Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/113f5f-be58-478c-9030-32d80d8d1615/1/0tzocORzw1QnPonF5OLtPgwGk1Y.mft
File: 0tzocORzw1QnPonF5OLtPgwGk1Y.mft (raw, json)
Hash identifier: v3sHIbdlAnnVRWZdXds0cfPohYgIs/WMKDiHvso8LXM=
Subject key identifier: E7:EA:86:55:71:1C:08:B3:52:1B:81:BA:14:84:99:36:F4:A0:B2:80
Authority key identifier: D2:DC:E8:70:E4:73:C3:54:27:3E:89:C5:E4:E2:ED:3E:0C:06:93:56
Certificate issuer: /CN=d2dce870e473c354273e89c5e4e2ed3e0c069356
Certificate serial: 0199FC58283877B81A42B011B18DF35942F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0tzocORzw1QnPonF5OLtPgwGk1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/113f5f-be58-478c-9030-32d80d8d1615/1/0tzocORzw1QnPonF5OLtPgwGk1Y.mft
Manifest number: 0B3A
Signing time: Sun 19 Oct 2025 12:00:59 +0000
Manifest this update: Sun 19 Oct 2025 12:00:59 +0000
Manifest next update: Mon 20 Oct 2025 12:00:59 +0000
Files and hashes: 1: 0tzocORzw1QnPonF5OLtPgwGk1Y.crl (hash: 3HLb5kNWx0BM0UG6zXRVV6ivAK9/mab8ZV+6avXz9Kc=)
2: tTZ8ChHVIsV9vssdJRRwpvt77Ic.roa (hash: vUfunefLZb2Jpmp53yxYY0pVxR49oq3Pwb2HHqDzrlg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/113f5f-be58-478c-9030-32d80d8d1615/1/0tzocORzw1QnPonF5OLtPgwGk1Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/113f5f-be58-478c-9030-32d80d8d1615/1/0tzocORzw1QnPonF5OLtPgwGk1Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/0tzocORzw1QnPonF5OLtPgwGk1Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:28:38:77:b8:1a:42:b0:11:b1:8d:f3:59:42:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2dce870e473c354273e89c5e4e2ed3e0c069356
Validity
Not Before: Oct 19 12:00:59 2025 GMT
Not After : Oct 20 12:00:59 2025 GMT
Subject: CN=e7ea8655711c08b3521b81ba14849936f4a0b280
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:21:c5:8b:63:88:b1:65:6e:e0:f0:80:01:91:
e3:20:10:cb:25:55:28:6b:8b:a0:2d:50:dc:c3:7f:
e3:a5:99:16:b4:0c:ab:94:74:29:f9:6e:52:36:71:
8b:f7:9e:74:53:78:00:cb:82:71:75:a7:73:eb:5a:
83:b8:a3:7d:c6:a7:1b:0c:1a:22:95:96:f9:80:47:
77:33:52:4c:46:1e:f6:86:29:44:6a:1b:f7:6c:43:
c6:9d:73:2e:94:e4:d9:24:af:c5:a9:b5:bf:55:19:
fd:17:a5:a2:7c:c7:4f:f4:d7:4c:07:99:50:49:29:
66:75:45:90:d1:3c:d3:51:b6:5a:c3:64:86:96:d6:
d6:d0:a1:96:55:e9:a7:ac:94:b6:74:74:f6:14:24:
e0:39:b3:4e:b8:be:61:87:e1:12:29:b9:d8:61:b0:
74:5a:aa:98:e0:7a:72:70:59:98:9e:a5:ef:99:b1:
51:f8:40:ac:59:a5:a5:70:5a:b5:2f:69:cf:f3:e7:
a4:9c:42:22:54:6b:f7:43:38:d1:06:6e:2d:f8:c0:
86:d9:ec:ae:c9:d6:b5:4b:e4:5d:da:e3:dc:a4:3d:
77:35:85:26:0f:89:00:b1:b5:50:ef:17:50:6e:50:
06:06:21:52:67:b4:41:83:fc:88:95:b8:30:f4:ef:
3c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:EA:86:55:71:1C:08:B3:52:1B:81:BA:14:84:99:36:F4:A0:B2:80
X509v3 Authority Key Identifier:
keyid:D2:DC:E8:70:E4:73:C3:54:27:3E:89:C5:E4:E2:ED:3E:0C:06:93:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0tzocORzw1QnPonF5OLtPgwGk1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/113f5f-be58-478c-9030-32d80d8d1615/1/0tzocORzw1QnPonF5OLtPgwGk1Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/113f5f-be58-478c-9030-32d80d8d1615/1/0tzocORzw1QnPonF5OLtPgwGk1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:b0:85:d1:e5:a6:27:98:03:a6:fd:2c:26:e7:e2:a3:2d:21:
42:fe:7d:15:96:c8:b9:d7:5e:a3:79:84:7e:30:1c:15:9e:e7:
fe:3e:c5:6c:03:a8:f1:26:fa:08:96:2d:3c:48:c7:25:bd:dd:
06:5b:ea:9c:a4:fd:de:49:c7:7f:b2:91:94:47:e7:73:d4:29:
4e:e8:c6:62:fa:47:28:99:a6:66:9e:07:ab:29:41:bf:b7:f0:
59:48:4d:6f:59:1d:24:60:9d:e4:bf:1e:f3:16:cb:be:66:1e:
7c:4c:7a:64:cf:73:cb:8a:e9:17:80:88:52:a9:25:72:25:b8:
b3:94:01:a7:a6:a9:0c:69:36:e3:8f:b5:01:bc:3a:28:0f:7a:
e3:b5:88:35:5b:1d:3c:36:b1:16:8d:d4:06:cd:c6:40:99:60:
45:f5:42:90:b3:55:c9:a5:20:ae:9c:17:2d:ca:d8:48:d8:61:
91:48:87:a2:7c:ee:2c:78:94:ac:03:90:c8:f1:4b:3f:3c:d0:
60:13:a0:a4:8d:52:4f:2e:82:43:bc:f5:2b:bc:7f:9f:04:7f:
ee:34:32:7b:8b:a6:3e:2e:ba:d5:01:8f:5c:6d:63:82:f2:1f:
ab:fe:62:5e:99:cd:66:1f:00:20:20:1d:c6:87:ae:b5:b8:90:
43:74:35:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:49 2025 by rpki-client