Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/31dc10-5663-4555-a806-4e9305caf1a3/1/ZCOaUQhPGytcaEZDysFGIXx5-NE.mft
File: ZCOaUQhPGytcaEZDysFGIXx5-NE.mft (raw, json)
Hash identifier: Nrpe0o5wclIsaLgUSK8zeUsdjrcfDaxV2VufOK8M30c=
Subject key identifier: 80:BC:73:F8:AB:E9:00:22:07:1E:24:F4:73:C0:B4:32:76:5D:B4:A2
Authority key identifier: 64:23:9A:51:08:4F:1B:2B:5C:68:46:43:CA:C1:46:21:7C:79:F8:D1
Certificate issuer: /CN=64239a51084f1b2b5c684643cac146217c79f8d1
Certificate serial: 019A4F61DC66E7CEDA0F56890B24CF4FED54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZCOaUQhPGytcaEZDysFGIXx5-NE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/31dc10-5663-4555-a806-4e9305caf1a3/1/ZCOaUQhPGytcaEZDysFGIXx5-NE.mft
Manifest number: 0A48
Signing time: Tue 04 Nov 2025 15:00:04 +0000
Manifest this update: Tue 04 Nov 2025 15:00:04 +0000
Manifest next update: Wed 05 Nov 2025 15:00:04 +0000
Files and hashes: 1: 1WnsILYxjGfpft24w4cU0Z9HVy0.roa (hash: mXH7nwV2vIU6tKBb8bErNfD249HtR3Br3nGu9VJRl4A=)
2: ZCOaUQhPGytcaEZDysFGIXx5-NE.crl (hash: 71Hxu3h97KZCxsQ9SaNnq5CoZ+WP523eeZLTmZns60g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/31dc10-5663-4555-a806-4e9305caf1a3/1/ZCOaUQhPGytcaEZDysFGIXx5-NE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/31dc10-5663-4555-a806-4e9305caf1a3/1/ZCOaUQhPGytcaEZDysFGIXx5-NE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZCOaUQhPGytcaEZDysFGIXx5-NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:61:dc:66:e7:ce:da:0f:56:89:0b:24:cf:4f:ed:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64239a51084f1b2b5c684643cac146217c79f8d1
Validity
Not Before: Nov 4 15:00:04 2025 GMT
Not After : Nov 5 15:00:04 2025 GMT
Subject: CN=80bc73f8abe90022071e24f473c0b432765db4a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:89:7c:eb:64:8e:03:fa:66:c1:3a:61:44:34:
6c:b5:12:ee:17:11:f1:1d:66:67:ef:5a:d3:cd:53:
42:a8:66:89:b5:a4:f3:52:e2:e0:00:83:97:76:71:
b4:33:46:e3:58:ad:c8:dd:2e:3e:cf:11:5c:f3:e7:
00:aa:a5:e0:0c:0a:37:26:fe:1a:6a:bd:97:6c:0c:
55:6c:f0:52:9f:44:6a:bc:7f:75:78:ea:ce:a9:8d:
35:2b:05:0a:dc:a0:0b:15:19:dd:f9:ab:28:0b:af:
84:66:9b:c7:f4:97:a6:80:77:39:a4:db:1e:64:a9:
c9:44:c1:93:73:8a:ef:7a:9e:f3:0b:62:17:f5:c2:
9d:ad:ef:ce:5d:10:af:a2:53:16:fb:f0:85:33:9d:
26:8c:ad:33:46:26:bc:65:37:15:fe:75:af:5c:e0:
14:dd:f5:8c:a4:12:f5:49:d6:d3:e1:66:4e:5b:e2:
8b:88:90:54:19:23:39:8f:81:db:11:30:e7:c6:b9:
f0:eb:6e:1a:17:78:c7:03:4f:cf:3a:f5:31:7c:39:
d9:2d:59:fc:af:6a:57:ca:85:31:a8:f2:20:91:12:
f0:ec:e8:e9:03:93:44:48:cd:68:7a:47:21:85:36:
48:17:87:ac:cd:e2:b3:1e:e4:09:58:a1:f2:d1:92:
a9:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:BC:73:F8:AB:E9:00:22:07:1E:24:F4:73:C0:B4:32:76:5D:B4:A2
X509v3 Authority Key Identifier:
keyid:64:23:9A:51:08:4F:1B:2B:5C:68:46:43:CA:C1:46:21:7C:79:F8:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZCOaUQhPGytcaEZDysFGIXx5-NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/31dc10-5663-4555-a806-4e9305caf1a3/1/ZCOaUQhPGytcaEZDysFGIXx5-NE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/31dc10-5663-4555-a806-4e9305caf1a3/1/ZCOaUQhPGytcaEZDysFGIXx5-NE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:6d:37:75:f3:57:64:ae:3d:16:75:77:85:e3:79:8d:3b:ad:
6b:34:cb:fb:88:51:e2:8b:38:10:ed:6b:e9:13:a1:3c:82:a9:
b5:a7:e1:3d:33:aa:6a:13:70:67:ec:a8:17:4f:96:92:0a:3e:
a1:2c:28:7c:27:49:f8:2c:b5:44:b7:42:62:50:eb:72:48:e0:
51:cd:e4:da:70:2e:03:3c:6d:8c:3c:d8:32:3f:87:25:3a:84:
e0:85:c9:09:51:13:00:af:f9:10:cd:30:04:6d:39:12:34:4f:
ec:f8:e1:61:d4:2c:c3:f6:9d:1d:38:8b:90:59:5e:15:40:2a:
7a:d3:9a:62:f1:dd:04:1e:40:c2:20:b8:80:7c:c6:3d:03:09:
7b:84:f3:cc:ce:10:7a:6d:e6:24:02:d0:ad:c0:a9:7f:3a:4c:
3b:16:ff:8b:f2:09:41:8b:4a:e5:46:35:a4:5f:3c:f3:35:a1:
fb:9b:85:73:46:a6:92:f4:a8:c7:51:4a:73:b8:36:29:d4:c1:
6d:92:8d:a4:4f:7a:de:d1:8e:6b:3d:27:1f:fe:0f:eb:18:d3:
f1:23:d9:3a:7e:13:6e:9a:6b:22:1c:9f:e7:29:0f:2d:f5:42:
35:04:70:bb:6e:5c:9f:15:9b:ad:f0:a8:29:0f:85:4d:e1:e5:
73:38:9d:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:18:04 2025 by rpki-client