Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/73e504-b7bb-4ff8-bad8-b79552e700c5/1/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.mft
File: Z7O1i0UiOQAerC4iG6VsOv7Xp5A.mft (raw, json)
Hash identifier: y8zqkQ8cCdDOkqLWd9krwNC8fE3yznMk5Iu+tdcSPaY=
Subject key identifier: 57:D4:35:9D:0D:EB:59:DA:80:B3:5C:D1:5F:B6:C7:5D:57:E2:A7:70
Authority key identifier: 67:B3:B5:8B:45:22:39:00:1E:AC:2E:22:1B:A5:6C:3A:FE:D7:A7:90
Certificate issuer: /CN=67b3b58b452239001eac2e221ba56c3afed7a790
Certificate serial: 019A4DAB259D3011B39CB086BF9E81515292
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/73e504-b7bb-4ff8-bad8-b79552e700c5/1/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.mft
Manifest number: 0E02
Signing time: Tue 04 Nov 2025 07:00:53 +0000
Manifest this update: Tue 04 Nov 2025 07:00:53 +0000
Manifest next update: Wed 05 Nov 2025 07:00:53 +0000
Files and hashes: 1: AXUdeaKjWR6aO2hmOp1QpAZAT1I.roa (hash: jHy+WZea/KY2LIPLNfFyrSljh52WzofvhmuIGDrREzM=)
2: YLIoRJYq6MERaFZ7IGLqUkZ2WNA.roa (hash: FDzee6XqGxeVxnvKkrH/BVWvy6+j3Z62PPnSpcuiI80=)
3: Z7O1i0UiOQAerC4iG6VsOv7Xp5A.crl (hash: 3O3aFD5imjAqzPWgFtyj0zOzb4Jx5jMuaxckhyql65o=)
4: zx2sQUv3rsJGXAZABCst4_xZkOQ.roa (hash: FBqifBeUX2hPnOiisT6KsJiWdU/gan88BUTxXJkwpMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/73e504-b7bb-4ff8-bad8-b79552e700c5/1/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/73e504-b7bb-4ff8-bad8-b79552e700c5/1/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:ab:25:9d:30:11:b3:9c:b0:86:bf:9e:81:51:52:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67b3b58b452239001eac2e221ba56c3afed7a790
Validity
Not Before: Nov 4 07:00:53 2025 GMT
Not After : Nov 5 07:00:53 2025 GMT
Subject: CN=57d4359d0deb59da80b35cd15fb6c75d57e2a770
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:dd:2d:65:cd:d4:90:ad:13:ca:b0:23:ed:c8:
b8:2c:cf:8e:f6:f9:ff:fe:8a:c3:92:8a:f9:3d:f0:
76:d1:1c:b7:0b:b1:e7:e0:e3:18:ad:fc:c4:e7:75:
ef:93:cf:d4:93:8c:41:e8:11:51:d8:2f:e8:8b:e1:
c2:12:af:bd:25:67:72:07:8e:dc:f1:fa:40:95:ef:
30:96:60:03:40:8f:78:b2:35:18:06:5e:c5:c4:cc:
9b:66:88:ec:c0:71:d2:34:bf:7a:4c:68:4e:a1:85:
10:39:a7:33:e4:18:9d:cc:75:e0:77:1e:20:57:34:
57:8a:4f:89:31:30:90:cf:bb:a6:e2:3a:87:6f:68:
01:b2:91:92:45:1f:c2:39:41:d9:d5:82:46:34:ff:
c9:5c:74:e4:26:a6:69:2d:f2:ae:53:27:b1:8e:3c:
5b:5c:e7:1f:07:79:3e:50:da:fc:10:e6:25:03:d0:
10:6e:28:6e:30:87:98:f0:eb:19:ff:4b:7f:45:cd:
60:9c:13:3a:29:83:6e:8a:c0:b1:4e:50:77:22:df:
c1:a5:2d:64:bc:c0:09:2e:0f:c7:ff:56:e0:d9:a8:
34:bd:26:e8:68:39:61:21:fe:ef:14:0e:89:51:43:
08:c4:6e:3c:e9:53:b3:7b:54:e0:a6:dc:06:52:39:
6a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:D4:35:9D:0D:EB:59:DA:80:B3:5C:D1:5F:B6:C7:5D:57:E2:A7:70
X509v3 Authority Key Identifier:
keyid:67:B3:B5:8B:45:22:39:00:1E:AC:2E:22:1B:A5:6C:3A:FE:D7:A7:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/73e504-b7bb-4ff8-bad8-b79552e700c5/1/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/73e504-b7bb-4ff8-bad8-b79552e700c5/1/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:c3:7f:b1:e5:0b:26:9d:20:4b:83:d4:69:c7:25:82:70:29:
61:3b:4f:11:6c:67:1a:8d:8d:71:d4:6f:b5:d7:59:9b:e9:a2:
43:d0:a6:2e:38:b3:df:32:40:69:8c:e2:25:8d:b5:68:b5:5f:
87:83:3c:3b:03:c3:37:6e:32:fe:79:4d:58:3a:91:b5:ee:29:
cb:b8:6f:44:08:25:ba:cc:fa:f8:44:a0:4f:ca:2a:29:1f:0f:
f9:b0:21:67:3b:75:de:af:fb:f6:6f:21:10:c3:a2:dd:ed:2a:
2f:d7:d9:35:17:41:ba:c5:ed:04:4b:7b:ed:aa:5e:b5:3f:b1:
91:b3:7d:53:36:47:0f:fa:08:e1:b1:56:5d:a6:bc:65:04:e2:
17:0a:ad:23:51:df:4f:84:ba:37:38:28:c5:4b:09:ee:88:07:
60:00:4a:da:b0:11:22:a3:cc:c5:7d:52:09:34:82:9f:4c:a6:
ec:c7:ea:e0:fd:57:5d:83:ff:50:c6:29:a0:0b:d4:58:1c:73:
fb:33:e9:29:4f:ea:14:c1:c5:84:8f:13:0d:d7:dd:92:f0:95:
5b:28:f1:e2:e6:5a:b5:a4:9d:ac:90:39:f4:d1:9f:b0:a7:91:
c8:21:20:96:72:27:48:57:6f:63:b8:e2:63:b3:db:1f:b7:dc:
53:fb:e8:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:47:09 2025 by rpki-client