Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/976925-2551-4b2b-900a-e111f322636a/1/z8TCrjOIRe_ngC3uwjTq4_e5XzE.mft
File: z8TCrjOIRe_ngC3uwjTq4_e5XzE.mft (raw, json)
Hash identifier: uFK27Wfn1zWeE0rM6pmnjwqCfdniU6rU3780jrq2BQ8=
Subject key identifier: BB:80:40:BA:D8:B4:7A:82:FE:6A:8C:1A:3F:A6:5E:44:99:0E:CF:32
Authority key identifier: CF:C4:C2:AE:33:88:45:EF:E7:80:2D:EE:C2:34:EA:E3:F7:B9:5F:31
Certificate issuer: /CN=cfc4c2ae338845efe7802deec234eae3f7b95f31
Certificate serial: 019A51BE82415E60986D665353B942315B1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8TCrjOIRe_ngC3uwjTq4_e5XzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/976925-2551-4b2b-900a-e111f322636a/1/z8TCrjOIRe_ngC3uwjTq4_e5XzE.mft
Manifest number: 0106
Signing time: Wed 05 Nov 2025 02:00:30 +0000
Manifest this update: Wed 05 Nov 2025 02:00:30 +0000
Manifest next update: Thu 06 Nov 2025 02:00:30 +0000
Files and hashes: 1: ay2UhLb9gVwOGFcPuT7u3po7GlY.roa (hash: Nc0lcUmEx3NfjhiK/z5Wio+LmihCcurK5+zIFKzkR30=)
2: z8TCrjOIRe_ngC3uwjTq4_e5XzE.crl (hash: GmyMa7v6NjCvh4klB91y927lX7M8qBetEfE+g8TWR5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/976925-2551-4b2b-900a-e111f322636a/1/z8TCrjOIRe_ngC3uwjTq4_e5XzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/976925-2551-4b2b-900a-e111f322636a/1/z8TCrjOIRe_ngC3uwjTq4_e5XzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/z8TCrjOIRe_ngC3uwjTq4_e5XzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 02:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:82:41:5e:60:98:6d:66:53:53:b9:42:31:5b:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfc4c2ae338845efe7802deec234eae3f7b95f31
Validity
Not Before: Nov 5 02:00:30 2025 GMT
Not After : Nov 6 02:00:30 2025 GMT
Subject: CN=bb8040bad8b47a82fe6a8c1a3fa65e44990ecf32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:33:85:38:41:5c:7e:0b:95:4a:24:d6:de:e4:
9c:23:d4:12:30:e1:ca:48:46:ff:52:54:3d:cc:97:
92:59:c9:0e:a2:f5:05:17:eb:08:8d:7e:e4:eb:ee:
99:50:86:15:ad:40:fc:88:5f:73:c8:7c:93:55:85:
19:35:3d:77:c3:16:68:49:11:c9:74:82:59:d9:4a:
bc:44:af:93:68:95:d8:26:0f:7e:ce:78:54:7d:16:
4d:0a:c5:83:09:fe:f0:91:22:f0:0e:9a:a0:fa:b7:
08:58:5b:8e:01:42:c9:a0:f7:ca:19:77:25:35:14:
3a:28:51:d6:59:f4:a0:1f:2f:4c:24:c5:cf:c7:4f:
7c:f1:1e:41:f3:46:c8:4f:59:49:1c:c2:01:d1:0b:
9a:10:9c:6f:31:72:0c:ff:27:2d:11:ef:ef:b4:00:
ad:e1:10:af:c6:7e:ad:46:c1:bf:cb:37:42:92:6b:
b7:70:55:20:5d:e4:1f:29:cb:7f:9d:e2:27:f5:f7:
66:f9:f7:74:ef:99:e1:c9:36:44:0e:34:58:75:b0:
19:a9:49:70:9a:5d:2a:cb:f7:43:e6:39:25:be:e1:
ec:78:a1:a5:5b:ef:25:c7:32:20:1d:90:90:1f:d6:
9f:b4:26:fb:db:b6:8b:e2:5e:b1:ca:9f:c0:2b:7f:
0b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:80:40:BA:D8:B4:7A:82:FE:6A:8C:1A:3F:A6:5E:44:99:0E:CF:32
X509v3 Authority Key Identifier:
keyid:CF:C4:C2:AE:33:88:45:EF:E7:80:2D:EE:C2:34:EA:E3:F7:B9:5F:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8TCrjOIRe_ngC3uwjTq4_e5XzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/976925-2551-4b2b-900a-e111f322636a/1/z8TCrjOIRe_ngC3uwjTq4_e5XzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/976925-2551-4b2b-900a-e111f322636a/1/z8TCrjOIRe_ngC3uwjTq4_e5XzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:8b:ce:e9:b9:c8:8f:66:9b:4e:da:f4:73:dc:2a:47:37:fd:
5d:71:aa:5e:b2:bc:53:0c:3f:68:ac:fc:1d:a4:69:40:e2:f9:
0b:3a:74:1c:e9:98:5c:0c:75:36:09:16:cb:a3:8b:4a:d9:ba:
3f:5f:34:7b:d8:dc:3e:95:01:30:4a:17:79:e9:68:cd:82:87:
8d:0a:46:4f:8a:43:1a:6e:f7:5a:54:5e:d9:8a:ff:46:da:dd:
82:bf:8e:e8:df:02:98:21:85:39:24:63:f7:79:2c:ed:c4:82:
84:7c:31:2c:77:a9:ac:d9:45:57:52:7d:63:5b:38:e0:ac:64:
61:dc:03:19:e6:77:ee:67:fe:30:9d:cb:d3:b4:26:a2:8d:43:
5c:bf:54:ce:79:39:bb:a7:4a:09:45:a8:77:2e:d9:0f:bb:81:
6d:49:b0:68:63:e4:23:e2:59:62:8f:15:22:2c:79:f9:89:5e:
47:42:be:e0:9a:44:15:ec:e7:db:db:6f:69:e0:72:c6:b2:b0:
68:71:6f:bd:4a:a9:ab:1c:66:0c:00:3e:38:25:16:14:9f:51:
68:8b:ed:4f:d1:eb:f5:0d:b0:9b:47:a5:9d:5c:c8:d4:1f:48:
06:1c:66:09:5e:74:d0:24:f0:23:68:55:0f:81:51:7f:ef:ad:
36:c4:d6:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:28:24 2025 by rpki-client