Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/8eb32d-f7e3-4a9c-aaa4-8421d781b03b/1/zahD6BKxbexgu3CYykEzEX24R00.mft
File: zahD6BKxbexgu3CYykEzEX24R00.mft (raw, json)
Hash identifier: MVcXygv8NwEu4IeqfVTD/UEdS6d2P8j3x3zxB6BXbg8=
Subject key identifier: 1E:FA:D5:33:29:74:C0:AA:FC:F0:48:13:02:89:B1:FA:CE:38:6C:5F
Authority key identifier: CD:A8:43:E8:12:B1:6D:EC:60:BB:70:98:CA:41:33:11:7D:B8:47:4D
Certificate issuer: /CN=cda843e812b16dec60bb7098ca4133117db8474d
Certificate serial: 019A4E18A5A4DC72E470F3373B57A7E224E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zahD6BKxbexgu3CYykEzEX24R00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/8eb32d-f7e3-4a9c-aaa4-8421d781b03b/1/zahD6BKxbexgu3CYykEzEX24R00.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 09:00:29 +0000
Manifest this update: Tue 04 Nov 2025 09:00:29 +0000
Manifest next update: Wed 05 Nov 2025 09:00:29 +0000
Files and hashes: 1: VJUoXBS9iPEfhSdXRvzqWIAuTX8.roa (hash: Nan6DQGHyzFA7VJDUyPb17ZowHybZxaUB4pA1mJmnaY=)
2: zahD6BKxbexgu3CYykEzEX24R00.crl (hash: moNo2k1ACjnwPzAdd3mnGGm7+08BhRpCw1zFz1LwiiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/8eb32d-f7e3-4a9c-aaa4-8421d781b03b/1/zahD6BKxbexgu3CYykEzEX24R00.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/8eb32d-f7e3-4a9c-aaa4-8421d781b03b/1/zahD6BKxbexgu3CYykEzEX24R00.mft
rsync://rpki.ripe.net/repository/DEFAULT/zahD6BKxbexgu3CYykEzEX24R00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:a5:a4:dc:72:e4:70:f3:37:3b:57:a7:e2:24:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cda843e812b16dec60bb7098ca4133117db8474d
Validity
Not Before: Nov 4 09:00:29 2025 GMT
Not After : Nov 5 09:00:29 2025 GMT
Subject: CN=1efad5332974c0aafcf048130289b1face386c5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:fb:21:63:19:58:ef:c8:f2:9d:6f:e4:9d:76:
59:dc:f6:63:90:9c:18:17:db:1b:d3:01:8c:c0:ab:
33:2d:d7:6c:35:40:ef:6e:6c:b0:dd:2e:3f:b5:d5:
b1:2c:12:55:b6:ca:42:46:cb:2a:57:21:fe:29:e2:
7e:99:49:70:95:09:ed:d9:44:88:12:9e:6d:ca:9c:
df:a7:62:4d:ee:63:3d:4e:e4:32:c4:36:e8:18:89:
fe:db:a8:fc:fd:a1:75:8b:12:53:5c:9d:c6:e9:63:
dc:e7:ad:ca:83:ed:4c:19:32:a4:21:fb:09:6f:77:
11:8f:ce:76:19:00:c3:65:36:33:71:66:fa:41:85:
5e:52:55:50:7d:93:26:58:cd:02:ef:6c:c1:6e:96:
89:65:b1:44:79:39:bb:c2:4f:a0:3d:b1:fd:54:35:
90:85:53:b5:0c:ec:21:4b:7a:0f:90:61:9f:44:91:
e8:c6:63:b6:8d:fb:bc:3d:3a:b1:64:37:44:43:61:
3b:46:e6:e7:c5:ba:78:64:10:3e:a1:49:3e:04:f3:
6d:b2:f2:46:85:3a:e8:77:97:1a:97:2b:ce:2e:5f:
05:3a:8b:e0:ac:df:d1:71:d5:55:92:39:9e:04:38:
5b:6d:97:89:28:dc:ec:94:fc:09:56:fb:2c:bc:5e:
10:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:FA:D5:33:29:74:C0:AA:FC:F0:48:13:02:89:B1:FA:CE:38:6C:5F
X509v3 Authority Key Identifier:
keyid:CD:A8:43:E8:12:B1:6D:EC:60:BB:70:98:CA:41:33:11:7D:B8:47:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zahD6BKxbexgu3CYykEzEX24R00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8eb32d-f7e3-4a9c-aaa4-8421d781b03b/1/zahD6BKxbexgu3CYykEzEX24R00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8eb32d-f7e3-4a9c-aaa4-8421d781b03b/1/zahD6BKxbexgu3CYykEzEX24R00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:a1:09:fb:d6:d4:69:42:23:ba:ff:f7:fa:2c:cf:83:99:c5:
6f:c6:df:37:ae:f3:50:76:58:23:19:a4:7b:1c:ef:3e:db:de:
a6:85:25:c1:33:21:3a:fb:c6:14:f4:fd:ef:59:c1:a1:d1:9e:
32:32:46:89:36:22:e1:e3:dc:a7:aa:e0:b2:77:4a:a9:c0:10:
f5:2f:bd:4e:f7:a6:07:dd:95:32:4f:85:7e:0b:28:bf:7d:af:
75:d5:fc:f9:57:97:77:e2:2c:b8:77:59:1d:c7:97:61:88:b6:
ab:ad:ca:21:71:d9:b6:dd:af:4f:ca:71:8c:58:db:b4:13:f6:
be:fc:fb:f7:1b:ee:e4:5b:e9:da:28:b3:54:ac:74:f7:9a:42:
fa:62:69:41:cb:4e:f8:31:b4:2b:d4:bb:f7:cb:db:b2:1d:41:
74:b1:7d:01:bf:33:b4:f2:d8:27:2b:70:5e:9d:76:d2:cd:0a:
c6:77:5b:66:33:2e:24:99:30:15:fc:60:c7:b5:51:0f:52:46:
1c:34:a0:dc:26:9d:63:64:05:b3:48:89:9c:bc:34:d7:73:96:
0b:7f:35:a2:4b:36:3f:36:81:6e:7a:9c:a0:84:3e:a3:17:58:
c2:4d:c4:ba:6b:5e:8f:83:1d:63:c2:d8:26:0f:1d:13:e4:db:
2e:2c:69:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:00:42 2025 by rpki-client