Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/2a4ee3-d76d-48be-add6-78f992475e1f/1/0zpiCyrMj8MLjE1Rj5KX4_fJpgo.mft
File: 0zpiCyrMj8MLjE1Rj5KX4_fJpgo.mft (raw, json)
Hash identifier: YXb/CKn9RT56ZnEhvzg8pl2UEmVNe1FPXa2Bh3E/P0s=
Subject key identifier: 12:92:CC:E1:59:F4:F2:89:50:36:FE:AE:CF:09:0C:FE:93:29:23:F8
Authority key identifier: D3:3A:62:0B:2A:CC:8F:C3:0B:8C:4D:51:8F:92:97:E3:F7:C9:A6:0A
Certificate issuer: /CN=d33a620b2acc8fc30b8c4d518f9297e3f7c9a60a
Certificate serial: 0199FBEB4B4889E6457F085FDF371455E38C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0zpiCyrMj8MLjE1Rj5KX4_fJpgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/2a4ee3-d76d-48be-add6-78f992475e1f/1/0zpiCyrMj8MLjE1Rj5KX4_fJpgo.mft
Manifest number: 0CCF
Signing time: Sun 19 Oct 2025 10:02:05 +0000
Manifest this update: Sun 19 Oct 2025 10:02:05 +0000
Manifest next update: Mon 20 Oct 2025 10:02:05 +0000
Files and hashes: 1: 0zpiCyrMj8MLjE1Rj5KX4_fJpgo.crl (hash: fv4v3vlgeYr/yGHEKk1CGkuVTLwzik4xI2oY4uV/19A=)
2: dQBlElXfO8pSdNwEKXjKZ-O9USg.roa (hash: S1t1SaIMwKXjVRHsk1Cwo0eWHwRLwztBGFQg3vgYpOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/2a4ee3-d76d-48be-add6-78f992475e1f/1/0zpiCyrMj8MLjE1Rj5KX4_fJpgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/2a4ee3-d76d-48be-add6-78f992475e1f/1/0zpiCyrMj8MLjE1Rj5KX4_fJpgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0zpiCyrMj8MLjE1Rj5KX4_fJpgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:4b:48:89:e6:45:7f:08:5f:df:37:14:55:e3:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d33a620b2acc8fc30b8c4d518f9297e3f7c9a60a
Validity
Not Before: Oct 19 10:02:05 2025 GMT
Not After : Oct 20 10:02:05 2025 GMT
Subject: CN=1292cce159f4f2895036feaecf090cfe932923f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:39:47:59:ff:91:65:da:ea:56:b2:19:49:46:
a3:7d:29:af:89:63:89:3b:40:fe:58:bc:01:fe:8f:
82:18:65:de:76:a7:ab:1b:fc:17:f5:07:63:0e:40:
d1:9d:4a:a4:c5:b4:e1:39:ac:57:96:80:be:d7:a4:
8f:45:e6:25:e1:d7:c6:7d:2d:a0:b7:fe:22:41:f6:
6c:a1:5d:14:6a:a1:83:f2:a8:f5:d0:19:67:5e:f8:
41:1a:4b:29:75:e9:b8:e5:e1:d2:f6:75:a8:fa:8a:
c5:7f:98:1c:42:04:25:ee:2a:e7:73:64:e2:73:7d:
c0:0f:77:6d:dc:ff:df:04:f2:dd:05:9c:9b:5f:58:
52:a7:44:e9:ad:a5:c5:63:8b:48:47:19:fa:bf:e8:
4a:0a:c6:19:9f:ec:10:54:98:b2:7d:c8:b4:d7:fb:
d1:8a:6c:87:96:ff:e4:7b:76:89:b7:86:9d:0f:19:
a5:31:65:08:f9:67:c1:6f:c9:b5:bf:6f:83:04:e9:
93:f2:50:53:6e:8e:43:8d:09:9a:2d:d5:19:37:c6:
a6:a0:59:e8:6c:f9:a2:ed:2f:e4:d0:11:2b:d0:db:
73:26:0a:e6:43:1e:0d:ae:36:17:8e:17:16:3a:8e:
38:db:33:d7:28:42:44:73:c0:7c:40:96:fd:3e:7c:
d9:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:92:CC:E1:59:F4:F2:89:50:36:FE:AE:CF:09:0C:FE:93:29:23:F8
X509v3 Authority Key Identifier:
keyid:D3:3A:62:0B:2A:CC:8F:C3:0B:8C:4D:51:8F:92:97:E3:F7:C9:A6:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0zpiCyrMj8MLjE1Rj5KX4_fJpgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/2a4ee3-d76d-48be-add6-78f992475e1f/1/0zpiCyrMj8MLjE1Rj5KX4_fJpgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/2a4ee3-d76d-48be-add6-78f992475e1f/1/0zpiCyrMj8MLjE1Rj5KX4_fJpgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:78:07:41:57:84:8e:41:8d:1c:6d:ff:3c:16:09:51:01:19:
bf:e2:47:ff:4a:1e:c9:25:98:48:14:a5:56:8a:12:be:de:28:
b6:76:f9:6b:8f:ee:e3:42:b5:dc:0e:a3:63:93:db:03:8c:6a:
c1:39:42:4a:d8:1d:dc:98:9e:6e:8a:91:44:35:e7:ba:a6:45:
f4:b7:d2:74:04:f2:9b:9b:30:02:b0:5e:49:c9:36:7b:90:f0:
65:c2:4d:3f:ca:82:f3:7f:9b:4a:d1:19:34:2b:e9:e1:cd:05:
41:d5:5d:24:66:be:46:7e:e2:76:d5:59:81:6f:c3:75:91:03:
da:23:c8:d0:02:95:ba:7f:42:6a:ec:07:aa:ca:6f:d7:1e:98:
7f:0e:28:7b:9f:c3:c8:0b:b9:76:93:3a:03:a7:80:7f:f8:b3:
ba:aa:e1:18:4c:3d:ca:1b:0d:b1:5c:1e:c0:eb:7b:da:c8:40:
16:5f:1a:9d:9a:49:c0:23:03:3f:e6:82:74:a5:21:9f:aa:3b:
4e:f8:ae:de:31:c9:33:1c:90:78:ff:21:03:7f:9e:a7:f9:49:
13:de:97:78:b3:02:e1:df:be:8a:41:96:86:fe:4a:44:94:0c:
ef:63:77:50:cf:e2:71:a1:94:e1:14:83:18:b9:68:01:b8:85:
54:10:f9:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:37:52 2025 by rpki-client