Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/299fe7-9ab7-473a-b62a-ab063938f1ce/1/zQzH_YiYsPffS53wuZMZvLKewkM.mft
File: zQzH_YiYsPffS53wuZMZvLKewkM.mft (raw, json)
Hash identifier: Yw+BteKCu8oe00+HRfYxOP4FqNXhvhDP429URJM5K5w=
Subject key identifier: DA:76:A8:05:C5:CC:50:91:51:78:02:E6:9C:E1:C0:47:FF:AD:4D:C8
Authority key identifier: CD:0C:C7:FD:88:98:B0:F7:DF:4B:9D:F0:B9:93:19:BC:B2:9E:C2:43
Certificate issuer: /CN=cd0cc7fd8898b0f7df4b9df0b99319bcb29ec243
Certificate serial: 019A5006EB73A340C6E9E7F3207C2D3D26C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zQzH_YiYsPffS53wuZMZvLKewkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/299fe7-9ab7-473a-b62a-ab063938f1ce/1/zQzH_YiYsPffS53wuZMZvLKewkM.mft
Manifest number: 1711
Signing time: Tue 04 Nov 2025 18:00:21 +0000
Manifest this update: Tue 04 Nov 2025 18:00:21 +0000
Manifest next update: Wed 05 Nov 2025 18:00:21 +0000
Files and hashes: 1: Wkz81xMUDLClFehnNcO08jklh9k.roa (hash: BKlpXBQEP/op0lp2TcMqqMdmqdUhy61w00wNP+uB+Zw=)
2: zQzH_YiYsPffS53wuZMZvLKewkM.crl (hash: TNt9EYDZlcALXr995tay3YZJRzlwXG2qrNTP8jTDbtc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/299fe7-9ab7-473a-b62a-ab063938f1ce/1/zQzH_YiYsPffS53wuZMZvLKewkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/299fe7-9ab7-473a-b62a-ab063938f1ce/1/zQzH_YiYsPffS53wuZMZvLKewkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/zQzH_YiYsPffS53wuZMZvLKewkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:06:eb:73:a3:40:c6:e9:e7:f3:20:7c:2d:3d:26:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd0cc7fd8898b0f7df4b9df0b99319bcb29ec243
Validity
Not Before: Nov 4 18:00:21 2025 GMT
Not After : Nov 5 18:00:21 2025 GMT
Subject: CN=da76a805c5cc5091517802e69ce1c047ffad4dc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f0:a7:52:d9:c6:dc:75:a8:af:27:33:2e:ac:
b2:e8:b1:f0:b4:c9:c2:d9:06:29:bd:ab:cb:b6:91:
77:5c:00:06:53:8f:1c:22:cf:cc:92:8b:c7:7c:af:
13:d9:25:62:fa:ee:2d:44:09:e7:af:29:dd:50:05:
44:72:6e:18:7d:5d:d3:58:00:4e:5c:47:92:bb:70:
84:14:35:19:8b:5c:df:ab:6f:e1:e8:b6:dc:93:67:
d4:30:6e:24:7f:69:af:6b:73:00:56:db:86:72:dd:
81:56:e1:1a:5a:21:3e:9d:e9:ee:9d:89:a3:0d:f1:
6b:38:d3:c4:79:6a:92:07:cb:31:d2:b0:2f:60:9b:
a9:c9:df:f3:c2:ca:54:2e:37:09:c7:fb:3f:ce:3e:
f6:51:1a:ef:67:a5:48:6b:08:c2:e9:c1:9a:b6:b7:
5a:bf:31:45:fa:e8:fd:86:12:e8:0b:e2:1d:29:46:
84:2c:a5:db:cb:6f:b5:e0:3a:1e:d1:84:bd:d3:ce:
65:1a:76:f0:27:ae:5d:49:98:9a:b1:c9:20:8c:4f:
d8:ed:cf:7b:00:50:91:8b:c9:6f:62:f8:b2:ab:d8:
36:83:fb:1c:ec:d7:99:47:d0:82:36:53:66:8c:d7:
52:be:2e:3b:60:8a:82:dd:44:b4:45:ba:96:49:bc:
83:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:76:A8:05:C5:CC:50:91:51:78:02:E6:9C:E1:C0:47:FF:AD:4D:C8
X509v3 Authority Key Identifier:
keyid:CD:0C:C7:FD:88:98:B0:F7:DF:4B:9D:F0:B9:93:19:BC:B2:9E:C2:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQzH_YiYsPffS53wuZMZvLKewkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/299fe7-9ab7-473a-b62a-ab063938f1ce/1/zQzH_YiYsPffS53wuZMZvLKewkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/299fe7-9ab7-473a-b62a-ab063938f1ce/1/zQzH_YiYsPffS53wuZMZvLKewkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:53:0f:6c:c2:0f:38:33:79:75:92:2c:e9:75:f0:6a:12:e2:
0c:2e:58:5a:e9:2a:a3:14:1a:93:68:92:59:1c:b4:ef:05:31:
77:17:4b:fc:f6:62:56:ee:78:74:fc:0b:6d:a9:38:a9:9a:de:
59:36:9c:c7:22:82:94:df:09:cc:ea:27:63:48:43:b3:1b:b5:
eb:0f:0e:19:2b:81:3a:e5:e1:e4:b0:ff:91:31:31:57:5f:ee:
f3:93:b8:6c:80:52:12:a3:ab:a4:50:39:71:12:31:41:b4:d5:
48:d2:62:bc:47:ea:f4:de:f8:d6:43:eb:41:83:a9:ce:26:67:
a3:73:12:7c:77:51:36:c5:62:95:a6:32:75:c7:e4:f2:1a:6f:
2f:8f:46:29:9d:e4:4f:eb:f0:1a:24:5c:c7:62:e0:91:5c:0d:
ef:e0:04:8d:a1:f7:8e:c7:5f:67:2b:27:4b:09:c2:99:57:2d:
5d:79:3c:67:a6:8f:80:1e:c0:e0:14:ee:1a:73:62:fc:68:4f:
4f:96:52:64:54:14:ae:7e:af:5d:bc:3a:b6:3e:0f:94:23:09:
ed:39:e3:f6:5c:16:59:62:04:6b:10:a9:65:e7:97:9c:82:a5:
47:0e:78:06:c5:22:2a:83:84:f6:4c:80:b7:99:d6:ee:c3:aa:
c6:9b:90:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:41:11 2025 by rpki-client