Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/0zWMPscfwZpqyYRrr03lmDY1cpM.mft
File: 0zWMPscfwZpqyYRrr03lmDY1cpM.mft (raw, json)
Hash identifier: FRm9ywc70wzcrPsJBTbmK40aCtn6STwbq4FydglBZpU=
Subject key identifier: A6:5C:9D:33:FC:41:B3:14:5B:29:C8:E2:6B:F4:90:AC:6E:7D:34:41
Authority key identifier: D3:35:8C:3E:C7:1F:C1:9A:6A:C9:84:6B:AF:4D:E5:98:36:35:72:93
Certificate issuer: /CN=d3358c3ec71fc19a6ac9846baf4de59836357293
Certificate serial: 019A01B5EB99CB420BF55A99B0E99AF14B94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0zWMPscfwZpqyYRrr03lmDY1cpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/0zWMPscfwZpqyYRrr03lmDY1cpM.mft
Manifest number: 1676
Signing time: Mon 20 Oct 2025 13:01:30 +0000
Manifest this update: Mon 20 Oct 2025 13:01:30 +0000
Manifest next update: Tue 21 Oct 2025 13:01:30 +0000
Files and hashes: 1: 0zWMPscfwZpqyYRrr03lmDY1cpM.crl (hash: LvflytW9rcKTgGv1zaYD+gLvxCibHkGiaLrfdwpVluE=)
2: LYl-ckZTCA5UyIouoIve31n38qY.roa (hash: vPSTPP2+IXPu60S6+w3ugZNedqIYo00aGNP955WAY1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/0zWMPscfwZpqyYRrr03lmDY1cpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/0zWMPscfwZpqyYRrr03lmDY1cpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0zWMPscfwZpqyYRrr03lmDY1cpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:b5:eb:99:cb:42:0b:f5:5a:99:b0:e9:9a:f1:4b:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3358c3ec71fc19a6ac9846baf4de59836357293
Validity
Not Before: Oct 20 13:01:30 2025 GMT
Not After : Oct 21 13:01:30 2025 GMT
Subject: CN=a65c9d33fc41b3145b29c8e26bf490ac6e7d3441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ca:0e:79:e6:ea:5f:18:e8:fc:d5:8f:93:0b:
20:b8:16:35:17:0e:e5:06:33:eb:19:ee:05:23:fc:
d9:62:17:32:e1:a8:50:83:dd:41:45:d4:d2:0b:75:
ae:ea:f9:e6:a3:2d:1e:0e:ce:fb:2f:ec:4e:fb:0f:
61:af:af:94:83:10:7c:ab:b1:e7:7c:58:b1:bf:3b:
f3:03:be:b3:41:ba:04:e3:42:0f:66:c7:7d:d6:37:
e6:ca:28:6e:19:44:ee:0b:59:a3:4a:3f:d0:e2:33:
88:ef:71:e5:f4:29:80:58:49:21:66:8b:f2:cd:ec:
26:28:be:cb:49:5d:44:ea:ae:cc:e2:2a:3d:84:f0:
a1:6d:38:b6:bc:a4:8a:25:8d:a3:57:4d:f6:f7:66:
30:d3:81:83:81:c3:c0:b8:f2:1a:d7:6b:19:0e:09:
25:3b:7f:47:0a:2e:39:8b:2d:6b:cb:f0:9a:8c:1c:
7d:f9:56:bd:25:3d:a1:65:c8:af:0a:87:08:ce:2d:
da:37:9e:c5:b3:20:79:64:31:06:07:20:18:63:68:
12:b1:89:6c:96:78:c3:50:88:d7:e8:42:64:c8:70:
c3:77:87:bf:bc:f3:32:38:d6:02:72:c6:f4:39:14:
ff:6d:6a:01:9a:29:a2:5d:f7:f3:e7:c0:f4:40:4e:
21:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:5C:9D:33:FC:41:B3:14:5B:29:C8:E2:6B:F4:90:AC:6E:7D:34:41
X509v3 Authority Key Identifier:
keyid:D3:35:8C:3E:C7:1F:C1:9A:6A:C9:84:6B:AF:4D:E5:98:36:35:72:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0zWMPscfwZpqyYRrr03lmDY1cpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/0zWMPscfwZpqyYRrr03lmDY1cpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/0zWMPscfwZpqyYRrr03lmDY1cpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:da:90:69:3f:45:c0:34:7f:e9:31:28:b0:20:58:08:b2:a8:
08:9d:b9:43:87:f0:18:80:18:43:63:fc:fa:94:fe:1d:77:5f:
b0:d3:59:5c:d9:9e:0a:e0:e0:6c:19:1f:4f:47:87:1d:8c:04:
b9:6e:f8:32:f9:40:77:5f:04:d6:e5:9b:59:3f:9f:a7:21:f2:
27:37:41:67:2b:f1:e9:f6:24:6d:4b:59:69:c6:81:f2:65:2b:
b0:c0:e0:22:9a:de:eb:cd:e9:9f:f1:54:57:db:d1:b6:3e:67:
bd:7d:e7:a3:4e:2d:e6:a4:be:8f:14:25:d0:eb:95:c2:97:06:
5e:e9:bb:66:b0:6e:48:c1:0a:81:b4:11:10:f9:69:3e:a3:a2:
db:16:f1:54:e0:6c:13:83:63:e3:9b:67:f5:b6:9c:40:bd:dc:
80:91:8e:95:bc:83:b8:5e:31:50:1f:62:34:54:ad:33:39:e7:
06:3f:55:d2:3e:43:84:4d:dc:62:bd:d5:6a:7f:ac:ae:69:ce:
62:7a:56:7c:f3:54:aa:15:ad:e4:53:71:76:8e:22:0b:35:71:
2f:a4:54:45:81:ba:b1:b9:28:bb:cd:b0:f4:b7:56:3d:0e:88:
20:c3:a9:4b:9b:64:9e:10:57:1e:92:f5:d5:65:2b:50:7a:84:
1d:c7:36:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:27:56 2025 by rpki-client