Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/d7e660-6912-4380-ab4f-718b9c40fd25/1/zy7ueKAITYMd4aJQAYPhZIlRbM8.mft
File: zy7ueKAITYMd4aJQAYPhZIlRbM8.mft (raw, json)
Hash identifier: acDKgewMXbWhbTFaYCkWfAFjv2lTnv25rUX1k1f/yBE=
Subject key identifier: E0:C4:4F:71:6B:55:11:B4:C2:34:DD:0B:FC:E7:0A:DB:E2:A5:F0:F4
Authority key identifier: CF:2E:EE:78:A0:08:4D:83:1D:E1:A2:50:01:83:E1:64:89:51:6C:CF
Certificate issuer: /CN=cf2eee78a0084d831de1a2500183e16489516ccf
Certificate serial: 019A4D05DCD2169C7CB31413F9FA0BD948CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zy7ueKAITYMd4aJQAYPhZIlRbM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/d7e660-6912-4380-ab4f-718b9c40fd25/1/zy7ueKAITYMd4aJQAYPhZIlRbM8.mft
Manifest number: 1010
Signing time: Tue 04 Nov 2025 04:00:21 +0000
Manifest this update: Tue 04 Nov 2025 04:00:21 +0000
Manifest next update: Wed 05 Nov 2025 04:00:21 +0000
Files and hashes: 1: DoG2UFHCOj7zOTIUPjjt5XZyaMI.roa (hash: o5jRgA59QPQWDTQLvIg+41ICmEKRDLb8Qb3vB5Fkcs4=)
2: zy7ueKAITYMd4aJQAYPhZIlRbM8.crl (hash: Zh2Yg9rL2FuhiXlFyGEU/4IlQ1wvovPG2yBYuJXvBL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/d7e660-6912-4380-ab4f-718b9c40fd25/1/zy7ueKAITYMd4aJQAYPhZIlRbM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/d7e660-6912-4380-ab4f-718b9c40fd25/1/zy7ueKAITYMd4aJQAYPhZIlRbM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zy7ueKAITYMd4aJQAYPhZIlRbM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:05:dc:d2:16:9c:7c:b3:14:13:f9:fa:0b:d9:48:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf2eee78a0084d831de1a2500183e16489516ccf
Validity
Not Before: Nov 4 04:00:21 2025 GMT
Not After : Nov 5 04:00:21 2025 GMT
Subject: CN=e0c44f716b5511b4c234dd0bfce70adbe2a5f0f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:65:75:ca:79:aa:8a:c4:39:f8:79:ad:7d:ae:
9c:c5:72:53:28:9f:36:fe:a2:43:d8:65:bd:96:45:
89:a6:2e:2c:29:f7:f7:f7:64:1a:e1:c5:8b:f4:78:
fc:e6:85:c5:61:fb:c8:bc:f1:da:07:10:8c:e3:d2:
92:2a:26:c0:eb:61:04:1b:0f:0b:24:dd:06:77:3b:
b3:99:56:d0:e0:74:47:41:94:96:3a:0a:61:9c:f8:
19:17:48:60:56:6b:ad:df:36:47:9f:15:39:62:cd:
8c:d6:40:03:59:37:57:53:34:b6:32:3a:c6:7d:52:
ac:91:a1:91:39:52:2f:1b:20:9c:9d:d6:ef:89:97:
61:f6:b0:af:7d:13:58:20:e9:78:a0:58:94:5a:86:
80:19:8e:be:50:0e:b1:b8:e6:70:5e:d5:36:ef:fc:
c9:75:b8:d3:3d:f1:5b:11:08:0d:1a:99:b8:6d:d5:
39:dc:a8:75:b2:d5:a5:e4:15:a0:03:62:59:16:d1:
55:98:3a:a3:fb:c1:da:8d:b2:0e:63:97:8e:76:ca:
42:5d:c4:23:13:c4:5f:96:a3:b0:96:ca:31:6d:a0:
26:d9:83:c7:62:06:d8:53:7a:65:4f:27:84:3f:a7:
28:1a:c1:ae:fc:90:d8:ef:c6:f2:59:c1:a2:74:ff:
42:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:C4:4F:71:6B:55:11:B4:C2:34:DD:0B:FC:E7:0A:DB:E2:A5:F0:F4
X509v3 Authority Key Identifier:
keyid:CF:2E:EE:78:A0:08:4D:83:1D:E1:A2:50:01:83:E1:64:89:51:6C:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zy7ueKAITYMd4aJQAYPhZIlRbM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d7e660-6912-4380-ab4f-718b9c40fd25/1/zy7ueKAITYMd4aJQAYPhZIlRbM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d7e660-6912-4380-ab4f-718b9c40fd25/1/zy7ueKAITYMd4aJQAYPhZIlRbM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:5f:93:ff:dd:38:14:00:33:29:c7:9c:c2:e7:9c:69:25:c3:
4d:45:cc:2d:c3:f0:1e:97:a0:2b:b0:9a:d3:27:a7:70:a8:d5:
a0:e4:e2:99:ed:71:aa:2e:bc:f0:65:29:94:85:e6:dd:bb:5b:
10:11:c2:b5:45:44:b4:ab:dc:4f:38:a8:fd:58:12:48:b6:1d:
df:b9:be:02:0b:73:59:f1:6a:58:cb:36:cc:f6:42:da:bc:71:
e9:28:22:f0:a0:fc:ef:40:f1:f1:ce:a9:da:17:2b:8e:02:d2:
4e:fa:c5:7c:7a:21:c0:14:bf:8d:8c:ea:e0:72:16:0b:17:81:
47:75:5b:c6:6a:9a:fd:f5:e4:4f:40:af:5c:1e:0b:c2:68:15:
ab:3a:39:f9:34:2c:1d:9b:7d:72:02:00:f7:6c:97:05:55:ef:
96:f5:29:bb:36:f0:42:19:6f:cb:2b:80:85:ca:f4:a5:31:63:
98:77:b7:4c:1d:8e:ca:cf:50:9a:00:26:85:c2:5a:98:c2:e4:
a2:44:05:ff:f5:7e:ed:ff:ec:c9:e5:36:99:11:3a:bc:52:d0:
60:a6:ec:40:3b:12:c0:a6:af:a1:6c:ae:10:84:bb:19:34:a9:
23:b2:4d:b3:ea:f2:57:54:b8:6e:8d:f4:8e:d1:14:b9:5b:ac:
ca:8a:af:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:00:42 2025 by rpki-client