Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/4bba08-be36-47eb-ab2c-6359f92e1d2f/1/zK1o9-irrfRHJiM0OjJWFQciQYk.mft
File: zK1o9-irrfRHJiM0OjJWFQciQYk.mft (raw, json)
Hash identifier: tsic+yotClIKW6c6RdYbjVHOinrrlen+X3ErkOoMncI=
Subject key identifier: CA:F0:D7:65:96:B9:46:E0:32:D6:CB:E2:A7:D8:F1:0C:51:BF:31:12
Authority key identifier: CC:AD:68:F7:E8:AB:AD:F4:47:26:23:34:3A:32:56:15:07:22:41:89
Certificate issuer: /CN=ccad68f7e8abadf4472623343a32561507224189
Certificate serial: 019A4D0737C9AFE2854196DD137788A73C53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zK1o9-irrfRHJiM0OjJWFQciQYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/4bba08-be36-47eb-ab2c-6359f92e1d2f/1/zK1o9-irrfRHJiM0OjJWFQciQYk.mft
Manifest number: 087C
Signing time: Tue 04 Nov 2025 04:01:49 +0000
Manifest this update: Tue 04 Nov 2025 04:01:49 +0000
Manifest next update: Wed 05 Nov 2025 04:01:49 +0000
Files and hashes: 1: UD4cQq7SyCABLCZHHC1Ou_EeL6M.roa (hash: tfgZKXi2rZuQqy6q4ZM+ZUGFDVqdyYkcUnUVHT5tgpI=)
2: zK1o9-irrfRHJiM0OjJWFQciQYk.crl (hash: gcAvJHmceSWBPjx7mBPabLn7Y8xq9R8XBAZ8a0P2Qac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/4bba08-be36-47eb-ab2c-6359f92e1d2f/1/zK1o9-irrfRHJiM0OjJWFQciQYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/4bba08-be36-47eb-ab2c-6359f92e1d2f/1/zK1o9-irrfRHJiM0OjJWFQciQYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/zK1o9-irrfRHJiM0OjJWFQciQYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:07:37:c9:af:e2:85:41:96:dd:13:77:88:a7:3c:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccad68f7e8abadf4472623343a32561507224189
Validity
Not Before: Nov 4 04:01:49 2025 GMT
Not After : Nov 5 04:01:49 2025 GMT
Subject: CN=caf0d76596b946e032d6cbe2a7d8f10c51bf3112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c3:76:de:6d:0f:e5:13:81:67:d8:02:11:2f:
ef:f5:53:be:c7:49:64:cd:01:5a:0f:a4:08:f6:0f:
82:3b:84:09:69:5e:a0:ce:1e:63:d0:21:e6:65:5d:
99:af:c5:44:0e:f1:45:a9:4b:85:35:b5:2f:e4:46:
ef:81:6c:20:c0:9e:42:0a:6c:3f:56:34:14:6c:3c:
ed:7d:b1:bd:fa:fc:be:10:79:c4:e4:3c:80:91:43:
7b:6a:a8:66:47:8e:1a:8e:f8:ec:43:e9:fe:48:f5:
7f:6b:75:73:59:de:f4:12:30:f0:f2:14:aa:17:ae:
c5:a9:4f:70:cc:fe:5a:f0:72:4c:76:af:bb:05:b3:
89:fa:00:1f:43:3d:0d:57:15:98:09:67:77:bc:22:
3a:56:3b:51:ca:0e:9d:83:cf:7d:d8:b8:96:63:5e:
7e:99:ab:84:8d:8f:f4:d5:64:80:6c:e4:06:45:a4:
e7:ca:11:af:77:f0:56:08:80:cc:f8:3c:a2:89:50:
65:fa:82:a1:b2:28:9f:7a:5d:8d:22:bc:0f:75:0f:
80:3b:d0:25:51:20:46:a1:b9:2d:a0:a0:cc:ea:b4:
ef:00:5c:2e:cf:b2:cf:e4:25:78:f1:5b:82:07:de:
54:6e:49:16:34:3d:8a:23:56:00:2b:80:db:a3:88:
02:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:F0:D7:65:96:B9:46:E0:32:D6:CB:E2:A7:D8:F1:0C:51:BF:31:12
X509v3 Authority Key Identifier:
keyid:CC:AD:68:F7:E8:AB:AD:F4:47:26:23:34:3A:32:56:15:07:22:41:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zK1o9-irrfRHJiM0OjJWFQciQYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4bba08-be36-47eb-ab2c-6359f92e1d2f/1/zK1o9-irrfRHJiM0OjJWFQciQYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4bba08-be36-47eb-ab2c-6359f92e1d2f/1/zK1o9-irrfRHJiM0OjJWFQciQYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:19:64:40:45:0e:67:45:09:26:5c:c0:0b:48:45:90:75:fc:
a0:65:37:0b:fc:28:94:9b:0b:0e:50:1f:23:e4:52:33:3d:30:
72:17:76:91:f7:bd:ab:5f:75:af:9a:28:89:5c:70:bd:b6:22:
ca:7f:1c:6a:fd:fb:5a:63:68:4c:08:66:b2:89:46:f1:42:75:
98:c0:a7:8f:b0:bc:46:51:5b:e1:eb:0c:5f:da:1d:af:7f:c4:
5a:dc:c9:fb:01:aa:2d:80:70:0e:23:97:33:c8:25:92:a3:97:
20:2c:98:99:89:2d:07:c6:43:b1:09:0c:2a:99:6d:64:88:4f:
8a:ab:75:f8:34:3c:f5:9a:ab:54:5f:08:a4:77:e3:05:dd:ed:
50:1b:39:b6:f9:7d:7c:b4:86:92:68:b0:cf:58:f6:2a:15:4b:
75:b7:70:33:58:08:8e:48:b1:4a:7f:8d:2f:24:39:39:58:26:
3d:73:b3:2f:a7:a9:ac:95:b0:4a:3d:6f:39:2f:2c:a4:95:f9:
5c:e3:68:92:35:8d:bc:c1:0c:3f:06:5c:94:a6:3a:56:33:ca:
92:e9:57:a3:63:fc:2d:3b:66:18:5a:84:8d:76:39:78:57:e2:
b0:f2:bd:9b:11:2a:06:52:be:45:24:0d:1c:7d:08:01:ba:0a:
5c:45:f8:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:56:11 2025 by rpki-client