Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/ecaeb3-f42f-4bac-a49e-242ffdaa2670/1/zX7ksDJ5ljBM8YoSjiZVeAyda5s.mft
File: zX7ksDJ5ljBM8YoSjiZVeAyda5s.mft (raw, json)
Hash identifier: EqT2L9yB/qIoNIBq2PujS4sWuI3yI0aCuieViOfLk9I=
Subject key identifier: DC:D5:13:C5:2D:FC:18:0C:D8:E1:2E:5D:7E:8C:97:BA:CB:37:0B:4C
Authority key identifier: CD:7E:E4:B0:32:79:96:30:4C:F1:8A:12:8E:26:55:78:0C:9D:6B:9B
Certificate issuer: /CN=cd7ee4b0327996304cf18a128e2655780c9d6b9b
Certificate serial: 019A4D3CCEFB006167E1CDAD2CCBD8C25404
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zX7ksDJ5ljBM8YoSjiZVeAyda5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/ecaeb3-f42f-4bac-a49e-242ffdaa2670/1/zX7ksDJ5ljBM8YoSjiZVeAyda5s.mft
Manifest number: 0CA8
Signing time: Tue 04 Nov 2025 05:00:22 +0000
Manifest this update: Tue 04 Nov 2025 05:00:22 +0000
Manifest next update: Wed 05 Nov 2025 05:00:22 +0000
Files and hashes: 1: 0_tGmdVdpjc2L8zUWyzyW9iPObU.roa (hash: bn84kxibGx4/EOPh2OY0dkRz9RK07gMRfVN7WrprjOg=)
2: zX7ksDJ5ljBM8YoSjiZVeAyda5s.crl (hash: FSFPxx6iUhunnsw37JcpQ/WfQ+fsvYW9l7Z6FNkrQRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/ecaeb3-f42f-4bac-a49e-242ffdaa2670/1/zX7ksDJ5ljBM8YoSjiZVeAyda5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/ecaeb3-f42f-4bac-a49e-242ffdaa2670/1/zX7ksDJ5ljBM8YoSjiZVeAyda5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/zX7ksDJ5ljBM8YoSjiZVeAyda5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3c:ce:fb:00:61:67:e1:cd:ad:2c:cb:d8:c2:54:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd7ee4b0327996304cf18a128e2655780c9d6b9b
Validity
Not Before: Nov 4 05:00:22 2025 GMT
Not After : Nov 5 05:00:22 2025 GMT
Subject: CN=dcd513c52dfc180cd8e12e5d7e8c97bacb370b4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:67:f8:f1:44:c1:5b:5b:e1:57:83:d4:65:dc:
a3:1f:9e:3c:5f:f3:e7:0e:34:8d:ff:89:f9:79:ee:
80:ca:0b:26:ac:58:3c:40:df:0e:72:20:dd:2b:ef:
8f:ae:4b:50:56:3d:a5:8f:bf:70:2d:68:fb:0a:d6:
e5:80:14:6f:e3:99:47:23:30:3b:5c:75:9c:f3:3e:
75:51:0d:56:43:5e:0e:bd:63:4e:bd:06:1b:9b:9b:
b7:8a:42:fd:93:41:4b:c0:2f:8f:05:f2:95:3f:05:
6e:e2:69:02:0f:c0:51:4c:8c:1a:62:44:78:0c:1f:
49:79:19:16:91:8f:90:f2:d4:69:07:9d:c7:8a:c0:
3a:a9:44:78:27:af:f8:50:ee:8d:64:d2:61:dc:cf:
bd:72:93:41:fa:5c:b3:c7:a0:5d:db:cc:72:7a:d8:
b9:cc:82:c1:27:2e:ea:dd:9c:38:79:1b:d5:35:d0:
cd:56:e8:9c:6e:ac:e0:3d:e8:90:36:72:f1:bf:6d:
f3:81:cd:e8:90:c2:a8:54:71:83:4b:97:1f:3d:af:
14:b7:e4:88:96:53:4c:fb:ae:22:38:f9:34:45:6a:
e6:71:db:74:32:4a:f5:d7:8b:0b:cd:51:39:c8:f0:
88:0f:bb:a8:ff:b9:ff:40:2a:cc:e4:0e:7a:09:35:
3b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:D5:13:C5:2D:FC:18:0C:D8:E1:2E:5D:7E:8C:97:BA:CB:37:0B:4C
X509v3 Authority Key Identifier:
keyid:CD:7E:E4:B0:32:79:96:30:4C:F1:8A:12:8E:26:55:78:0C:9D:6B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zX7ksDJ5ljBM8YoSjiZVeAyda5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/ecaeb3-f42f-4bac-a49e-242ffdaa2670/1/zX7ksDJ5ljBM8YoSjiZVeAyda5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/ecaeb3-f42f-4bac-a49e-242ffdaa2670/1/zX7ksDJ5ljBM8YoSjiZVeAyda5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:95:30:b2:29:b6:1b:1a:e0:90:0d:31:69:8d:35:82:8f:c7:
d0:85:a6:f2:67:49:a8:eb:3a:aa:b7:00:1a:ba:54:b8:5a:9b:
51:14:08:9e:b1:46:45:6b:79:d9:ec:e6:80:75:22:85:d5:13:
f0:d1:5c:fa:4f:12:96:5d:fc:2a:6f:b2:44:58:d0:fb:5b:9f:
9a:34:b6:f2:60:75:a4:7b:f7:5d:63:d2:79:7b:52:ac:68:2e:
af:b3:b5:b2:df:87:1c:b0:71:f8:85:6c:20:1d:22:5d:34:15:
0a:7d:64:89:c4:54:c1:f1:f0:be:ac:d5:58:1b:71:89:28:09:
3d:a2:69:26:76:2d:a5:fe:a9:34:01:88:8c:82:da:66:53:1c:
be:77:66:d3:15:65:94:e5:5a:86:15:ab:3e:b9:49:35:57:91:
17:e9:2e:1f:51:93:a2:c5:51:62:33:97:a3:50:06:ce:40:85:
37:e4:f5:83:28:dc:fd:2c:b2:74:f1:6d:c5:e9:ed:6f:64:ad:
73:10:c7:a6:70:4f:a1:aa:d3:36:44:99:ec:0a:8c:88:13:92:
5b:4b:ef:80:b1:62:be:6d:b8:a9:f0:6e:d2:83:2e:3f:b6:db:
7d:4e:a7:e2:de:c0:5a:7e:98:a2:02:94:26:b5:1f:7d:1b:ec:
2e:b8:2b:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:19:51 2025 by rpki-client