Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/89291a-e6ce-40ce-8b49-16ffa114699c/1/RZnthOSyEcyLqokUl0E1T4hQ7w8.mft
File: RZnthOSyEcyLqokUl0E1T4hQ7w8.mft (raw, json)
Hash identifier: Av8JYzqm3GXlZnrLKwPRuSWFvzYxrO0kB0G6Id8KaZ0=
Subject key identifier: A3:13:1C:3C:39:EB:6B:44:A0:8D:44:2B:D1:16:74:EA:94:F0:BD:E6
Authority key identifier: 45:99:ED:84:E4:B2:11:CC:8B:AA:89:14:97:41:35:4F:88:50:EF:0F
Certificate issuer: /CN=4599ed84e4b211cc8baa89149741354f8850ef0f
Certificate serial: 019A4D05997BF1B1CD93E245BDB70B4474F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZnthOSyEcyLqokUl0E1T4hQ7w8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/89291a-e6ce-40ce-8b49-16ffa114699c/1/RZnthOSyEcyLqokUl0E1T4hQ7w8.mft
Manifest number: 09CE
Signing time: Tue 04 Nov 2025 04:00:03 +0000
Manifest this update: Tue 04 Nov 2025 04:00:03 +0000
Manifest next update: Wed 05 Nov 2025 04:00:03 +0000
Files and hashes: 1: 1-TNKHUQBd0JEmyJIvaoUUde-kRY.roa (hash: G2e9u8Y6Td6qmoghBsuFWq6jIrLhCoLM2r2ooj9I44k=)
2: RZnthOSyEcyLqokUl0E1T4hQ7w8.crl (hash: DRWpc1yrRD8b/RBPzu+0ET5VomaijBncTwxOZCNoENU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/89291a-e6ce-40ce-8b49-16ffa114699c/1/RZnthOSyEcyLqokUl0E1T4hQ7w8.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/89291a-e6ce-40ce-8b49-16ffa114699c/1/RZnthOSyEcyLqokUl0E1T4hQ7w8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RZnthOSyEcyLqokUl0E1T4hQ7w8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:05:99:7b:f1:b1:cd:93:e2:45:bd:b7:0b:44:74:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4599ed84e4b211cc8baa89149741354f8850ef0f
Validity
Not Before: Nov 4 04:00:03 2025 GMT
Not After : Nov 5 04:00:03 2025 GMT
Subject: CN=a3131c3c39eb6b44a08d442bd11674ea94f0bde6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ed:fd:63:ad:bf:14:b1:f5:08:0f:e7:2a:c4:
f0:89:39:b9:55:90:07:16:39:a4:78:0c:01:22:ba:
3d:f4:51:14:de:d8:a1:61:0e:69:50:fb:f6:98:12:
eb:ab:a4:64:3a:9a:64:5d:3f:8e:92:24:74:ef:84:
cd:e0:f7:c4:e0:a1:ca:23:29:ae:bb:43:26:c2:8a:
26:0f:b1:08:35:f7:2a:fa:ec:35:8f:5f:34:a0:04:
2d:1e:b7:bf:49:3e:70:65:76:f9:84:19:80:27:f4:
db:a4:3d:76:a4:f1:44:5e:31:72:b5:01:ad:ad:7d:
7f:57:b5:72:2e:82:9f:bc:29:3e:a8:06:86:58:e6:
0e:a0:08:3f:31:05:65:dd:21:b7:50:b9:81:99:c9:
39:b4:ef:22:38:91:57:85:a0:ac:0d:99:e5:cc:45:
ef:86:e7:09:e6:22:fe:da:d7:70:9f:db:39:11:34:
11:14:39:78:27:1e:b3:f1:62:be:d3:b7:65:44:c8:
19:d9:af:d0:37:bc:ec:56:31:bd:9f:69:f2:ce:c4:
58:20:76:67:4d:41:be:e9:d4:7a:9a:ac:f8:55:4e:
e6:4c:e2:55:0c:e2:10:46:dd:b1:74:c1:1f:32:33:
6c:e6:6f:b7:cf:62:42:85:03:50:bb:cc:62:fd:9c:
5e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:13:1C:3C:39:EB:6B:44:A0:8D:44:2B:D1:16:74:EA:94:F0:BD:E6
X509v3 Authority Key Identifier:
keyid:45:99:ED:84:E4:B2:11:CC:8B:AA:89:14:97:41:35:4F:88:50:EF:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZnthOSyEcyLqokUl0E1T4hQ7w8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/89291a-e6ce-40ce-8b49-16ffa114699c/1/RZnthOSyEcyLqokUl0E1T4hQ7w8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/89291a-e6ce-40ce-8b49-16ffa114699c/1/RZnthOSyEcyLqokUl0E1T4hQ7w8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:00:67:1d:fa:c5:a8:1e:43:65:46:00:bc:93:2d:b0:8f:ef:
e0:53:4f:5b:a0:e2:2b:56:82:30:d5:fa:3f:f6:04:c1:a4:d7:
e2:0d:9c:74:5c:17:26:80:60:de:32:2c:f2:ea:fd:e1:ac:dc:
0a:48:14:0e:e1:ae:59:fc:d0:d9:38:00:55:10:19:2a:dd:99:
f3:44:00:d6:36:f0:43:09:74:3a:6d:7a:16:47:ed:3e:89:5e:
da:80:d9:94:5d:71:4d:b9:22:3f:30:b9:04:68:ee:f2:06:53:
9d:fa:2b:56:c8:28:ae:cf:cd:a0:ec:0a:7f:d9:5f:72:12:7c:
43:9f:4e:77:cb:d5:88:6f:83:b7:b9:5f:70:d4:b7:a2:f2:93:
fd:ab:b7:8f:5a:53:7c:ed:b2:ca:4f:bc:70:3a:81:54:67:53:
e0:78:d7:0a:c8:f3:21:b4:12:89:74:b0:fb:31:59:34:25:10:
bb:83:39:72:ea:20:90:f7:ff:6b:64:85:74:12:84:3b:c6:09:
03:7c:71:17:81:91:80:0a:b9:7f:ac:6f:9a:70:91:04:d1:0d:
7c:21:8d:a1:8f:57:13:9a:bb:e5:14:4d:a5:ed:04:41:fa:c0:
19:23:43:37:f0:a7:32:fd:2a:bf:ba:6b:9a:70:45:9e:64:5d:
28:64:39:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:46:58 2025 by rpki-client