Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/01CzV9ze5o--vcVVPbMknG6Clsc.mft
File: 01CzV9ze5o--vcVVPbMknG6Clsc.mft (raw, json)
Hash identifier: TVxMZP++Qpg1tFstJnwuzrMHy+xgYtITBSeF7UVdzrc=
Subject key identifier: 79:2C:09:75:41:A3:02:9E:B7:AF:43:FA:13:46:05:BA:42:92:6F:99
Authority key identifier: D3:50:B3:57:DC:DE:E6:8F:BE:BD:C5:55:3D:B3:24:9C:6E:82:96:C7
Certificate issuer: /CN=d350b357dcdee68fbebdc5553db3249c6e8296c7
Certificate serial: 019A725C625F70A5C0C70DDCABCE4A0032BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/01CzV9ze5o--vcVVPbMknG6Clsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/01CzV9ze5o--vcVVPbMknG6Clsc.mft
Manifest number: 0629
Signing time: Tue 11 Nov 2025 10:00:48 +0000
Manifest this update: Tue 11 Nov 2025 10:00:48 +0000
Manifest next update: Wed 12 Nov 2025 10:00:48 +0000
Files and hashes: 1: 01CzV9ze5o--vcVVPbMknG6Clsc.crl (hash: SLN/yRPXEpKOO2uFfdhPZh0/RMBie8xrtn97QD91V5s=)
2: WJYo92ZVpAUd1BuZPEnAl356iuU.roa (hash: zcoBYroeH3hhjkU4dDCY2xfjvG2eq71PoTaXan33w2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/01CzV9ze5o--vcVVPbMknG6Clsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/01CzV9ze5o--vcVVPbMknG6Clsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/01CzV9ze5o--vcVVPbMknG6Clsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:62:5f:70:a5:c0:c7:0d:dc:ab:ce:4a:00:32:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d350b357dcdee68fbebdc5553db3249c6e8296c7
Validity
Not Before: Nov 11 10:00:48 2025 GMT
Not After : Nov 12 10:00:48 2025 GMT
Subject: CN=792c097541a3029eb7af43fa134605ba42926f99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:73:5a:ad:62:d3:c4:62:4a:84:2c:21:ae:32:
df:84:2d:58:7b:91:34:95:4b:37:2c:96:27:d1:3f:
cb:72:7f:0d:33:db:c3:da:02:ba:f0:c7:9b:95:3e:
0f:be:c7:60:f0:d8:da:e7:70:19:e8:34:48:68:2d:
86:af:44:34:d0:a6:be:81:f5:65:f8:53:d4:41:67:
c7:e5:11:fe:d7:bd:ac:84:95:3c:64:8e:75:9c:e6:
48:a4:a3:74:21:30:f6:8a:19:88:e1:b0:68:d1:52:
f0:c1:e2:af:82:36:c3:ed:ef:e3:c3:23:10:f9:6b:
d7:7a:65:ba:d4:51:b3:49:84:23:60:41:38:66:96:
27:a8:80:e2:7e:9e:84:b1:2a:af:c2:98:b5:a2:7c:
6e:f1:79:62:09:be:a2:11:8f:4a:70:4a:ff:ae:6e:
b2:00:bb:8c:37:b8:65:95:0e:8f:e7:1a:c2:c0:2c:
08:6d:16:b6:14:2c:22:2d:ac:84:76:cf:72:59:ed:
00:87:ca:17:59:5f:7a:c4:9d:2e:c6:6a:9d:a2:b1:
25:23:e3:a8:b8:af:58:17:c3:ad:9a:5a:ac:e2:aa:
21:6f:5c:bb:18:e8:92:05:79:a5:28:3e:1d:6d:e0:
23:6c:d4:6b:a6:a5:6d:3c:a0:cb:5a:c0:68:9e:b4:
db:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:2C:09:75:41:A3:02:9E:B7:AF:43:FA:13:46:05:BA:42:92:6F:99
X509v3 Authority Key Identifier:
keyid:D3:50:B3:57:DC:DE:E6:8F:BE:BD:C5:55:3D:B3:24:9C:6E:82:96:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01CzV9ze5o--vcVVPbMknG6Clsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/01CzV9ze5o--vcVVPbMknG6Clsc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/01CzV9ze5o--vcVVPbMknG6Clsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:72:9f:a8:7c:4a:ef:e6:9e:ca:0e:50:fe:7f:b4:6a:a7:44:
cb:1e:9c:72:53:b5:cc:bb:4a:5c:66:38:1b:54:8a:23:2e:bd:
76:5e:cd:e9:1d:24:38:5e:58:95:16:f5:3e:ad:e7:d8:d2:b7:
26:79:92:73:75:47:6b:51:71:a3:68:d7:72:ab:6d:61:7e:b0:
29:fd:8a:7c:e2:b3:0d:8b:52:dc:5e:df:83:7e:06:89:55:93:
8b:4e:f4:ce:2b:19:7d:e8:6f:bc:45:1b:8e:66:fd:ac:e7:e2:
f4:0a:c4:0e:b5:42:96:dd:b3:39:37:ac:ed:b0:4c:00:32:df:
be:22:8b:cd:22:83:42:2f:98:d1:3a:66:42:9e:dd:dd:41:b6:
76:5b:e1:51:be:9b:cd:e7:68:81:e6:5f:f9:63:5c:74:67:27:
c1:e1:c5:6e:8d:50:f7:7c:71:6e:e3:ad:d6:04:a3:47:50:5e:
61:4e:60:be:aa:7d:a4:f4:f7:89:c3:ea:15:86:3f:56:32:32:
47:db:37:aa:95:35:7a:48:6a:0f:80:12:51:ce:75:ca:ca:ba:
43:f7:0d:b1:64:52:da:68:cd:af:cb:84:0b:61:62:1f:05:d2:
9c:42:73:dd:24:64:51:d1:8d:f8:a8:a5:bc:4c:fe:64:56:2a:
ff:40:73:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyXGJfcKXAxw3cq85KADK6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzNTBiMzU3ZGNkZWU2OGZiZWJkYzU1NTNkYjMyNDljNmU4
Mjk2YzcwHhcNMjUxMTExMTAwMDQ4WhcNMjUxMTEyMTAwMDQ4WjAzMTEwLwYDVQQD
Eyg3OTJjMDk3NTQxYTMwMjllYjdhZjQzZmExMzQ2MDViYTQyOTI2Zjk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1XNarWLTxGJKhCwhrjLfhC1Ye5E0
lUs3LJYn0T/Lcn8NM9vD2gK68MeblT4Pvsdg8Nja53AZ6DRIaC2Gr0Q00Ka+gfVl
+FPUQWfH5RH+172shJU8ZI51nOZIpKN0ITD2ihmI4bBo0VLwweKvgjbD7e/jwyMQ
+WvXemW61FGzSYQjYEE4ZpYnqIDifp6EsSqvwpi1onxu8XliCb6iEY9KcEr/rm6y
ALuMN7hllQ6P5xrCwCwIbRa2FCwiLayEds9yWe0Ah8oXWV96xJ0uxmqdorElI+Oo
uK9YF8Otmlqs4qohb1y7GOiSBXmlKD4dbeAjbNRrpqVtPKDLWsBonrTbUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHksCXVBowKet69D+hNGBbpCkm+ZMB8GA1UdIwQY
MBaAFNNQs1fc3uaPvr3FVT2zJJxugpbHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDFDelY5emU1by0tdmNWVlBiTWtuRzZDbHNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8wYjU2OTYtZTc3Ni00MDIxLWJhZGYt
ZmZlZDUzZjQ1ZGVkLzEvMDFDelY5emU1by0tdmNWVlBiTWtuRzZDbHNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC8wYjU2OTYtZTc3Ni00MDIxLWJhZGYtZmZlZDUzZjQ1ZGVk
LzEvMDFDelY5emU1by0tdmNWVlBiTWtuRzZDbHNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATXKfqHxK
7+aeyg5Q/n+0aqdEyx6cclO1zLtKXGY4G1SKIy69dl7N6R0kOF5YlRb1Pq3n2NK3
JnmSc3VHa1Fxo2jXcqttYX6wKf2KfOKzDYtS3F7fg34GiVWTi070zisZfehvvEUb
jmb9rOfi9ArEDrVClt2zOTes7bBMADLfviKLzSKDQi+Y0TpmQp7d3UG2dlvhUb6b
zedogeZf+WNcdGcnweHFbo1Q93xxbuOt1gSjR1BeYU5gvqp9pPT3icPqFYY/VjIy
R9s3qpU1ekhqD4ASUc51ysq6Q/cNsWRS2mjNr8uEC2FiHwXSnEJz3SRkUdGN+Kil
vEz+ZFYq/0BzRw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:43:02 2025 by rpki-client