Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/_0zNsS_CLrhX-GxWWovFFR0FMrA.mft
File: _0zNsS_CLrhX-GxWWovFFR0FMrA.mft (raw, json)
Hash identifier: JOgnZe/OHlb66SMUwLUu+6391TaSXKOLLsYZoAbPeVg=
Subject key identifier: 79:36:AA:7C:56:90:2B:8C:31:68:A5:B5:41:33:66:60:30:C6:FE:87
Authority key identifier: FF:4C:CD:B1:2F:C2:2E:B8:57:F8:6C:56:5A:8B:C5:15:1D:05:32:B0
Certificate issuer: /CN=ff4ccdb12fc22eb857f86c565a8bc5151d0532b0
Certificate serial: 0199FE10598DF813D8ECD9A4BA21B9094E78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0zNsS_CLrhX-GxWWovFFR0FMrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/_0zNsS_CLrhX-GxWWovFFR0FMrA.mft
Manifest number: 076A
Signing time: Sun 19 Oct 2025 20:01:48 +0000
Manifest this update: Sun 19 Oct 2025 20:01:48 +0000
Manifest next update: Mon 20 Oct 2025 20:01:48 +0000
Files and hashes: 1: T-Yw2cTI2wr-Y-TJOoMJXVh3bJU.roa (hash: 0NqJgy30YTXcCM9pl9HQ+jtoeVufCCiGR0QgwmWh8es=)
2: _0zNsS_CLrhX-GxWWovFFR0FMrA.crl (hash: infXD1qDX8/v2vApasCceplDm5HZ/JwhJ+GxEND6ZOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/_0zNsS_CLrhX-GxWWovFFR0FMrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/_0zNsS_CLrhX-GxWWovFFR0FMrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_0zNsS_CLrhX-GxWWovFFR0FMrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:10:59:8d:f8:13:d8:ec:d9:a4:ba:21:b9:09:4e:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff4ccdb12fc22eb857f86c565a8bc5151d0532b0
Validity
Not Before: Oct 19 20:01:48 2025 GMT
Not After : Oct 20 20:01:48 2025 GMT
Subject: CN=7936aa7c56902b8c3168a5b54133666030c6fe87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:2e:a8:44:9c:d3:b7:0e:21:78:63:aa:74:82:
f8:53:c8:e1:02:08:31:df:dd:a4:b0:05:8b:d0:71:
3c:60:b0:f2:10:a9:37:1e:9a:9a:7e:b2:51:79:bf:
0e:6f:ed:b0:8e:c0:ce:69:17:57:94:b1:f6:ab:7c:
a6:4f:01:c0:d2:81:08:b3:1a:db:8b:e1:96:6b:61:
4a:6e:24:c9:e3:37:9d:d2:d2:72:34:c3:01:d9:03:
8b:be:4f:6f:a7:0f:85:69:b3:03:33:20:c6:1b:ea:
95:25:c2:ea:41:e9:cf:93:2e:26:9f:1e:d1:31:a9:
26:ab:87:64:6f:79:c5:7a:ea:43:bc:d5:e5:9d:73:
4d:2f:e6:9c:33:42:94:38:94:48:49:a9:33:1d:6d:
89:bb:64:f0:51:db:5e:f6:40:07:48:fd:dd:bc:8c:
d4:9d:a4:12:d1:8d:4a:f6:0b:e3:36:7b:a7:cb:e0:
25:7a:e8:69:fd:42:c2:a2:cd:ff:b9:18:ec:d0:ca:
42:dd:90:9e:0d:f4:0a:71:ad:90:7a:dd:fa:98:0e:
f5:b9:61:21:17:a8:de:34:f4:54:8f:63:ef:e7:ae:
9e:0e:0a:2c:e5:dc:57:8e:79:09:37:85:da:83:55:
9d:ca:c0:6c:72:b7:9b:d2:da:bc:bd:a8:8c:a6:f2:
5e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:36:AA:7C:56:90:2B:8C:31:68:A5:B5:41:33:66:60:30:C6:FE:87
X509v3 Authority Key Identifier:
keyid:FF:4C:CD:B1:2F:C2:2E:B8:57:F8:6C:56:5A:8B:C5:15:1D:05:32:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0zNsS_CLrhX-GxWWovFFR0FMrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/_0zNsS_CLrhX-GxWWovFFR0FMrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/_0zNsS_CLrhX-GxWWovFFR0FMrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:cf:b1:43:aa:22:d3:b1:d8:d4:4a:39:72:1f:e1:5b:82:29:
f3:0b:21:2f:df:87:7c:da:e3:97:47:de:a2:47:a0:23:60:00:
5d:b9:4a:23:aa:11:c8:47:69:e1:bf:e6:a6:68:90:fb:76:72:
de:c2:7b:88:52:f4:96:f8:4c:75:e4:92:fc:57:89:4b:9b:3c:
0a:3b:e1:c9:2e:2b:30:b3:fe:20:69:94:18:ef:34:4c:a5:cf:
b5:55:77:6f:14:1e:6a:88:0f:b5:fa:2d:77:f6:e0:0e:1c:dc:
0b:83:e2:5a:83:b9:aa:80:96:12:23:06:49:c2:5f:64:bb:54:
ad:a1:39:88:e8:c2:53:45:eb:55:92:1b:6a:97:a0:79:12:57:
c4:c9:2a:c1:db:65:e2:0b:1d:ce:8f:0a:b0:9d:bb:14:4a:85:
cc:e7:b3:5d:9a:89:30:84:6c:2f:40:83:55:a3:49:6e:c0:ae:
b1:32:61:76:7c:75:67:24:4a:90:a4:5e:92:ca:f5:c4:2a:5b:
02:30:89:43:e6:24:57:a9:49:07:a7:11:1a:c6:4e:f4:c9:24:
dc:4d:e1:71:67:55:96:3f:c2:74:70:95:8f:cb:d1:1d:98:42:
41:45:72:89:1f:be:0e:49:15:23:5f:c9:c0:2a:ad:17:a6:b7:
33:b5:28:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:59:38 2025 by rpki-client