Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/0ZMX0nI53HsNVBM74aplydwB9DQ.mft
File: 0ZMX0nI53HsNVBM74aplydwB9DQ.mft (raw, json)
Hash identifier: J3NHrBd/5tmrSlk8op8yRN4/L8tiap+6mStMN3knWaY=
Subject key identifier: 48:13:50:5B:87:36:F7:3E:DE:4F:6C:BA:44:F1:A6:E7:E8:83:A3:1A
Authority key identifier: D1:93:17:D2:72:39:DC:7B:0D:54:13:3B:E1:AA:65:C9:DC:01:F4:34
Certificate issuer: /CN=d19317d27239dc7b0d54133be1aa65c9dc01f434
Certificate serial: 0199FD6B00794EA45D2BCCC35598A47CA42E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ZMX0nI53HsNVBM74aplydwB9DQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/0ZMX0nI53HsNVBM74aplydwB9DQ.mft
Manifest number: 1225
Signing time: Sun 19 Oct 2025 17:01:11 +0000
Manifest this update: Sun 19 Oct 2025 17:01:11 +0000
Manifest next update: Mon 20 Oct 2025 17:01:11 +0000
Files and hashes: 1: 0ZMX0nI53HsNVBM74aplydwB9DQ.crl (hash: im8uUtplZn7Jk8/8Huf3Tw8KvcRhZCSsevFofM0s7RA=)
2: dP48VWalcUAAFfcn9eWWeMKf0-w.roa (hash: 1XMmQlTq3rn/vph5sokkv8eSVZlOdVkw7fiia74kGx4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/0ZMX0nI53HsNVBM74aplydwB9DQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/0ZMX0nI53HsNVBM74aplydwB9DQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/0ZMX0nI53HsNVBM74aplydwB9DQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:00:79:4e:a4:5d:2b:cc:c3:55:98:a4:7c:a4:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d19317d27239dc7b0d54133be1aa65c9dc01f434
Validity
Not Before: Oct 19 17:01:11 2025 GMT
Not After : Oct 20 17:01:11 2025 GMT
Subject: CN=4813505b8736f73ede4f6cba44f1a6e7e883a31a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d9:5b:3b:11:29:e7:c0:a1:0a:bf:82:13:24:
bb:25:32:07:54:8b:a3:08:f1:cc:46:e5:1e:0f:92:
a5:bd:06:a1:2e:5c:53:ec:bc:43:a0:c6:df:5c:85:
4c:ab:a0:ed:9b:98:76:ec:07:b6:b0:a3:00:90:ff:
2f:e6:98:95:0e:fc:e3:eb:1c:79:a7:2e:68:b8:04:
67:f2:1a:23:03:cd:d3:77:d0:99:b2:69:87:6f:2c:
e6:71:b5:fa:87:a7:17:31:7c:d3:db:9b:61:fe:4d:
0e:6a:ed:a5:a0:3e:50:88:d1:fd:57:3e:a3:fa:64:
68:41:5d:9c:dc:40:70:e3:eb:b3:d8:10:9c:f4:7b:
fa:30:d5:65:97:51:10:ba:64:7c:13:26:26:02:33:
40:35:6d:12:c8:4c:1c:94:db:3d:c8:ca:e9:6c:26:
aa:c4:75:19:4b:b0:20:bb:9f:38:1c:08:4b:78:68:
80:8b:56:e8:81:10:30:06:bf:b3:8b:f5:6a:dd:7b:
03:3f:64:c6:6a:38:d9:76:18:0a:97:98:9d:75:f6:
7f:45:56:59:b0:1d:45:da:bd:53:cc:06:55:4d:a6:
b5:02:5f:73:98:36:23:bc:61:1b:36:38:f2:d3:77:
e7:f1:9d:34:40:4d:b1:6b:29:00:b9:08:90:c6:4f:
1d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:13:50:5B:87:36:F7:3E:DE:4F:6C:BA:44:F1:A6:E7:E8:83:A3:1A
X509v3 Authority Key Identifier:
keyid:D1:93:17:D2:72:39:DC:7B:0D:54:13:3B:E1:AA:65:C9:DC:01:F4:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ZMX0nI53HsNVBM74aplydwB9DQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/0ZMX0nI53HsNVBM74aplydwB9DQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/0ZMX0nI53HsNVBM74aplydwB9DQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:a3:33:f8:cf:a1:4b:d3:8b:a9:81:02:6c:83:f7:15:79:3b:
b6:77:0d:dc:c7:bf:61:77:b6:73:20:c3:97:77:60:fb:db:22:
83:1c:a1:f2:10:f4:5a:6f:05:c8:e8:8b:1e:2b:20:e2:98:63:
4b:a4:28:c5:db:8c:92:45:fa:53:68:93:00:81:3a:b8:b9:bc:
45:69:74:92:07:ff:51:cb:71:3a:76:63:71:15:6e:0f:47:d4:
50:94:14:89:05:f4:57:75:6c:0b:e3:9b:ee:91:0e:c6:51:fc:
30:03:86:59:b0:88:92:58:7a:f1:ac:b3:c6:12:b2:d3:9d:91:
da:8c:89:b9:f5:96:6d:11:08:8b:6b:06:01:66:33:27:ea:59:
6d:04:f9:60:d9:4e:1a:5a:1d:3f:6c:a0:8a:b8:b6:c9:14:3e:
24:41:9d:be:87:5c:bd:09:23:62:85:81:78:3c:09:b2:05:e1:
5d:25:4e:59:e2:86:ba:48:47:cc:71:5f:61:ff:55:13:ca:38:
a5:1a:18:f8:e9:ab:90:74:e1:03:35:0a:f1:26:a1:7e:99:4f:
82:97:f3:8e:80:d2:f4:1d:8d:9b:99:56:a8:65:a2:2d:a1:c3:
44:1e:75:a0:ba:ca:b6:57:52:cb:79:44:56:8a:a6:19:e5:fd:
d6:98:9a:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:03:37 2025 by rpki-client