Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/ca0c3b-a969-4847-bd02-66643e0663df/1/Z0FcuiLjMa2pH_TcZojl-gr0V2k.mft
File: Z0FcuiLjMa2pH_TcZojl-gr0V2k.mft (raw, json)
Hash identifier: C+E4tg5mNoE/JSkf/Ifqa+vEdfV/2H+wRSr30ihalQQ=
Subject key identifier: 51:02:BB:2F:33:9D:51:E3:4F:13:41:62:CF:9C:01:82:9F:84:12:B2
Authority key identifier: 67:41:5C:BA:22:E3:31:AD:A9:1F:F4:DC:66:88:E5:FA:0A:F4:57:69
Certificate issuer: /CN=67415cba22e331ada91ff4dc6688e5fa0af45769
Certificate serial: 019A5006E208936DF1EBCC0A9FFE2D74FB00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0FcuiLjMa2pH_TcZojl-gr0V2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0c3b-a969-4847-bd02-66643e0663df/1/Z0FcuiLjMa2pH_TcZojl-gr0V2k.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 18:00:19 +0000
Manifest this update: Tue 04 Nov 2025 18:00:19 +0000
Manifest next update: Wed 05 Nov 2025 18:00:19 +0000
Files and hashes: 1: 2rjfYwu41EDGb0WtR0lRAzBBGyA.roa (hash: 30Qgx7xaxGQYFQO1NrnbCAkFDKPGGACEBi1o6yALtbk=)
2: Z0FcuiLjMa2pH_TcZojl-gr0V2k.crl (hash: I6blOvxk9gaAvoVASHoPdkt1YNHIUc2vHo3SYHuXsg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0c3b-a969-4847-bd02-66643e0663df/1/Z0FcuiLjMa2pH_TcZojl-gr0V2k.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0c3b-a969-4847-bd02-66643e0663df/1/Z0FcuiLjMa2pH_TcZojl-gr0V2k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z0FcuiLjMa2pH_TcZojl-gr0V2k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:06:e2:08:93:6d:f1:eb:cc:0a:9f:fe:2d:74:fb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67415cba22e331ada91ff4dc6688e5fa0af45769
Validity
Not Before: Nov 4 18:00:19 2025 GMT
Not After : Nov 5 18:00:19 2025 GMT
Subject: CN=5102bb2f339d51e34f134162cf9c01829f8412b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:3c:59:77:7b:c4:ce:98:f6:16:2b:45:7b:a8:
fc:d4:fd:0e:ba:7f:ed:5d:48:df:0d:cb:24:08:4f:
cb:9b:e3:10:05:dc:d1:bf:f7:5c:4f:44:87:f8:9c:
53:cf:ef:24:b8:78:06:3f:d4:f3:34:84:06:90:e3:
bc:9e:de:47:3b:37:f0:75:82:a5:3e:86:44:af:c5:
83:f3:4e:a4:35:7c:6a:90:ef:30:d3:ed:43:04:ed:
b4:c1:8e:49:a4:fa:9c:71:29:f8:a3:5b:ca:aa:a9:
87:c9:09:dc:5a:45:5b:ce:e6:3a:3a:85:42:9f:77:
ab:b7:c0:3a:72:f7:e7:ff:b1:22:1e:5a:b6:39:35:
f6:51:ef:d6:ac:9a:32:d6:87:18:3c:fa:9a:a3:91:
dc:0f:ef:ab:69:79:5a:e2:30:92:a5:e7:95:14:e5:
66:64:4e:90:b6:9f:9b:01:7b:d6:36:e8:f5:cc:19:
c2:88:2f:38:66:3d:47:ba:29:80:0f:8e:96:1a:bc:
53:09:74:0d:9f:8b:22:6a:39:63:d4:55:77:da:e4:
4d:bc:1d:b1:ac:a5:c2:ab:be:f1:41:51:f8:f7:66:
65:aa:e3:e4:b4:74:de:48:51:16:40:1f:f7:8a:42:
ef:4c:0a:5f:89:90:61:4c:82:5d:c9:e0:d7:c7:5d:
6a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:02:BB:2F:33:9D:51:E3:4F:13:41:62:CF:9C:01:82:9F:84:12:B2
X509v3 Authority Key Identifier:
keyid:67:41:5C:BA:22:E3:31:AD:A9:1F:F4:DC:66:88:E5:FA:0A:F4:57:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0FcuiLjMa2pH_TcZojl-gr0V2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0c3b-a969-4847-bd02-66643e0663df/1/Z0FcuiLjMa2pH_TcZojl-gr0V2k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0c3b-a969-4847-bd02-66643e0663df/1/Z0FcuiLjMa2pH_TcZojl-gr0V2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:14:58:4f:49:2a:69:24:2e:83:88:75:db:3a:cb:18:70:d7:
47:fa:f2:6b:35:9f:0f:f3:ca:a5:01:99:2c:08:84:02:67:d5:
93:83:8c:24:80:8f:c0:60:a0:22:92:10:29:06:e0:64:9a:7e:
d4:c2:25:f2:78:86:74:76:31:5e:ce:60:73:a4:cf:50:20:a0:
35:95:b0:4b:1f:3b:82:48:62:96:31:23:69:ca:cb:df:1a:9c:
c0:85:85:9d:e6:03:b9:6a:75:28:ed:98:04:6a:9f:04:d0:fb:
79:0c:cf:a2:7a:20:f8:f3:b5:26:25:4d:21:39:40:76:da:e9:
0f:31:d8:4d:43:b0:a3:d1:f2:a8:9a:7d:f8:1f:28:ac:73:13:
8a:97:19:32:d8:ab:b2:7c:3a:22:12:52:bd:9d:b5:5c:1c:6c:
11:e2:48:2f:09:be:f6:02:4d:c1:25:ab:fc:d9:9f:f7:82:0f:
f6:87:99:07:d9:e4:e0:3a:6c:c4:75:6b:f9:0d:d7:d4:2b:02:
e0:44:0a:83:79:25:29:01:19:df:bf:b2:a2:9c:01:22:82:3b:
90:b4:89:62:2e:84:6f:c4:6e:40:d2:a7:d3:a4:3d:59:0a:c7:
6f:9b:c9:2f:97:2b:35:9c:99:42:46:24:91:ec:3d:e8:f9:30:
45:33:be:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:40:56 2025 by rpki-client