Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.mft
File: 0zDcrR41MkVJwcmhlBerak0JreA.mft (raw, json)
Hash identifier: eW8OS3p7Bf+3Y+IF/PMzSG0vPZnan1KtHQzRuOUGiyc=
Subject key identifier: 9A:86:19:E1:46:57:4C:24:01:BA:AD:E7:46:0E:5A:C6:AB:17:0F:38
Authority key identifier: D3:30:DC:AD:1E:35:32:45:49:C1:C9:A1:94:17:AB:6A:4D:09:AD:E0
Certificate issuer: /CN=d330dcad1e35324549c1c9a19417ab6a4d09ade0
Certificate serial: 0199FBEBE790254A8A161B45DD704DF2DEA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0zDcrR41MkVJwcmhlBerak0JreA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.mft
Manifest number: 0DB7
Signing time: Sun 19 Oct 2025 10:02:45 +0000
Manifest this update: Sun 19 Oct 2025 10:02:45 +0000
Manifest next update: Mon 20 Oct 2025 10:02:45 +0000
Files and hashes: 1: 0zDcrR41MkVJwcmhlBerak0JreA.crl (hash: bKzQUzbx9Y1ojdfsBAtBexwjXCH2ZsZr3BlE5PbD3PU=)
2: LPCDu87vvEM5O8HyjWDakdHtl2E.roa (hash: Wurynnxc4HmLUHSiIQ2miFmjlyoy/berebBUDyFaz/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0zDcrR41MkVJwcmhlBerak0JreA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:e7:90:25:4a:8a:16:1b:45:dd:70:4d:f2:de:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d330dcad1e35324549c1c9a19417ab6a4d09ade0
Validity
Not Before: Oct 19 10:02:45 2025 GMT
Not After : Oct 20 10:02:45 2025 GMT
Subject: CN=9a8619e146574c2401baade7460e5ac6ab170f38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ab:7f:b9:70:5d:32:d9:29:a2:fb:4a:8c:9c:
3b:c9:86:66:e2:62:94:8a:17:75:83:d2:c9:f8:80:
b1:da:66:2a:43:79:e7:14:ab:6a:da:1e:de:9a:cc:
10:9a:cd:f3:8c:7c:d0:00:d4:7f:ef:1f:17:98:67:
ef:58:6f:36:fc:f1:af:2b:39:43:20:95:60:ba:72:
a4:ef:87:cb:d1:6c:2e:95:e4:32:63:a3:c5:d3:35:
12:dd:7c:b8:cc:9b:29:0c:2b:88:d5:bc:a2:e6:60:
b0:60:ab:e6:98:bd:cf:d5:95:d1:ef:b8:02:a9:07:
d1:bb:57:89:e2:04:50:1a:9c:c0:3e:2a:3b:cd:5d:
17:0d:72:6c:54:25:64:fc:b5:cd:52:2a:37:c9:df:
c3:9c:5b:44:9d:9d:3a:cf:25:de:80:a4:51:53:a5:
53:88:c0:d1:19:d0:1c:a8:f3:23:b0:32:27:ef:4c:
b2:52:3c:7c:2c:6a:c7:d4:15:77:93:30:d8:bc:22:
8d:df:04:d3:e3:fe:34:76:f0:dc:2f:b2:f3:21:5c:
85:ad:af:19:cc:55:5d:67:2f:a0:36:87:67:0d:09:
a8:f4:aa:ae:6e:c4:07:28:d7:5d:90:59:48:ea:99:
e0:39:f6:96:af:89:d8:ad:9b:9b:17:56:9a:10:32:
1c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:86:19:E1:46:57:4C:24:01:BA:AD:E7:46:0E:5A:C6:AB:17:0F:38
X509v3 Authority Key Identifier:
keyid:D3:30:DC:AD:1E:35:32:45:49:C1:C9:A1:94:17:AB:6A:4D:09:AD:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0zDcrR41MkVJwcmhlBerak0JreA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:65:03:51:77:87:46:4a:03:d0:62:af:b8:61:fd:ec:1a:d2:
82:5d:2d:8e:77:09:3d:a3:64:03:02:fd:95:af:e3:98:7d:80:
3b:82:f0:e3:c6:f0:ec:23:9d:73:3e:67:fb:5a:c8:25:aa:0d:
04:41:42:c7:e6:52:c6:0f:f6:b4:d4:2a:13:fa:94:09:be:2f:
4b:4e:94:c1:62:c6:08:31:a2:27:be:b1:8f:c8:88:69:ab:d3:
47:a7:7a:cb:ff:b7:e6:82:67:f1:89:68:39:c6:1c:3c:bb:ee:
d6:39:35:df:66:7f:7c:16:63:40:bf:e4:80:cb:e4:d8:2e:60:
d5:44:2b:f5:1a:5e:f9:6a:77:09:c2:5c:f8:f0:68:32:94:56:
30:10:d1:b8:49:10:df:43:4d:5e:c8:e6:f2:74:7e:51:99:0f:
10:68:da:59:01:9c:c1:8f:f7:87:44:92:f3:fe:f8:32:76:89:
61:20:d0:aa:de:91:9e:90:91:f5:9f:df:d1:90:2c:84:07:e8:
ae:b9:96:23:fb:81:7f:21:08:32:d5:93:df:6d:2e:8a:ad:78:
cc:76:3c:e8:66:66:36:08:68:ee:10:8f:d0:9a:e4:56:30:a3:
ae:f8:39:07:b4:19:a5:e5:e1:f5:f1:db:ec:df:80:1e:99:73:
0e:d8:5a:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:29:01 2025 by rpki-client