Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/0zWMPscfwZpqyYRrr03lmDY1cpM.mft
File: 0zWMPscfwZpqyYRrr03lmDY1cpM.mft (raw, json)
Hash identifier: pXDn/VbAtvP+nrkpJVa61PD/CdeHLaPbyJG+cGVbSJk=
Subject key identifier: 04:96:57:BB:6A:4A:99:16:7F:37:8E:12:A4:9E:63:01:FE:B9:7B:EF
Authority key identifier: D3:35:8C:3E:C7:1F:C1:9A:6A:C9:84:6B:AF:4D:E5:98:36:35:72:93
Certificate issuer: /CN=d3358c3ec71fc19a6ac9846baf4de59836357293
Certificate serial: 0199FFC8BA797398FC289AC1F68E12F8BBC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0zWMPscfwZpqyYRrr03lmDY1cpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/0zWMPscfwZpqyYRrr03lmDY1cpM.mft
Manifest number: 1675
Signing time: Mon 20 Oct 2025 04:02:48 +0000
Manifest this update: Mon 20 Oct 2025 04:02:48 +0000
Manifest next update: Tue 21 Oct 2025 04:02:48 +0000
Files and hashes: 1: 0zWMPscfwZpqyYRrr03lmDY1cpM.crl (hash: Z/eiiW5XXaYCEU0xToXx/4KjIgG3yEtgAYmhxrQAQec=)
2: LYl-ckZTCA5UyIouoIve31n38qY.roa (hash: vPSTPP2+IXPu60S6+w3ugZNedqIYo00aGNP955WAY1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/0zWMPscfwZpqyYRrr03lmDY1cpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/0zWMPscfwZpqyYRrr03lmDY1cpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0zWMPscfwZpqyYRrr03lmDY1cpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:02:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:ba:79:73:98:fc:28:9a:c1:f6:8e:12:f8:bb:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3358c3ec71fc19a6ac9846baf4de59836357293
Validity
Not Before: Oct 20 04:02:48 2025 GMT
Not After : Oct 21 04:02:48 2025 GMT
Subject: CN=049657bb6a4a99167f378e12a49e6301feb97bef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e0:21:fc:e4:68:21:00:b4:ab:58:61:ab:90:
2c:7e:48:a3:72:ec:18:d1:25:18:7b:4e:94:ba:80:
34:55:ba:df:ba:5b:d7:a5:1d:86:5b:0b:a0:32:d9:
35:c3:b6:8b:cb:e8:25:c8:da:58:0d:2a:20:46:3f:
39:cb:80:08:5c:8a:6e:74:cb:fb:a3:12:43:78:f8:
a3:4e:3d:85:09:f6:97:7b:6c:56:85:ba:f3:9b:59:
d8:cf:53:4f:a1:e9:a9:80:58:79:d1:eb:a5:03:68:
9c:af:0a:36:e0:6b:c2:56:60:19:dd:71:4f:00:a4:
2e:ab:84:9a:e2:c9:f6:b5:af:22:af:03:d0:08:49:
36:52:0c:3b:27:76:2d:c6:87:15:ac:8e:7c:09:30:
80:23:5f:8e:a9:56:47:ba:e4:e0:66:bd:e0:b4:f2:
e2:de:38:c0:62:87:e5:72:09:75:6b:f8:59:c3:27:
6c:e5:d0:dd:78:6f:b1:fc:1a:27:7c:ad:f8:29:69:
74:7c:fe:e2:00:9a:1d:01:3f:11:dc:f1:c0:4a:bc:
c8:d7:fa:5f:c3:7a:4f:2d:14:a2:d4:51:c6:c6:51:
3b:b4:bb:d3:bd:c2:49:43:c4:05:8f:d6:7c:80:a9:
ae:66:e7:94:87:23:61:61:b8:3a:bf:3f:91:73:24:
0c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:96:57:BB:6A:4A:99:16:7F:37:8E:12:A4:9E:63:01:FE:B9:7B:EF
X509v3 Authority Key Identifier:
keyid:D3:35:8C:3E:C7:1F:C1:9A:6A:C9:84:6B:AF:4D:E5:98:36:35:72:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0zWMPscfwZpqyYRrr03lmDY1cpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/0zWMPscfwZpqyYRrr03lmDY1cpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/0zWMPscfwZpqyYRrr03lmDY1cpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:8b:33:cc:52:13:b0:87:54:d5:fb:6c:73:ec:e3:4d:ed:d4:
46:fd:ba:0a:66:3d:d5:3c:20:b4:d4:0a:01:b1:10:cd:b8:c5:
90:46:ac:cc:66:13:14:7e:ab:e1:c5:95:5d:d4:59:7c:4c:1a:
b8:45:4a:e3:c7:ac:4f:07:0c:32:23:8d:06:6a:4d:20:83:5e:
84:6f:03:aa:03:05:d0:62:21:9d:8c:ed:7f:2f:22:df:a5:06:
19:7e:cb:2c:36:c1:06:13:fd:3f:cf:e8:16:91:6d:f2:94:a4:
4c:bf:fc:4f:43:62:8b:0f:b4:2d:c7:01:2b:5b:e7:8a:38:2f:
4e:81:74:a4:ed:1b:54:02:b4:58:aa:f4:c0:21:a7:e7:e1:3b:
ca:24:ee:a8:26:0a:aa:32:e3:c8:46:3f:40:97:9b:3b:6f:db:
bf:a2:08:04:0e:0d:cc:82:0d:ef:d3:d7:06:aa:60:cd:57:8f:
70:7f:d2:29:be:78:20:31:90:ed:64:2c:2f:a4:e7:dc:4e:d1:
c8:e0:60:52:f2:6f:56:59:ec:97:14:92:f0:c5:7e:38:4e:5c:
4d:a5:43:bc:89:17:bb:7d:d6:15:af:e3:50:01:c3:ab:26:45:
f9:0c:b9:93:48:40:34:13:45:a7:98:cf:ec:87:9f:2c:10:52:
5b:7d:c4:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:00:45 2025 by rpki-client