Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/d1353b-fa9d-4e6e-8c22-0ab25d0b0bee/1/zejmVDmS20l1mMIueouVePiNmC8.mft
File: zejmVDmS20l1mMIueouVePiNmC8.mft (raw, json)
Hash identifier: Z2kSJ8TRqyfOYXUN5hy13EFAdp505eHfYVrrsoVyr7M=
Subject key identifier: 15:0E:01:11:FE:CE:88:D1:4B:D9:16:FD:09:4B:FA:09:56:4C:0F:2B
Authority key identifier: CD:E8:E6:54:39:92:DB:49:75:98:C2:2E:7A:8B:95:78:F8:8D:98:2F
Certificate issuer: /CN=cde8e6543992db497598c22e7a8b9578f88d982f
Certificate serial: 019A4D060456E8FE9379D99144D9B574D32E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zejmVDmS20l1mMIueouVePiNmC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/d1353b-fa9d-4e6e-8c22-0ab25d0b0bee/1/zejmVDmS20l1mMIueouVePiNmC8.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 04:00:31 +0000
Manifest this update: Tue 04 Nov 2025 04:00:31 +0000
Manifest next update: Wed 05 Nov 2025 04:00:31 +0000
Files and hashes: 1: Y9gCH4thucbTjT0xARnAurkdlt0.roa (hash: yAFowKPItllcTMSoNXQVDZSzSIBjFl8626mwMV3sNgo=)
2: zejmVDmS20l1mMIueouVePiNmC8.crl (hash: uMo1Jnx70EKgQX7+83BmKuIzycPlORfSmA42QtPXBZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/d1353b-fa9d-4e6e-8c22-0ab25d0b0bee/1/zejmVDmS20l1mMIueouVePiNmC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/d1353b-fa9d-4e6e-8c22-0ab25d0b0bee/1/zejmVDmS20l1mMIueouVePiNmC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zejmVDmS20l1mMIueouVePiNmC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:06:04:56:e8:fe:93:79:d9:91:44:d9:b5:74:d3:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cde8e6543992db497598c22e7a8b9578f88d982f
Validity
Not Before: Nov 4 04:00:31 2025 GMT
Not After : Nov 5 04:00:31 2025 GMT
Subject: CN=150e0111fece88d14bd916fd094bfa09564c0f2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:77:d9:a3:13:c8:db:7e:99:69:0c:2b:a9:08:
6a:fe:24:17:43:e2:d2:b3:c5:91:79:7a:fe:02:46:
2d:e2:f6:44:19:10:83:3d:a7:b4:b2:c8:9d:cc:69:
06:0d:d0:65:9c:ee:9b:6f:3d:c5:4c:7e:fd:5c:da:
bb:e8:e7:e1:b9:92:50:f3:4b:32:90:e2:68:2f:29:
19:51:30:69:cc:e5:78:0c:05:e9:5d:50:fe:85:30:
82:10:af:dd:42:3c:5b:2d:07:35:e2:ab:15:ed:cd:
80:be:59:6b:21:a7:7b:85:84:70:3b:1d:59:b4:5a:
c1:55:a6:6d:31:e2:b2:48:ef:64:67:37:6f:7c:4c:
18:94:c2:5a:e1:5f:9c:0c:b4:aa:30:f5:6b:34:26:
13:da:dd:bf:fb:be:de:c1:e0:30:d8:17:af:72:4e:
65:d4:be:90:61:05:c9:99:8c:61:28:cb:dd:9a:35:
cd:9d:23:7f:10:6b:a3:c2:da:a8:38:9e:88:1b:78:
5d:d5:e6:16:4e:eb:a4:48:40:fc:7f:24:88:fe:d5:
27:eb:e5:79:bf:8c:48:76:75:c0:a6:81:a5:41:30:
d9:77:e4:0d:a4:b9:1e:eb:29:dc:1e:6c:3d:96:2e:
ef:5a:8e:ef:55:14:63:cc:3e:4a:69:5a:db:59:a9:
56:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:0E:01:11:FE:CE:88:D1:4B:D9:16:FD:09:4B:FA:09:56:4C:0F:2B
X509v3 Authority Key Identifier:
keyid:CD:E8:E6:54:39:92:DB:49:75:98:C2:2E:7A:8B:95:78:F8:8D:98:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zejmVDmS20l1mMIueouVePiNmC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/d1353b-fa9d-4e6e-8c22-0ab25d0b0bee/1/zejmVDmS20l1mMIueouVePiNmC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/d1353b-fa9d-4e6e-8c22-0ab25d0b0bee/1/zejmVDmS20l1mMIueouVePiNmC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:7b:d2:a8:25:be:11:0a:d4:9c:37:fd:59:2c:bc:19:29:2c:
59:d1:db:99:da:5a:60:9d:d2:99:68:92:15:ca:93:c9:32:0b:
1c:72:d9:01:91:6c:03:bb:85:bd:96:36:92:65:ee:fa:5d:47:
bb:60:d3:46:20:fe:36:ba:d7:d5:bd:cd:13:66:d1:de:67:3c:
65:d2:2f:8c:9e:db:74:37:7c:ef:2f:33:e1:a9:c7:97:c8:69:
fa:7d:28:b4:85:af:42:8a:63:f8:c7:d4:16:f1:86:ff:d9:d8:
7c:c9:04:b8:5d:13:15:e4:84:f1:f9:23:6c:45:33:bf:f4:dc:
40:c7:25:f5:88:2e:7b:ac:65:18:27:ef:05:35:81:e4:88:38:
44:21:93:c0:04:2e:bf:b5:bb:3a:1b:b0:b6:a3:af:6a:11:92:
23:b5:61:cb:f4:ba:cb:d0:c4:16:d5:93:53:9b:ab:0f:af:2e:
4f:46:39:0d:a0:ce:e4:98:53:91:52:af:30:fc:ca:e7:b9:3e:
07:79:f8:82:1c:f1:99:1a:55:6d:9f:11:7a:52:9f:f1:4d:63:
c4:94:47:21:4f:d2:07:0e:d3:31:cc:89:63:b4:6e:e5:49:b4:
fa:b2:af:2f:18:c3:cb:60:5f:dc:8f:78:10:8f:bb:9b:1b:96:
2e:36:a8:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:56:22 2025 by rpki-client