Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/e7ddfa-fbf6-4803-88c4-29838f4ac60e/1/zB5zEzN12VcrjPylyLXx-7vcm7Y.mft
File: zB5zEzN12VcrjPylyLXx-7vcm7Y.mft (raw, json)
Hash identifier: GAq5CVjXHmAw1wRVFAm92iTgRyfK6xS21Ll/pBg+obc=
Subject key identifier: 38:4C:CA:A2:A0:1D:94:8A:1D:31:E7:A0:1C:85:DE:3E:38:E2:03:3D
Authority key identifier: CC:1E:73:13:33:75:D9:57:2B:8C:FC:A5:C8:B5:F1:FB:BB:DC:9B:B6
Certificate issuer: /CN=cc1e73133375d9572b8cfca5c8b5f1fbbbdc9bb6
Certificate serial: 019A559B9F02EA0B8D029C1371494275FF6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zB5zEzN12VcrjPylyLXx-7vcm7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/e7ddfa-fbf6-4803-88c4-29838f4ac60e/1/zB5zEzN12VcrjPylyLXx-7vcm7Y.mft
Manifest number: 0881
Signing time: Wed 05 Nov 2025 20:00:53 +0000
Manifest this update: Wed 05 Nov 2025 20:00:53 +0000
Manifest next update: Thu 06 Nov 2025 20:00:53 +0000
Files and hashes: 1: 7d2f98bHzqHWx5M7oEXVyJyz8B4.roa (hash: WP0mtIYc1sSiT/bxjFMuO4V87PtcesycNrQ76Yhzw5U=)
2: zB5zEzN12VcrjPylyLXx-7vcm7Y.crl (hash: idMPKo53hH9PpVUTAzqzdu5cR3bTSGj2klebfqwedAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/e7ddfa-fbf6-4803-88c4-29838f4ac60e/1/zB5zEzN12VcrjPylyLXx-7vcm7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/e7ddfa-fbf6-4803-88c4-29838f4ac60e/1/zB5zEzN12VcrjPylyLXx-7vcm7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/zB5zEzN12VcrjPylyLXx-7vcm7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 20:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:55:9b:9f:02:ea:0b:8d:02:9c:13:71:49:42:75:ff:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc1e73133375d9572b8cfca5c8b5f1fbbbdc9bb6
Validity
Not Before: Nov 5 20:00:53 2025 GMT
Not After : Nov 6 20:00:53 2025 GMT
Subject: CN=384ccaa2a01d948a1d31e7a01c85de3e38e2033d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:fd:a7:96:95:0b:08:7c:43:8b:c2:ce:e6:d5:
50:b1:c3:67:e7:99:44:e2:e3:90:eb:4e:2f:ba:e5:
97:13:43:be:58:cb:85:bc:d7:88:09:78:05:5a:d5:
40:06:d7:92:f6:56:e7:07:7b:6e:60:ec:4f:2b:53:
46:cf:7f:a3:de:ae:1b:a2:43:a4:92:b0:67:4b:8d:
ff:eb:97:0b:b5:11:fb:57:36:57:04:f5:cf:06:e8:
c1:63:8a:0d:87:01:b4:45:91:63:51:1d:b7:15:0c:
cd:f0:62:23:67:01:57:b0:d0:54:d0:93:dc:6b:39:
e6:52:80:10:7b:98:69:a3:1b:ac:58:cb:71:8c:98:
3e:f0:8f:c1:85:7f:07:05:3e:a5:a0:bc:23:db:53:
94:84:ca:d1:62:e8:6f:8c:3c:20:95:23:4b:ba:df:
c5:b1:c0:18:f1:31:be:c8:2f:2f:10:8a:8b:f3:aa:
d9:f3:6e:79:f2:bd:3e:0b:18:65:18:d7:51:47:e6:
2e:f2:29:ee:6a:b2:13:fc:8c:7d:e2:18:46:88:c7:
34:17:3a:5e:c0:2d:70:52:6f:48:81:98:b0:63:48:
49:15:72:e0:84:f1:d2:53:6d:15:29:a7:a5:c5:0a:
13:1a:3a:b8:fd:1b:2f:16:fc:bd:8b:bc:1a:93:d4:
38:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:4C:CA:A2:A0:1D:94:8A:1D:31:E7:A0:1C:85:DE:3E:38:E2:03:3D
X509v3 Authority Key Identifier:
keyid:CC:1E:73:13:33:75:D9:57:2B:8C:FC:A5:C8:B5:F1:FB:BB:DC:9B:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zB5zEzN12VcrjPylyLXx-7vcm7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e7ddfa-fbf6-4803-88c4-29838f4ac60e/1/zB5zEzN12VcrjPylyLXx-7vcm7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e7ddfa-fbf6-4803-88c4-29838f4ac60e/1/zB5zEzN12VcrjPylyLXx-7vcm7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:70:28:14:6e:54:0e:ba:6e:9a:5a:b5:1f:66:d5:8c:29:0f:
f0:48:0b:1c:e9:b5:32:0f:14:58:a3:50:80:52:a9:5b:a1:7e:
9a:fc:da:60:c7:fd:77:07:8b:d9:c9:fa:ca:eb:98:ca:99:9e:
84:29:cd:20:4d:13:58:bb:e6:d1:ca:45:40:eb:4d:17:eb:b0:
06:00:96:30:d2:da:be:db:87:4b:27:79:0b:f3:6d:94:0c:79:
fb:11:f3:e7:99:f7:eb:2e:cd:af:27:9c:8b:b0:1e:65:86:96:
7b:ef:52:19:e1:30:d0:86:1c:cb:e6:15:4a:e7:d2:db:f6:74:
ab:f1:97:c1:dc:dc:12:41:9e:1d:d9:e9:7f:aa:ff:75:c8:51:
53:92:54:18:77:5b:d9:d9:ee:ff:ee:09:99:2b:70:63:64:d4:
51:25:91:da:1e:d5:c7:46:eb:a1:e4:e4:c1:2c:19:12:18:18:
38:2f:c2:6e:13:6a:ef:bf:55:1a:67:3a:20:e8:ed:cf:c9:82:
45:2b:1b:b6:90:9a:57:68:3a:3e:11:4f:fd:60:65:01:0b:73:
7a:9b:64:4e:98:ae:16:62:fc:ab:c8:a4:be:c6:10:a1:fe:40:
d4:45:a8:d5:8f:2b:6d:6f:55:12:d1:64:18:d8:9e:44:98:c7:
de:ca:76:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 05:56:24 2025 by rpki-client