Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/272986-88a9-477c-a277-a55b580b0ea3/1/zfUae0xbJFgCkrjEqmqpwyVmVIA.mft
File: zfUae0xbJFgCkrjEqmqpwyVmVIA.mft (raw, json)
Hash identifier: Sa5CqPTXiUoLNbzshmmuHYEJgLrEbAuQvMnV77xeSD0=
Subject key identifier: E1:FC:BB:92:81:0A:11:B4:A4:51:64:AA:62:F8:19:02:9A:19:A3:C4
Authority key identifier: CD:F5:1A:7B:4C:5B:24:58:02:92:B8:C4:AA:6A:A9:C3:25:66:54:80
Certificate issuer: /CN=cdf51a7b4c5b24580292b8c4aa6aa9c325665480
Certificate serial: 019A4C98653AF209F5A774122BDED2F89146
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zfUae0xbJFgCkrjEqmqpwyVmVIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/272986-88a9-477c-a277-a55b580b0ea3/1/zfUae0xbJFgCkrjEqmqpwyVmVIA.mft
Manifest number: 0C01
Signing time: Tue 04 Nov 2025 02:00:47 +0000
Manifest this update: Tue 04 Nov 2025 02:00:47 +0000
Manifest next update: Wed 05 Nov 2025 02:00:47 +0000
Files and hashes: 1: VEgZIBYWjoldzkGuakwy0OuiD_g.roa (hash: /UHAw/sksRIzZ9d6cBH90oCHv9WV9PgycAVZrQjs45g=)
2: zfUae0xbJFgCkrjEqmqpwyVmVIA.crl (hash: X2Sl14t2Yon5yGF9BmHi/lOusc5FhZJjORGC+WgImcA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/272986-88a9-477c-a277-a55b580b0ea3/1/zfUae0xbJFgCkrjEqmqpwyVmVIA.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/272986-88a9-477c-a277-a55b580b0ea3/1/zfUae0xbJFgCkrjEqmqpwyVmVIA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zfUae0xbJFgCkrjEqmqpwyVmVIA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 02:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:98:65:3a:f2:09:f5:a7:74:12:2b:de:d2:f8:91:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdf51a7b4c5b24580292b8c4aa6aa9c325665480
Validity
Not Before: Nov 4 02:00:47 2025 GMT
Not After : Nov 5 02:00:47 2025 GMT
Subject: CN=e1fcbb92810a11b4a45164aa62f819029a19a3c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0e:44:03:e8:de:9c:e8:a3:a7:e0:11:da:13:
31:82:5f:20:89:8c:e1:3a:4b:06:ad:41:00:d8:c4:
02:86:48:36:a8:5b:cf:0a:ac:6b:f8:93:f4:91:cf:
a9:57:0c:21:06:20:33:04:8a:a3:6d:e7:ca:8e:f5:
7a:98:05:fd:77:b3:1c:1c:c0:2a:1f:4a:cf:b3:f7:
50:0c:3c:36:06:57:48:f5:93:5b:f5:33:72:14:72:
00:f1:d6:10:be:58:f8:96:15:71:0c:69:c5:b3:f6:
51:47:27:52:80:26:66:a5:0b:3c:fb:11:f4:93:c9:
fd:c2:0f:b8:9a:54:a6:c2:79:95:6b:6a:8b:e8:52:
b7:6c:3a:1c:ec:55:e2:55:7c:36:08:61:ee:21:37:
98:31:30:f0:16:0c:4a:e8:75:f1:b6:a6:10:3b:3c:
a4:8a:0f:d6:3a:e3:28:49:82:db:42:c9:bd:d0:a2:
6f:e3:48:25:be:af:e4:92:a0:7a:7e:e2:79:00:6f:
7e:bf:d2:8c:ba:30:09:8c:79:c4:50:ba:23:2c:8c:
bb:27:2b:e5:bb:39:45:45:f1:30:1b:e3:8c:e2:1c:
b9:ff:81:0a:49:d6:2d:27:5c:02:26:bd:9e:d1:13:
30:be:8c:cf:b6:5f:65:a3:ca:4d:34:fb:6a:0e:5f:
e6:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:FC:BB:92:81:0A:11:B4:A4:51:64:AA:62:F8:19:02:9A:19:A3:C4
X509v3 Authority Key Identifier:
keyid:CD:F5:1A:7B:4C:5B:24:58:02:92:B8:C4:AA:6A:A9:C3:25:66:54:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zfUae0xbJFgCkrjEqmqpwyVmVIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/272986-88a9-477c-a277-a55b580b0ea3/1/zfUae0xbJFgCkrjEqmqpwyVmVIA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/272986-88a9-477c-a277-a55b580b0ea3/1/zfUae0xbJFgCkrjEqmqpwyVmVIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:da:1e:ac:a0:43:66:fc:1c:f7:6f:a3:c3:a5:d3:6b:d0:29:
04:ef:43:d8:9c:96:1c:82:a3:74:88:2a:75:a7:38:1c:ac:ff:
da:90:ef:ed:e1:03:72:92:2a:05:e8:cd:3a:6e:43:7e:d8:14:
38:0c:0e:60:9e:90:d6:53:38:59:14:c6:31:81:7c:11:da:7f:
3f:45:a5:e3:f9:89:45:01:23:be:0a:27:59:a7:84:d4:66:44:
fa:28:ef:f0:a8:40:b7:ac:50:f2:ab:6d:79:aa:6f:bd:2e:1c:
9a:12:82:7f:7f:48:b2:85:da:a6:bb:f0:36:ae:0b:45:36:0d:
fc:b4:c7:68:2d:e5:dd:15:a2:3e:47:95:48:53:82:60:9e:d8:
55:14:2c:4f:60:3c:95:ff:d7:c0:c7:ae:2f:f5:93:b7:06:43:
a4:48:f9:72:20:0b:6b:f9:27:03:51:d0:31:8b:b5:b3:16:10:
a3:4d:e3:ba:22:6f:ee:34:3f:16:8e:ea:8b:c5:66:fe:2c:40:
80:a6:1c:b7:49:56:9d:b4:be:3f:ba:ed:23:60:0c:0a:ea:c2:
b6:92:a0:e8:d4:d8:ca:6b:2a:45:38:31:b4:f7:40:da:ce:77:
8f:bd:34:82:85:b1:2c:b3:8c:9f:78:52:09:1c:b4:d9:b3:94:
1b:87:e7:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:19:53 2025 by rpki-client