e:19:28:cf:a3:1f:55:c8:ad:4f:d6:35:0f:
90:bc:c2:d2:d8:82:b9:80:29:22:6b:7b:f4:cd:b2:
6b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:55:67:93:0C:04:38:FE:C5:A7:72:81:61:A4:3A:82:FA:EB:0D:65
X509v3 Authority Key Identifier:
keyid:D3:30:DC:AD:1E:35:32:45:49:C1:C9:A1:94:17:AB:6A:4D:09:AD:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0zDcrR41MkVJwcmhlBerak0JreA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:3b:56:5a:03:d4:de:ee:f8:23:7e:85:7f:4b:56:9d:24:67:
e9:10:d4:43:ce:cf:cd:44:80:ef:97:08:29:c6:48:0c:95:53:
52:01:d7:92:19:ad:e7:5e:25:ef:05:77:2c:ae:7f:5f:fa:cd:
aa:15:06:86:57:03:84:a8:63:fa:2a:ee:fe:15:f4:d2:7e:d0:
ba:a4:12:6a:8d:a5:00:e4:de:3d:3e:25:40:6d:42:f3:54:e2:
ec:1c:51:58:78:d5:0c:25:9c:67:3b:e0:88:df:8a:b3:15:97:
8a:e4:26:2e:da:48:a4:74:cc:69:d5:45:fe:a9:2c:3d:37:33:
7f:5b:4e:f5:00:8d:b2:e2:bf:a8:e6:08:ba:5d:49:ed:f4:00:
0c:6d:85:90:7d:d9:34:26:3f:ca:8f:fe:55:00:5e:85:65:03:
d5:49:66:d9:e8:66:3d:19:3b:fc:2d:34:f0:0a:3c:99:45:3e:
62:3a:7e:e9:c6:4b:15:9d:ed:c7:4a:fa:51:8e:99:73:dc:ac:
d1:c2:f8:4a:55:ae:4e:50:77:45:23:2f:de:b8:53:9b:a2:23:
e9:1d:b8:75:56:84:31:8b:25:37:3a:f0:8d:59:d4:ae:d2:36:
47:24:1a:72:cc:ae:ba:d5:a1:f9:8d:db:31:8a:69:70:85:9f:
1d:2a:c3:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:42:01 2025 by rpki-client