Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/360fdd-76ae-41f1-98c0-2b275043719f/1/zFkRQzuiBvRQrJvQZchslmCEAcE.mft
File: zFkRQzuiBvRQrJvQZchslmCEAcE.mft (raw, json)
Hash identifier: PPKwblEFrVvN7PtW+Cu1ui+lKAxR5Q4Wyu1g5gGcmhU=
Subject key identifier: 89:86:60:C0:D7:F7:EB:09:0F:6B:73:3E:9B:68:18:1D:F5:84:FD:C5
Authority key identifier: CC:59:11:43:3B:A2:06:F4:50:AC:9B:D0:65:C8:6C:96:60:84:01:C1
Certificate issuer: /CN=cc5911433ba206f450ac9bd065c86c96608401c1
Certificate serial: 019A53AC7D4728DE12813E737D92FEDDF6D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zFkRQzuiBvRQrJvQZchslmCEAcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/360fdd-76ae-41f1-98c0-2b275043719f/1/zFkRQzuiBvRQrJvQZchslmCEAcE.mft
Manifest number: 1712
Signing time: Wed 05 Nov 2025 11:00:04 +0000
Manifest this update: Wed 05 Nov 2025 11:00:04 +0000
Manifest next update: Thu 06 Nov 2025 11:00:04 +0000
Files and hashes: 1: 4LK6RGBLui-aEbPRtqPLVkSUW60.roa (hash: HKFxqJUpJsHV+sptJ97e+oKZWNhWHZ0wI/MLAzbhfC8=)
2: 7SnZ2wdTAHyiVcyhnIAGtBdWwvY.roa (hash: KOo8uRmX/xugX/zDKxM39qWHbAMQmIcpriUpdt/0wYA=)
3: PAAVgOudpAsUIfqhJcqm8oy8JDE.roa (hash: ymqqiqdeF4cim2K3zQCPb5b7mDDQ30DVocSbeg0Ahjc=)
4: zFkRQzuiBvRQrJvQZchslmCEAcE.crl (hash: IW7s/UoC1vO05ruabW/6YIoV0AwwPRzi60C2mt4pYdI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/360fdd-76ae-41f1-98c0-2b275043719f/1/zFkRQzuiBvRQrJvQZchslmCEAcE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/360fdd-76ae-41f1-98c0-2b275043719f/1/zFkRQzuiBvRQrJvQZchslmCEAcE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zFkRQzuiBvRQrJvQZchslmCEAcE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 11:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:ac:7d:47:28:de:12:81:3e:73:7d:92:fe:dd:f6:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc5911433ba206f450ac9bd065c86c96608401c1
Validity
Not Before: Nov 5 11:00:04 2025 GMT
Not After : Nov 6 11:00:04 2025 GMT
Subject: CN=898660c0d7f7eb090f6b733e9b68181df584fdc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ce:58:0b:f6:15:3c:69:f3:f3:b9:08:de:7c:
09:e7:b8:e6:94:2b:01:d2:83:22:70:86:4b:ac:92:
eb:b3:26:04:88:e3:cb:f8:77:c7:ec:b5:8a:04:8f:
ba:08:41:ac:e5:50:a9:9d:1f:a2:3f:78:dd:44:35:
1b:35:4d:34:7a:cf:ff:7e:9a:77:36:4b:e0:c6:98:
d3:64:14:24:1e:80:fb:56:e1:cb:25:b3:6f:9c:9d:
70:d0:f7:c6:49:26:54:72:d3:30:7c:23:8e:c2:51:
3f:fd:9b:86:5b:9f:5c:96:3a:eb:10:cc:84:78:ee:
7f:22:5e:d9:35:1b:d0:07:b2:5d:07:20:e5:fb:56:
c4:07:a0:f1:30:fa:d6:a9:00:94:06:53:d2:46:97:
60:ae:a2:9a:b0:d4:1f:71:e4:99:7a:69:95:fe:6d:
16:2e:93:dd:ec:f0:93:1c:61:80:85:f0:15:c4:48:
32:00:63:bd:43:40:0d:3e:00:94:fa:e2:8a:cb:4c:
e6:13:65:4a:f4:59:b9:d6:55:93:4d:99:20:fd:48:
6e:c1:6e:b9:aa:7e:04:55:0c:96:8b:8b:87:e6:bf:
fc:4a:f9:3c:cb:7b:69:48:9e:55:8b:fa:ec:99:0f:
f2:78:e7:89:74:ad:7c:54:90:6d:48:84:e7:ba:7b:
1e:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:86:60:C0:D7:F7:EB:09:0F:6B:73:3E:9B:68:18:1D:F5:84:FD:C5
X509v3 Authority Key Identifier:
keyid:CC:59:11:43:3B:A2:06:F4:50:AC:9B:D0:65:C8:6C:96:60:84:01:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zFkRQzuiBvRQrJvQZchslmCEAcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/360fdd-76ae-41f1-98c0-2b275043719f/1/zFkRQzuiBvRQrJvQZchslmCEAcE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/360fdd-76ae-41f1-98c0-2b275043719f/1/zFkRQzuiBvRQrJvQZchslmCEAcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:63:41:96:0a:d5:e5:3d:11:8a:cf:53:ca:d4:44:cc:a2:ba:
9f:73:e3:62:5c:b5:7f:a4:54:42:fc:82:11:f4:c7:3b:8d:f7:
b1:6e:e6:f2:df:e7:1d:87:cf:7d:fd:68:d1:25:29:f8:01:ca:
c0:4d:64:80:e6:b7:9b:18:c5:e1:40:13:d3:8c:6c:c4:77:78:
d0:e9:b9:99:18:9b:30:2e:5b:e9:d7:1a:bc:9c:7d:ad:5c:85:
71:07:0f:37:ce:f9:ff:c7:30:f0:10:29:d5:15:b8:7f:c7:f3:
d3:82:b6:f9:18:ee:b9:f4:8b:2b:48:70:e2:76:e0:06:1a:a9:
6d:2f:4a:5f:e8:21:1e:bd:94:e7:45:4c:03:96:13:e5:d8:17:
b5:c3:30:ea:0f:fe:86:bd:80:7c:2b:5a:bb:79:58:32:3d:0d:
84:fe:48:d5:77:ac:a5:37:97:3c:08:ff:12:c2:f3:f7:3a:ca:
61:07:b1:e3:82:c2:a0:38:d9:10:c6:f8:82:71:16:bb:95:40:
28:d4:ee:7d:c8:11:f7:e6:c4:76:01:70:3e:0c:82:25:31:70:
36:9d:4c:4d:4c:76:08:95:9d:a5:6f:ef:69:91:b9:93:e5:33:
57:69:10:f6:e3:e8:46:0b:ea:bf:3f:c0:97:00:29:41:84:03:
e1:ef:95:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:05:41 2025 by rpki-client