Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/be6337-662e-4c3b-812a-3407fca12267/1/zbFQJ29VuuRVmI06E-WTQQdNzQo.mft
File: zbFQJ29VuuRVmI06E-WTQQdNzQo.mft (raw, json)
Hash identifier: DFKNNa97brIS0zTRMp6FsjMTHVclCK56vzNr5VAkiiM=
Subject key identifier: 10:B9:C9:D7:2F:6A:80:54:09:6C:31:15:40:88:3A:69:95:5F:94:E4
Authority key identifier: CD:B1:50:27:6F:55:BA:E4:55:98:8D:3A:13:E5:93:41:07:4D:CD:0A
Certificate issuer: /CN=cdb150276f55bae455988d3a13e59341074dcd0a
Certificate serial: 019A4DE1EDA1592BA86CB815D018E837787E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zbFQJ29VuuRVmI06E-WTQQdNzQo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/be6337-662e-4c3b-812a-3407fca12267/1/zbFQJ29VuuRVmI06E-WTQQdNzQo.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 08:00:43 +0000
Manifest this update: Tue 04 Nov 2025 08:00:43 +0000
Manifest next update: Wed 05 Nov 2025 08:00:43 +0000
Files and hashes: 1: 1-6mnh_WrGshq4BGNMcahIgl1tdM.roa (hash: cq1xI/14AhL1drVD8g+gpqIgK6YTCibBOfeJtp72SrQ=)
2: zbFQJ29VuuRVmI06E-WTQQdNzQo.crl (hash: 6qJvlEgPzO/dnLjeUYg6CL89y+MGuYzgKpI299FemLg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/be6337-662e-4c3b-812a-3407fca12267/1/zbFQJ29VuuRVmI06E-WTQQdNzQo.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/be6337-662e-4c3b-812a-3407fca12267/1/zbFQJ29VuuRVmI06E-WTQQdNzQo.mft
rsync://rpki.ripe.net/repository/DEFAULT/zbFQJ29VuuRVmI06E-WTQQdNzQo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:ed:a1:59:2b:a8:6c:b8:15:d0:18:e8:37:78:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdb150276f55bae455988d3a13e59341074dcd0a
Validity
Not Before: Nov 4 08:00:43 2025 GMT
Not After : Nov 5 08:00:43 2025 GMT
Subject: CN=10b9c9d72f6a8054096c311540883a69955f94e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:75:03:fd:a2:43:3a:ea:3a:0d:e4:5c:5d:49:
64:86:40:38:89:db:90:15:f0:16:ff:89:6a:24:d5:
5b:1d:37:78:e8:2c:ce:78:93:74:9e:f9:f5:af:8d:
59:53:fa:a6:e8:52:1d:c9:08:cd:06:d3:87:e3:2a:
bc:0b:d6:fe:d0:fa:c9:7a:4c:04:e4:28:74:42:14:
5b:11:3d:ad:48:01:6d:89:e7:fd:80:65:89:0c:21:
63:83:8a:9a:17:d2:fa:9e:d4:68:bf:f4:de:fc:90:
25:42:fe:6d:90:06:48:50:82:82:18:f0:b9:84:64:
05:8c:98:40:f2:b1:69:c5:17:3e:1b:c8:b6:49:03:
53:9c:6a:f7:95:02:dd:f9:ed:68:c9:29:79:be:7f:
34:ac:25:af:de:40:7c:df:e4:a5:bf:d1:67:56:cd:
fa:3e:34:04:0c:a0:e4:55:8f:81:dc:b8:c2:59:78:
42:ce:6f:5a:c5:f4:f2:61:19:17:1b:e1:f5:ce:35:
77:db:4c:82:3c:ca:48:a3:33:74:fa:dd:1e:ac:14:
14:fb:53:a5:d7:37:9a:2f:b2:1e:93:b2:4f:b8:a4:
04:a5:35:82:ce:c6:15:80:df:21:bd:84:d2:f4:7f:
33:80:a4:a8:0b:e2:da:76:5a:e6:2a:f9:3a:92:0c:
c5:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:B9:C9:D7:2F:6A:80:54:09:6C:31:15:40:88:3A:69:95:5F:94:E4
X509v3 Authority Key Identifier:
keyid:CD:B1:50:27:6F:55:BA:E4:55:98:8D:3A:13:E5:93:41:07:4D:CD:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbFQJ29VuuRVmI06E-WTQQdNzQo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/be6337-662e-4c3b-812a-3407fca12267/1/zbFQJ29VuuRVmI06E-WTQQdNzQo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/be6337-662e-4c3b-812a-3407fca12267/1/zbFQJ29VuuRVmI06E-WTQQdNzQo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:72:48:91:1d:8e:56:f4:c4:c7:aa:6d:37:cd:62:1c:8b:ee:
99:47:95:4d:37:59:ea:c5:b8:0e:78:14:a3:8b:61:bc:a1:26:
ef:f4:b2:3c:9a:75:cb:b3:74:e7:ec:a4:91:68:55:f2:34:75:
f1:70:59:a1:46:21:57:8c:f1:93:36:a4:f5:21:94:18:8c:bb:
2c:59:a2:2b:97:3d:f8:f4:ff:ff:4a:01:c4:6b:c4:20:55:21:
3d:a5:43:71:38:da:4d:bc:68:3f:2c:92:cb:91:7a:a6:4d:3f:
73:58:e4:b3:5f:3f:94:32:92:79:a8:66:e4:49:cc:b2:af:e1:
97:18:b0:42:84:01:d6:99:95:09:3f:75:db:7c:13:5c:7c:43:
84:7a:7a:5b:80:da:1e:62:58:19:17:35:48:02:dc:a8:db:39:
12:96:8c:79:55:46:b0:e8:a6:8d:9c:5a:0b:74:64:4a:5f:c4:
59:fa:5e:c4:f6:0b:a4:b1:37:07:6a:46:99:5b:fa:34:2b:86:
4c:64:d6:ab:6a:a4:e0:0d:bb:e8:4d:d3:89:34:6b:ba:94:b8:
6d:bd:ac:e5:43:72:16:71:b2:8b:32:09:87:a5:e4:f6:95:14:
79:00:ff:70:70:54:76:10:e5:ff:f8:92:43:b1:c9:a2:d2:0a:
fd:f8:6d:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:02:43 2025 by rpki-client