Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/0ZMX0nI53HsNVBM74aplydwB9DQ.mft
File: 0ZMX0nI53HsNVBM74aplydwB9DQ.mft (raw, json)
Hash identifier: g+18uZ0AktILWt6NKBGMvpykZ7fIETiH9mi/prgOw1g=
Subject key identifier: 6A:9C:30:A7:30:28:83:0A:0E:3B:F1:20:56:2A:E9:54:6A:BE:A2:E1
Authority key identifier: D1:93:17:D2:72:39:DC:7B:0D:54:13:3B:E1:AA:65:C9:DC:01:F4:34
Certificate issuer: /CN=d19317d27239dc7b0d54133be1aa65c9dc01f434
Certificate serial: 019A733863B74394F39FB4EF019836A5E6D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ZMX0nI53HsNVBM74aplydwB9DQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/0ZMX0nI53HsNVBM74aplydwB9DQ.mft
Manifest number: 1262
Signing time: Tue 11 Nov 2025 14:01:06 +0000
Manifest this update: Tue 11 Nov 2025 14:01:06 +0000
Manifest next update: Wed 12 Nov 2025 14:01:06 +0000
Files and hashes: 1: 0ZMX0nI53HsNVBM74aplydwB9DQ.crl (hash: UjfjrQgQyb2QupS4j6EobqZ5pwfWI2bfVkVGRTVPK2I=)
2: dP48VWalcUAAFfcn9eWWeMKf0-w.roa (hash: 1XMmQlTq3rn/vph5sokkv8eSVZlOdVkw7fiia74kGx4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/0ZMX0nI53HsNVBM74aplydwB9DQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/0ZMX0nI53HsNVBM74aplydwB9DQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/0ZMX0nI53HsNVBM74aplydwB9DQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:38:63:b7:43:94:f3:9f:b4:ef:01:98:36:a5:e6:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d19317d27239dc7b0d54133be1aa65c9dc01f434
Validity
Not Before: Nov 11 14:01:06 2025 GMT
Not After : Nov 12 14:01:06 2025 GMT
Subject: CN=6a9c30a73028830a0e3bf120562ae9546abea2e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:11:ca:72:66:2f:dd:62:a0:f7:c4:db:7a:85:
bd:94:be:4d:d5:da:c1:ed:f5:12:14:f6:e7:89:f8:
ef:ef:29:48:ab:ce:5e:97:a0:17:83:38:68:c7:8b:
34:f4:2e:c3:55:57:2f:53:c3:47:61:aa:9b:e6:cd:
63:8f:8e:61:45:22:02:5a:03:0a:25:74:6d:21:70:
be:af:8c:53:8d:89:ff:c5:69:79:3f:b1:a2:74:3f:
3c:df:84:f9:32:8a:7e:34:14:8a:82:ee:6c:bd:72:
91:1a:73:54:0d:85:9e:2c:64:05:2f:95:ee:b5:da:
0b:56:8c:fa:03:e7:36:f8:13:01:f3:4a:9c:50:9a:
cd:df:9c:3a:fd:40:97:34:28:e9:05:7d:2d:4f:fa:
cf:7b:95:e1:3d:4c:32:fa:c4:7e:a3:f0:75:30:3d:
de:7a:d9:7c:fe:a3:56:c6:03:17:ab:da:8f:f4:cb:
71:98:b2:9c:29:e8:56:aa:11:fb:1f:e1:5f:77:2f:
f1:50:47:f9:1d:b2:24:4a:1d:12:1b:c5:87:0c:5c:
c6:ea:95:c9:6f:4f:33:f0:c7:ac:94:57:5c:e3:6e:
52:63:81:e4:95:de:f9:6f:e5:40:48:14:53:d3:83:
40:6b:9c:59:6e:45:bc:63:fc:b2:d2:7b:36:3a:09:
45:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:9C:30:A7:30:28:83:0A:0E:3B:F1:20:56:2A:E9:54:6A:BE:A2:E1
X509v3 Authority Key Identifier:
keyid:D1:93:17:D2:72:39:DC:7B:0D:54:13:3B:E1:AA:65:C9:DC:01:F4:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ZMX0nI53HsNVBM74aplydwB9DQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/0ZMX0nI53HsNVBM74aplydwB9DQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/0ZMX0nI53HsNVBM74aplydwB9DQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:85:14:c2:39:1c:26:2e:b9:e3:2f:c7:ca:e0:38:f7:ef:e0:
58:9c:3f:78:c8:16:50:61:8f:55:e1:7a:a0:4c:e6:7b:be:b9:
2f:bd:b1:ef:bb:06:04:f7:b7:cc:ba:f9:e8:8b:15:8e:4f:5e:
2f:92:4e:72:e9:92:68:51:90:c3:82:fa:df:50:37:51:56:54:
3b:94:bd:4e:03:1a:a6:48:90:f9:6e:14:2b:e9:b2:17:17:60:
ac:f7:97:ff:56:fb:fd:c8:d6:40:4e:15:3b:2a:80:14:33:ac:
d9:10:3c:41:24:e4:6b:df:f7:55:cc:26:ec:46:d3:dd:55:00:
57:07:6a:fa:c8:81:39:dd:b9:6b:ee:11:3c:d1:7e:a4:c1:fa:
de:19:fb:21:d4:8d:3a:cd:ea:a4:0b:ed:e3:9e:f6:90:ad:65:
7f:a7:fd:d6:93:4d:4c:31:d7:e1:90:54:93:03:a3:cc:18:46:
a3:62:f2:f7:6e:c6:84:e0:76:c1:5a:61:ea:68:8f:38:2e:6d:
bb:72:1c:4a:ce:ff:a7:10:6a:7b:bb:b5:09:29:41:ce:db:d1:
bf:fd:4d:2b:38:9d:ac:7d:fc:85:1d:59:74:79:57:13:3a:7b:
9e:60:ab:b5:fe:08:b2:a2:d5:f9:ee:db:3a:4f:17:c7:43:0d:
41:a0:e4:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:41:12 2025 by rpki-client