Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/ebbdda-9571-4ff5-b56e-75220d53a55c/1/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.mft
File: 0fUZZO3hK0wDZz0jzUTIN1MV9Fo.mft (raw, json)
Hash identifier: vID34YKTUj/qP2smssm9AsRPKZJYaFAv81XMOpzoeHU=
Subject key identifier: C7:E4:E6:8C:03:8E:79:1A:88:4C:68:A5:17:2E:5D:DF:26:94:A4:8F
Authority key identifier: D1:F5:19:64:ED:E1:2B:4C:03:67:3D:23:CD:44:C8:37:53:15:F4:5A
Certificate issuer: /CN=d1f51964ede12b4c03673d23cd44c8375315f45a
Certificate serial: 019A00DA524415990BFB4BF01D6BCC303856
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/ebbdda-9571-4ff5-b56e-75220d53a55c/1/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.mft
Manifest number: 05D0
Signing time: Mon 20 Oct 2025 09:01:39 +0000
Manifest this update: Mon 20 Oct 2025 09:01:39 +0000
Manifest next update: Tue 21 Oct 2025 09:01:39 +0000
Files and hashes: 1: 0fUZZO3hK0wDZz0jzUTIN1MV9Fo.crl (hash: e3K2fW4YG9t+fz+cUQ1FJf4axEJoHW51lxe1RiJt3XE=)
2: cotZl6z9OJ-fauLOJe6XV8WAuTo.roa (hash: pFgMJLMj7SXSgI1OYpF9YOIHVLweh2wDrctvJeRJL4M=)
3: kchelfWvJ5H-ipXayPr2lYfELpU.roa (hash: 9NIJWgo1KUO6egMwGucTZhKbewDIQ9m/pLPQ1oGGlaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/ebbdda-9571-4ff5-b56e-75220d53a55c/1/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/ebbdda-9571-4ff5-b56e-75220d53a55c/1/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:da:52:44:15:99:0b:fb:4b:f0:1d:6b:cc:30:38:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1f51964ede12b4c03673d23cd44c8375315f45a
Validity
Not Before: Oct 20 09:01:39 2025 GMT
Not After : Oct 21 09:01:39 2025 GMT
Subject: CN=c7e4e68c038e791a884c68a5172e5ddf2694a48f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:55:21:41:57:8d:8f:aa:3f:63:42:05:7b:20:
28:76:bc:c6:9f:7b:61:5e:4e:c1:b9:92:f3:63:ed:
da:09:74:d5:7a:4d:c7:a2:1f:d2:d1:93:65:8d:40:
b7:13:06:64:30:50:b5:8c:80:1d:a4:9b:ea:e9:f8:
cb:b8:93:24:b6:4c:8e:d9:96:9e:b5:1d:0e:cd:29:
38:a2:95:d3:d6:ae:93:d9:8d:8d:99:83:7b:94:1a:
3a:00:37:66:7b:15:39:33:9d:88:44:60:c3:12:49:
17:ee:f3:cb:7c:04:55:01:d1:d6:bf:e5:69:b9:86:
51:3c:bf:e4:ba:cf:fe:f8:0e:e7:08:00:2a:78:b2:
df:ce:e7:71:a5:c1:b2:e1:12:a8:d9:df:c6:7d:55:
92:31:e1:00:5e:61:50:89:51:48:a5:0d:08:e1:2a:
de:04:0d:18:e6:e0:3f:89:33:e9:3c:ef:a2:41:58:
2e:bc:49:79:39:70:4b:f3:ba:9f:69:04:a3:6b:49:
60:fe:66:b3:e6:16:89:a3:1c:6b:0a:02:ac:9e:ee:
19:1e:79:6e:fe:87:d1:2c:c1:a5:49:d9:c2:36:a1:
af:c3:6f:eb:84:26:04:f2:bd:e8:13:3f:0e:b6:40:
a8:85:2d:7c:93:ea:6b:1b:e2:d5:e9:56:17:18:74:
4f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:E4:E6:8C:03:8E:79:1A:88:4C:68:A5:17:2E:5D:DF:26:94:A4:8F
X509v3 Authority Key Identifier:
keyid:D1:F5:19:64:ED:E1:2B:4C:03:67:3D:23:CD:44:C8:37:53:15:F4:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ebbdda-9571-4ff5-b56e-75220d53a55c/1/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ebbdda-9571-4ff5-b56e-75220d53a55c/1/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:79:e7:e5:20:19:dd:79:c2:3a:fc:88:06:a6:c2:b9:71:cf:
3b:0f:a3:d1:19:4d:97:39:1e:2e:61:92:4b:ca:6e:5c:8c:52:
12:d2:bf:e2:c7:fc:6e:2f:b4:a3:2b:c7:a8:c6:51:26:9e:2e:
39:86:45:4c:ec:9d:d4:69:1d:21:e0:9b:86:16:e7:eb:0b:e7:
c6:a4:ef:40:aa:27:1b:da:9b:9b:8a:3c:a6:3f:fd:ec:e1:58:
48:26:aa:b3:c9:7d:ae:30:db:76:cf:e3:02:de:80:65:37:98:
06:77:bf:ec:57:7d:ce:a9:8f:d7:ca:3c:e4:74:55:b2:dc:c0:
2c:45:6c:77:e3:d9:22:74:84:42:b9:0b:f0:2a:a1:36:61:01:
94:33:9e:5d:0f:04:26:03:5a:36:86:e8:85:db:bd:39:23:e7:
db:bd:2b:5e:e2:0e:06:2b:8e:81:da:4d:d5:38:7b:cc:ba:19:
9e:8c:ae:e7:ad:25:f3:85:31:da:6b:eb:40:1e:66:31:f0:cc:
45:03:25:75:4c:13:c8:62:4c:cd:9d:3d:88:eb:1c:51:40:30:
11:66:28:4c:33:91:b7:fb:85:4f:d1:7e:0e:94:e5:06:3d:9e:
4c:63:b0:d5:1b:84:38:87:d8:a1:93:63:2f:43:bb:3e:2d:ce:
f1:76:a1:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:22:12 2025 by rpki-client