Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/zsOzR6IWvEN7C9TPC8jNpl6MLTs.mft
File: zsOzR6IWvEN7C9TPC8jNpl6MLTs.mft (raw, json)
Hash identifier: GObAq3hIIa1tZ6yElI8HdwmgPppfBgSBtmBFOUdGX8M=
Subject key identifier: 94:7E:56:43:A9:7C:62:87:A5:A4:91:CA:28:76:E8:86:4D:19:42:4C
Authority key identifier: CE:C3:B3:47:A2:16:BC:43:7B:0B:D4:CF:0B:C8:CD:A6:5E:8C:2D:3B
Certificate issuer: /CN=cec3b347a216bc437b0bd4cf0bc8cda65e8c2d3b
Certificate serial: 019A5074F3D3208E38AB922DCC8BC91BAB87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsOzR6IWvEN7C9TPC8jNpl6MLTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/zsOzR6IWvEN7C9TPC8jNpl6MLTs.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 20:00:32 +0000
Manifest this update: Tue 04 Nov 2025 20:00:32 +0000
Manifest next update: Wed 05 Nov 2025 20:00:32 +0000
Files and hashes: 1: 3UV0tf4TpPvOJSDiaLYyYXtXVvM.roa (hash: 91M1HXlX3TdwneLYlb0DmYCeKKtHfStsh7Dj5kd2gPQ=)
2: hTVB9eVU8NNiy6MIVDn_GhyE-TY.roa (hash: d7gEsYm91j6b+k2E5nN8wQQW4TMiwqo8rZZMnn76l+U=)
3: lmY3OHV06iQ2okHJC_xew_5c0LY.roa (hash: VAAXf3sc2kIcjjslDb0B8KOFlo5MNyl0zFRFKzuk/g0=)
4: r_1BD4QIwyD4kFSgnJUFtmINdFo.roa (hash: analV2m8+Aw9Y/v6KpT1JDqGOt2ZN0tCbqPYX5Hv+/c=)
5: zsOzR6IWvEN7C9TPC8jNpl6MLTs.crl (hash: sJXGJb0LI1qy8P/a6VDgnrQpds5l0lpRlDNvOjDcICk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/zsOzR6IWvEN7C9TPC8jNpl6MLTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/zsOzR6IWvEN7C9TPC8jNpl6MLTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/zsOzR6IWvEN7C9TPC8jNpl6MLTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:74:f3:d3:20:8e:38:ab:92:2d:cc:8b:c9:1b:ab:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec3b347a216bc437b0bd4cf0bc8cda65e8c2d3b
Validity
Not Before: Nov 4 20:00:32 2025 GMT
Not After : Nov 5 20:00:32 2025 GMT
Subject: CN=947e5643a97c6287a5a491ca2876e8864d19424c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:51:2c:76:29:2a:27:94:ef:3b:bb:c1:89:1c:
03:f0:45:6c:e1:17:ab:a8:2f:86:4e:2e:cf:87:7a:
a3:ca:71:bb:98:7c:58:84:85:aa:37:15:8d:8e:47:
aa:65:d7:db:6e:b8:37:52:3e:25:03:70:ae:93:42:
e3:ef:40:2d:e0:a5:5b:64:f7:9d:a9:a4:b1:6f:f9:
c7:34:b5:15:0f:28:54:cb:70:23:c1:1a:2b:7b:96:
de:e3:2c:01:9b:18:ba:54:2a:26:6e:b0:60:0a:1d:
05:a7:e2:fd:04:01:fb:0f:55:94:43:ee:82:50:6a:
7b:66:71:c5:64:44:82:2c:46:26:df:9f:c6:7d:67:
24:43:02:5f:89:19:c5:15:25:b6:07:53:48:0a:a5:
a0:76:e9:f3:40:47:d7:d2:0a:98:30:d0:b8:f8:07:
60:81:9f:91:57:16:87:e1:fe:42:0a:5a:46:79:53:
17:94:33:22:ae:e5:eb:bb:85:a9:d4:13:ec:c8:63:
de:d9:fa:de:57:7c:f0:57:09:34:a8:a6:17:0a:80:
49:10:b3:62:fb:fa:d0:50:93:20:d9:f2:47:1c:c1:
f2:1e:a1:7a:a9:7d:e6:c1:4c:40:97:d2:3d:27:0a:
cd:02:0e:59:04:84:64:72:ee:a5:45:83:47:79:79:
ab:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:7E:56:43:A9:7C:62:87:A5:A4:91:CA:28:76:E8:86:4D:19:42:4C
X509v3 Authority Key Identifier:
keyid:CE:C3:B3:47:A2:16:BC:43:7B:0B:D4:CF:0B:C8:CD:A6:5E:8C:2D:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsOzR6IWvEN7C9TPC8jNpl6MLTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/zsOzR6IWvEN7C9TPC8jNpl6MLTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/zsOzR6IWvEN7C9TPC8jNpl6MLTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:84:5d:cc:19:f6:26:8a:c6:61:94:01:b0:61:4c:f1:64:e6:
ab:56:fa:57:1d:2b:39:58:49:9f:e1:4f:65:c5:bf:be:95:ac:
78:83:cc:b3:4c:46:86:f8:b5:e1:4b:bb:ad:5b:61:8c:c5:90:
de:a5:e7:23:d7:e2:d2:47:1f:ad:09:53:09:bd:62:5a:b3:a2:
a9:c1:18:9a:6c:2c:05:50:07:50:98:92:2b:29:ac:49:83:a6:
bb:f7:84:76:55:dc:6a:7e:61:d7:0d:7c:90:a6:84:ad:8c:52:
2d:96:70:df:cf:56:e8:6c:a8:2d:b9:5a:5e:c3:fe:dd:02:62:
04:80:eb:53:9b:1c:6e:ba:fb:ac:49:d7:18:e6:86:a8:3a:b9:
b3:f4:79:69:fc:31:ba:cf:09:42:aa:de:08:40:72:1f:37:d1:
72:5b:84:9f:ea:44:04:33:d2:2f:15:2c:a6:e8:f8:39:86:b3:
5b:7c:a7:2b:de:07:1d:68:b2:53:fc:0b:85:dc:a3:a0:b8:16:
a0:ea:51:f1:97:f2:f0:f3:fd:4e:72:4e:46:26:8c:e2:73:80:
39:69:62:52:aa:c8:1a:a0:3a:87:e3:98:74:4f:40:6c:e2:c3:
59:55:fb:1b:cc:1f:5a:90:9a:52:3f:8b:81:5a:ed:bb:50:ae:
a4:10:e0:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:52:57 2025 by rpki-client