Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/00951f-2d5c-4f7a-9b72-4af1fb7438e7/1/z8bMSnQYoJQhupgF52Tu80Lvjzg.mft
File: z8bMSnQYoJQhupgF52Tu80Lvjzg.mft (raw, json)
Hash identifier: KYP1/RrYk2AUIaia4YmRqcc9gHqzwB8Azrnjyc0vMoE=
Subject key identifier: 57:4E:66:9A:CC:FF:C6:2B:46:A3:8A:BD:3D:D7:51:19:BB:21:98:97
Authority key identifier: CF:C6:CC:4A:74:18:A0:94:21:BA:98:05:E7:64:EE:F3:42:EF:8F:38
Certificate issuer: /CN=cfc6cc4a7418a09421ba9805e764eef342ef8f38
Certificate serial: 019A5307DCFF20C65360D6C2B2D392400D0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8bMSnQYoJQhupgF52Tu80Lvjzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/00951f-2d5c-4f7a-9b72-4af1fb7438e7/1/z8bMSnQYoJQhupgF52Tu80Lvjzg.mft
Manifest number: 083C
Signing time: Wed 05 Nov 2025 08:00:15 +0000
Manifest this update: Wed 05 Nov 2025 08:00:15 +0000
Manifest next update: Thu 06 Nov 2025 08:00:15 +0000
Files and hashes: 1: Sm3lswcII0bf-ALKj_DDpzZvLMc.roa (hash: /Kb0jwUQMRGuhoCXPSsBRGNhGMzqhfM4ypAYr8K7OsM=)
2: z8bMSnQYoJQhupgF52Tu80Lvjzg.crl (hash: dsBZxFAl5KqNF4sH+PF16dd5iWH+6JhEEr7QhmjhY30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/00951f-2d5c-4f7a-9b72-4af1fb7438e7/1/z8bMSnQYoJQhupgF52Tu80Lvjzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/00951f-2d5c-4f7a-9b72-4af1fb7438e7/1/z8bMSnQYoJQhupgF52Tu80Lvjzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/z8bMSnQYoJQhupgF52Tu80Lvjzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 08:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:07:dc:ff:20:c6:53:60:d6:c2:b2:d3:92:40:0d:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfc6cc4a7418a09421ba9805e764eef342ef8f38
Validity
Not Before: Nov 5 08:00:15 2025 GMT
Not After : Nov 6 08:00:15 2025 GMT
Subject: CN=574e669accffc62b46a38abd3dd75119bb219897
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b5:29:a7:8b:2c:68:99:94:a0:a2:a8:45:6c:
20:76:68:7c:6b:65:29:ed:69:2c:9f:18:11:fa:c8:
9a:80:dc:ee:94:f4:10:8d:46:b2:d6:5f:72:eb:2f:
7c:41:fe:27:40:de:44:11:71:b9:f4:bc:0c:ac:74:
07:b5:03:d3:c9:49:64:9e:60:9f:f8:62:b3:b4:4d:
53:ae:0e:8d:53:00:f2:49:40:bd:27:b6:bd:09:43:
d3:b5:65:55:0d:92:6b:b2:aa:7a:90:4d:33:1e:d1:
f0:24:a5:df:43:31:ad:63:ae:f7:ef:d0:df:33:18:
3f:76:fa:ce:3b:a0:de:b0:4e:3a:14:06:e9:ab:31:
b1:4b:08:8b:16:ca:b0:fc:40:72:4f:da:c7:8b:46:
2d:1f:3e:62:04:f3:15:81:0c:b3:f1:62:25:52:73:
c0:90:f0:ee:44:58:2e:fc:86:dd:ca:45:f5:95:e0:
43:43:63:47:d1:a0:c2:c2:b8:90:35:24:70:f6:24:
7d:13:b8:11:f9:3e:05:b5:50:92:8b:20:3d:9b:70:
c2:ad:fe:af:59:68:61:99:9d:26:75:95:77:75:4d:
3d:42:f0:b4:51:c9:2d:6e:ec:a6:fc:b0:12:52:3e:
25:43:c9:f9:3b:19:0d:f2:f2:4e:65:67:7e:9e:ea:
77:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:4E:66:9A:CC:FF:C6:2B:46:A3:8A:BD:3D:D7:51:19:BB:21:98:97
X509v3 Authority Key Identifier:
keyid:CF:C6:CC:4A:74:18:A0:94:21:BA:98:05:E7:64:EE:F3:42:EF:8F:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8bMSnQYoJQhupgF52Tu80Lvjzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/00951f-2d5c-4f7a-9b72-4af1fb7438e7/1/z8bMSnQYoJQhupgF52Tu80Lvjzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/00951f-2d5c-4f7a-9b72-4af1fb7438e7/1/z8bMSnQYoJQhupgF52Tu80Lvjzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:fd:e5:12:87:88:6d:07:e8:5f:1d:90:b0:81:6a:1a:83:8c:
e6:68:f8:37:ef:6b:bb:19:60:82:bd:3d:f2:49:fe:f9:17:7c:
8f:cb:a0:23:23:f8:1e:90:1d:e8:8d:82:fe:3e:c9:1e:5d:af:
3a:3b:c5:2d:99:2e:ae:d7:0a:f0:15:66:97:7b:a0:e6:39:87:
9b:67:7b:62:1f:b5:e0:29:38:8a:b0:be:cd:fe:e9:7a:69:60:
85:f5:69:cb:6c:1e:78:ab:88:72:f2:b7:97:a5:0e:f0:75:dc:
b5:cc:d9:bf:13:29:91:c6:75:09:82:55:67:ca:eb:23:f3:20:
cd:f8:c2:f4:f1:54:11:81:04:ea:ba:52:cf:28:80:30:69:21:
06:29:9f:7a:24:97:90:70:db:c5:f7:55:0b:3c:ac:52:cc:ea:
33:ff:22:16:6f:39:55:e4:e8:40:4f:b1:2a:d2:c0:f0:ff:90:
04:7e:79:19:f8:de:7b:21:aa:b4:30:61:ec:c3:c6:1e:61:86:
14:36:43:65:20:82:d9:e6:0c:36:5f:1b:01:ed:9b:98:60:d9:
61:e6:89:65:9a:93:b0:61:aa:da:c3:c0:ca:84:77:7a:c8:86:
6e:7f:cc:8d:1a:9d:84:4d:4c:57:ae:b2:7d:24:00:7f:89:52:
80:df:c6:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:05:58 2025 by rpki-client