Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/cf8791-9980-4c79-9c28-0e16baef7113/1/0zsy4F0KhdvURQ83pz5_ofYQCvw.mft
File: 0zsy4F0KhdvURQ83pz5_ofYQCvw.mft (raw, json)
Hash identifier: lpqGQ2bBDHSVTbpaChWZz6RRpypvIHeY2d2PVWzGBVo=
Subject key identifier: 5B:A3:A3:C1:30:24:B7:7B:4D:27:B1:53:81:F9:01:BD:5F:96:16:EF
Authority key identifier: D3:3B:32:E0:5D:0A:85:DB:D4:45:0F:37:A7:3E:7F:A1:F6:10:0A:FC
Certificate issuer: /CN=d33b32e05d0a85dbd4450f37a73e7fa1f6100afc
Certificate serial: 0199FC58C52E82514B87620A4A8EDB958166
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0zsy4F0KhdvURQ83pz5_ofYQCvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/cf8791-9980-4c79-9c28-0e16baef7113/1/0zsy4F0KhdvURQ83pz5_ofYQCvw.mft
Manifest number: 0A04
Signing time: Sun 19 Oct 2025 12:01:39 +0000
Manifest this update: Sun 19 Oct 2025 12:01:39 +0000
Manifest next update: Mon 20 Oct 2025 12:01:39 +0000
Files and hashes: 1: 0zsy4F0KhdvURQ83pz5_ofYQCvw.crl (hash: 8L8VahdY76n6ygu/7ewnFYEXhb5m3qxFIxd05KKujA0=)
2: PMHzHrS6vvRZOElfdDEFLn4owdU.roa (hash: UQqloSoHMyhRkRNOpx686QqPQutsxYq/mxr1bVAeLpo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/cf8791-9980-4c79-9c28-0e16baef7113/1/0zsy4F0KhdvURQ83pz5_ofYQCvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/cf8791-9980-4c79-9c28-0e16baef7113/1/0zsy4F0KhdvURQ83pz5_ofYQCvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0zsy4F0KhdvURQ83pz5_ofYQCvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:c5:2e:82:51:4b:87:62:0a:4a:8e:db:95:81:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d33b32e05d0a85dbd4450f37a73e7fa1f6100afc
Validity
Not Before: Oct 19 12:01:39 2025 GMT
Not After : Oct 20 12:01:39 2025 GMT
Subject: CN=5ba3a3c13024b77b4d27b15381f901bd5f9616ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:da:2a:f6:bd:f5:27:98:03:7c:51:08:c0:de:
9b:b1:6c:41:47:29:d6:7c:48:37:09:dc:3a:9f:74:
e2:76:c9:10:6c:62:28:ee:6f:15:71:36:41:26:f4:
a0:11:a2:73:a9:ef:28:24:ad:9a:9c:0d:66:8c:20:
59:28:b8:30:ef:c1:36:8d:ae:cf:dc:4c:bf:75:84:
76:48:f3:b9:6c:2c:9b:ec:b8:af:04:b2:65:ed:a1:
fc:38:96:eb:2d:b6:c9:bf:af:93:3e:db:a5:b9:f6:
e7:1b:4b:42:90:e6:0c:cb:d6:ad:fe:b7:01:62:a2:
e3:b8:ac:b5:3e:25:c1:a6:80:df:be:bd:9a:4c:34:
ec:a5:e1:24:1d:08:35:3a:f3:0a:1f:ba:06:be:c4:
18:1f:6f:43:22:b9:0d:82:f2:cf:6f:d4:6b:2c:6b:
fb:4e:24:ae:70:9f:66:ac:5b:18:dd:17:fd:7f:21:
fa:b3:7b:10:66:de:5b:7c:af:18:61:08:91:c2:f9:
01:2f:f5:7e:9a:69:80:71:15:d9:51:1d:1c:46:24:
4a:a8:6a:33:d3:bd:67:67:0e:0e:a3:34:b2:bc:1f:
b6:6e:f3:3b:4a:ce:40:d6:88:9a:8a:df:f5:4c:23:
05:94:18:78:bc:b6:68:97:6b:83:26:5a:f6:e3:dc:
fe:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:A3:A3:C1:30:24:B7:7B:4D:27:B1:53:81:F9:01:BD:5F:96:16:EF
X509v3 Authority Key Identifier:
keyid:D3:3B:32:E0:5D:0A:85:DB:D4:45:0F:37:A7:3E:7F:A1:F6:10:0A:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0zsy4F0KhdvURQ83pz5_ofYQCvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cf8791-9980-4c79-9c28-0e16baef7113/1/0zsy4F0KhdvURQ83pz5_ofYQCvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cf8791-9980-4c79-9c28-0e16baef7113/1/0zsy4F0KhdvURQ83pz5_ofYQCvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:9e:fe:36:7b:45:ca:e8:db:72:9d:97:35:8e:46:c6:8f:b2:
79:30:37:50:0a:4a:b8:8c:31:1a:3b:af:a4:cf:7c:bd:d9:53:
52:69:2a:ce:39:63:33:82:c3:56:63:34:51:ec:df:81:dc:2b:
b7:f4:88:1e:70:36:1c:45:24:76:6a:ec:cd:f0:f9:43:a6:f4:
b5:1b:03:ea:dd:f7:d5:c8:6e:8c:e8:3c:14:c7:9f:60:1c:9b:
fd:a5:c0:cb:cb:9b:c7:09:a8:6c:8c:7d:2b:eb:6b:ca:c7:0d:
d6:89:77:2a:e3:53:32:a0:f9:1d:d6:85:ef:c9:87:e2:5b:c9:
26:b4:7b:d6:50:34:1f:50:06:49:c9:cb:d3:88:ff:b2:61:e1:
21:38:b1:fa:4d:ce:24:66:83:89:d3:fb:10:98:d4:97:c0:a5:
2f:02:1c:e0:41:62:f1:2e:9c:96:76:41:4e:24:d8:ff:d6:84:
fb:1f:f2:de:e4:92:a1:60:b9:c9:89:94:24:88:6f:f6:12:52:
bd:77:ba:46:7d:cc:9c:8a:8a:ea:29:9a:6e:41:96:f7:e7:a3:
59:49:b2:e6:a9:b6:90:da:0c:79:db:ef:d9:ac:64:98:4f:bd:
3d:2d:56:c3:1b:bd:b3:4f:ed:e9:dd:c2:ee:a6:02:0d:30:d8:
b9:d5:5f:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:43:27 2025 by rpki-client