Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.mft
File: z0D92CoP3ztwvhgiHuumDYAe178.mft (raw, json)
Hash identifier: MsGj3hn4BHaEmdeJVlb9hMn7LweHypqWVJheK3+VFtE=
Subject key identifier: 5C:F4:BA:04:A9:05:F5:C6:D6:3A:86:AC:1F:FD:D3:32:B3:FD:AA:10
Authority key identifier: CF:40:FD:D8:2A:0F:DF:3B:70:BE:18:22:1E:EB:A6:0D:80:1E:D7:BF
Certificate issuer: /CN=cf40fdd82a0fdf3b70be18221eeba60d801ed7bf
Certificate serial: 019A4DE1BC4485B26F954DBD3C0DECCB0724
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z0D92CoP3ztwvhgiHuumDYAe178.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.mft
Manifest number: 1720
Signing time: Tue 04 Nov 2025 08:00:30 +0000
Manifest this update: Tue 04 Nov 2025 08:00:30 +0000
Manifest next update: Wed 05 Nov 2025 08:00:30 +0000
Files and hashes: 1: 3CMB0mE1xTb-XY0wsKNGKjk0bFk.roa (hash: lQQ7mzHc9z9XCmBgSmyDJlA6JGPYMp41l5No4NnlwB0=)
2: bIWvsgV4TrBP7pw5O1uwj4fGsZQ.roa (hash: 9Cz0tiQS8/nDaglgPuFlELicHHSaEtfkwdT1X8AgbOU=)
3: z0D92CoP3ztwvhgiHuumDYAe178.crl (hash: 2FUsSoQqmB76VLG5h16Hu3dLDH86QckH9BDjpzcWeAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.mft
rsync://rpki.ripe.net/repository/DEFAULT/z0D92CoP3ztwvhgiHuumDYAe178.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:bc:44:85:b2:6f:95:4d:bd:3c:0d:ec:cb:07:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf40fdd82a0fdf3b70be18221eeba60d801ed7bf
Validity
Not Before: Nov 4 08:00:30 2025 GMT
Not After : Nov 5 08:00:30 2025 GMT
Subject: CN=5cf4ba04a905f5c6d63a86ac1ffdd332b3fdaa10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:be:11:44:fd:bd:76:7c:9d:11:95:ce:2c:83:
4e:71:db:3e:e0:94:73:e3:15:f7:5b:c4:fb:56:49:
ac:ce:d1:a5:c0:2a:d9:58:3f:45:f7:ec:bb:72:ee:
18:d7:c5:38:97:0e:95:6b:12:fe:42:5c:a9:4d:0e:
3d:bc:ed:48:e7:d4:e7:1c:4f:5e:2f:87:73:26:7f:
1c:55:64:79:6d:97:f4:f3:83:bd:31:a5:7a:0f:3a:
69:aa:34:2d:53:50:a3:ec:f0:c9:c6:ab:62:52:b2:
74:c2:09:3e:aa:71:69:4c:da:47:40:4f:cd:f5:25:
c1:90:db:94:5d:01:e5:e6:0a:1a:d8:7d:6a:52:c0:
52:03:04:c5:1f:1f:f8:09:88:bc:96:11:4b:3e:45:
0e:3c:76:d7:a7:5b:68:8d:84:fb:da:ec:95:89:78:
b7:43:e6:4d:a8:76:87:78:1c:65:f0:d3:8f:13:a5:
54:78:5e:be:19:08:a0:0c:a7:76:bb:c1:a6:5f:e2:
d4:b9:98:a9:35:b2:7b:1c:33:92:f4:ae:a0:51:f6:
79:a7:93:95:5b:90:25:6e:05:73:ae:1f:a7:76:24:
89:ae:7c:c8:c3:f4:b3:4d:29:69:ac:f3:0c:ab:fb:
0a:be:f3:e0:9b:f1:f6:9e:e8:1c:76:ec:4e:af:b2:
ca:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:F4:BA:04:A9:05:F5:C6:D6:3A:86:AC:1F:FD:D3:32:B3:FD:AA:10
X509v3 Authority Key Identifier:
keyid:CF:40:FD:D8:2A:0F:DF:3B:70:BE:18:22:1E:EB:A6:0D:80:1E:D7:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z0D92CoP3ztwvhgiHuumDYAe178.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:a6:c4:d5:b4:64:ef:c2:6c:26:a4:d6:af:0d:59:16:74:3f:
8f:f3:57:1c:79:2f:d0:8e:04:0e:0a:f9:66:6c:5c:ef:77:88:
ec:ba:60:aa:b2:8f:4b:b2:9c:a7:b9:6c:2f:7f:03:03:d9:09:
59:06:07:6f:a2:4f:3e:4a:47:bc:4e:0e:2e:92:d4:11:60:06:
99:b1:11:99:b2:62:65:50:f0:b2:53:28:1c:d3:f4:8f:7c:36:
84:c8:83:26:ca:5e:50:b0:6f:38:1f:ee:5d:56:83:6e:00:93:
1a:13:7c:6f:bc:c1:a1:82:4b:e1:69:5f:45:e7:cc:4e:54:81:
09:57:34:7d:9b:87:76:58:8d:6f:11:09:42:5c:d3:77:42:53:
83:82:88:e0:a1:ac:aa:49:9b:e6:f3:f1:00:f9:6e:79:bf:a2:
c7:28:b0:39:24:98:39:15:dd:3c:26:d6:ba:62:ce:03:3f:ae:
0b:c6:2d:c6:c9:e3:e8:87:73:99:a8:48:7c:68:27:fc:eb:a3:
3b:ee:76:58:a3:71:83:84:5d:a0:fe:eb:16:4d:6a:ee:ac:77:
9f:5f:b1:18:81:9e:88:d8:f3:9b:31:2e:37:61:8c:67:63:1d:
bb:92:7d:eb:88:ab:6b:12:da:8f:91:db:a4:2f:54:c5:9c:3a:
c9:e9:20:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:00:33 2025 by rpki-client