Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/RZO5rApIawA3dl1gXIscgQQEbwo.mft
File: RZO5rApIawA3dl1gXIscgQQEbwo.mft (raw, json)
Hash identifier: gbakzbZozBVDJJmO7NN3ei7uanigDqVI6v2wZlvJJHk=
Subject key identifier: 52:CE:4E:16:10:20:2E:8C:3F:D4:F7:BF:BD:C6:CB:13:6B:C6:22:5C
Authority key identifier: 45:93:B9:AC:0A:48:6B:00:37:76:5D:60:5C:8B:1C:81:04:04:6F:0A
Certificate issuer: /CN=4593b9ac0a486b0037765d605c8b1c8104046f0a
Certificate serial: 019A52D17DA6A273E9AC2082361D5A44964E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZO5rApIawA3dl1gXIscgQQEbwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/RZO5rApIawA3dl1gXIscgQQEbwo.mft
Manifest number: EE
Signing time: Wed 05 Nov 2025 07:00:52 +0000
Manifest this update: Wed 05 Nov 2025 07:00:52 +0000
Manifest next update: Thu 06 Nov 2025 07:00:52 +0000
Files and hashes: 1: ADc0-Z75WPBsaBDTplhpevySpwU.roa (hash: PLV8H8uGdTSutML/LIXLIYXv/TzH5t9Y0T2S9cmwyI4=)
2: I-sX0mMjM8kXRo5NUo2O1J5bfdk.roa (hash: Go2R3bZJJoI7RVBZI1wnjguo8NeRa3WOvzexNUQ8j3I=)
3: RZO5rApIawA3dl1gXIscgQQEbwo.crl (hash: UVkBX7DSdhOd7YgONtIhvQoMdUQccP7+XcgmGwmZo8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/RZO5rApIawA3dl1gXIscgQQEbwo.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/RZO5rApIawA3dl1gXIscgQQEbwo.mft
rsync://rpki.ripe.net/repository/DEFAULT/RZO5rApIawA3dl1gXIscgQQEbwo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 07:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:7d:a6:a2:73:e9:ac:20:82:36:1d:5a:44:96:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4593b9ac0a486b0037765d605c8b1c8104046f0a
Validity
Not Before: Nov 5 07:00:52 2025 GMT
Not After : Nov 6 07:00:52 2025 GMT
Subject: CN=52ce4e1610202e8c3fd4f7bfbdc6cb136bc6225c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:88:c1:61:3c:07:58:41:31:60:e6:98:3a:0d:
0b:fc:14:06:d0:31:f9:80:c6:e2:ff:93:52:e8:7f:
5a:88:fc:d6:e7:7b:48:98:15:49:1f:db:9a:04:de:
33:87:0a:41:65:9f:63:c9:aa:5f:7b:db:78:4d:69:
46:99:c3:91:f9:49:a3:66:7a:0a:ab:73:56:b2:8a:
dd:d4:a7:da:87:9f:ae:2e:fb:d9:7e:0a:72:8e:42:
d5:7a:83:8f:c4:2e:aa:07:3e:2c:26:1c:69:b8:88:
6f:c9:6c:1d:01:7a:f4:9b:08:f0:26:0b:5c:e5:ee:
79:dc:a7:56:e6:ac:98:19:fd:7b:fe:20:25:42:63:
d7:c3:7d:cd:dc:01:0d:ce:44:6c:2a:0e:49:cb:27:
16:de:4e:f4:69:45:09:8d:11:be:59:bb:5e:2a:a7:
b9:7c:4e:f3:3b:71:84:9b:24:40:f0:f8:af:ea:ad:
d7:50:46:e7:f3:c7:72:7b:01:a7:c9:9e:ae:f1:88:
4b:e8:db:f5:96:16:dd:e7:a0:cd:91:23:b0:35:5c:
9f:c6:03:fc:73:41:e3:b6:62:70:1a:e6:ed:b2:35:
ea:b5:c3:33:a4:f8:5c:0e:4d:9b:bc:f6:85:a8:0a:
52:da:a3:7d:eb:96:bd:c8:c6:d1:43:1f:21:b9:db:
f9:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:CE:4E:16:10:20:2E:8C:3F:D4:F7:BF:BD:C6:CB:13:6B:C6:22:5C
X509v3 Authority Key Identifier:
keyid:45:93:B9:AC:0A:48:6B:00:37:76:5D:60:5C:8B:1C:81:04:04:6F:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZO5rApIawA3dl1gXIscgQQEbwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/RZO5rApIawA3dl1gXIscgQQEbwo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/RZO5rApIawA3dl1gXIscgQQEbwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:ff:11:f4:38:0a:1d:73:77:90:1f:f3:84:45:51:70:31:23:
18:05:50:18:11:8f:c6:8e:ac:76:da:a8:e6:6d:f5:45:a5:77:
fa:5e:df:d7:5b:cb:06:f5:c9:9e:f4:eb:16:19:b6:1a:a4:7f:
02:a5:16:e8:97:54:30:31:5c:53:47:cf:53:47:f4:b0:10:cd:
f3:cd:a4:6a:fc:16:ef:a2:59:2f:40:f5:89:00:b0:69:48:dd:
3a:dc:cc:80:62:b7:05:59:92:a9:d1:d4:ce:97:7f:19:3b:b6:
94:35:dd:05:a4:53:2d:23:db:80:ef:02:ac:63:77:43:1c:72:
a9:a8:20:92:4f:b0:76:40:ab:f3:78:f9:d7:d8:df:1c:46:55:
3e:b1:b3:7d:d7:da:13:60:df:c3:62:d1:bb:2f:e2:83:78:2f:
0a:66:d9:06:30:e7:c4:87:78:c4:7d:50:ae:df:73:29:0e:3b:
35:8c:aa:8f:e3:30:5f:55:60:f1:92:92:34:49:74:22:bc:3e:
43:34:2c:70:4b:a3:e4:31:2c:91:3a:c6:a8:9c:86:cd:7b:ca:
1a:33:ea:ee:50:47:f1:b0:7f:95:d4:a1:eb:5d:cc:f7:79:3a:
e4:f8:51:fe:a7:d2:0e:13:43:bf:2e:9e:39:6d:88:ab:10:49:
52:b1:63:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:29:30 2025 by rpki-client