Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/34acf4-747f-45fe-8129-402f1fb848cf/1/zOV9yCNN9fWdZ_3GhWuyYucZP1I.mft
File: zOV9yCNN9fWdZ_3GhWuyYucZP1I.mft (raw, json)
Hash identifier: b7tIhlPyMCvKTEvqv0B61+bWNJAiuIjajXk6Ip12+ME=
Subject key identifier: 33:2D:DB:35:DC:34:2B:A3:BA:C7:8E:49:3E:23:85:01:A8:43:10:EF
Authority key identifier: CC:E5:7D:C8:23:4D:F5:F5:9D:67:FD:C6:85:6B:B2:62:E7:19:3F:52
Certificate issuer: /CN=cce57dc8234df5f59d67fdc6856bb262e7193f52
Certificate serial: 019A4DE20780F88147B1F976030358AB574F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zOV9yCNN9fWdZ_3GhWuyYucZP1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/34acf4-747f-45fe-8129-402f1fb848cf/1/zOV9yCNN9fWdZ_3GhWuyYucZP1I.mft
Manifest number: 0ED8
Signing time: Tue 04 Nov 2025 08:00:49 +0000
Manifest this update: Tue 04 Nov 2025 08:00:49 +0000
Manifest next update: Wed 05 Nov 2025 08:00:49 +0000
Files and hashes: 1: F8CkVi3Azk4IP8l0xbj9A7utWT4.roa (hash: E5Iv0quJqPnudHATWcToHknlwXYMpaxnHvHdqASmVUA=)
2: zOV9yCNN9fWdZ_3GhWuyYucZP1I.crl (hash: UeM/3LdW7bFHUJKRD7Xlmt+EGRMda+1af43HFBganeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/34acf4-747f-45fe-8129-402f1fb848cf/1/zOV9yCNN9fWdZ_3GhWuyYucZP1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/34acf4-747f-45fe-8129-402f1fb848cf/1/zOV9yCNN9fWdZ_3GhWuyYucZP1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/zOV9yCNN9fWdZ_3GhWuyYucZP1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e2:07:80:f8:81:47:b1:f9:76:03:03:58:ab:57:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cce57dc8234df5f59d67fdc6856bb262e7193f52
Validity
Not Before: Nov 4 08:00:49 2025 GMT
Not After : Nov 5 08:00:49 2025 GMT
Subject: CN=332ddb35dc342ba3bac78e493e238501a84310ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:db:58:69:db:92:14:01:75:4d:ca:3e:fc:bc:
59:1c:ca:70:f1:a1:3f:3c:2c:10:9d:a2:dc:5d:bb:
79:3d:df:d9:bf:25:cc:7f:73:ad:b8:d4:4d:84:f4:
54:b9:1f:c5:bf:bf:88:2f:c6:e2:c2:1c:69:41:5f:
66:cb:3f:04:be:bc:72:7b:c0:29:4b:b5:a9:9e:95:
24:b8:f5:77:97:7f:b0:7a:a2:80:04:05:fe:39:55:
b4:d8:67:60:0e:06:b3:ae:c7:df:a8:20:5b:35:91:
ef:41:39:74:84:5d:55:99:93:90:60:b2:be:de:49:
08:79:93:2a:03:62:04:f2:55:e0:ea:d3:c3:c7:7a:
00:f9:fa:dd:a7:89:a1:3b:99:a7:54:5b:f8:84:9b:
f1:bf:9a:15:05:b9:6e:1a:2f:d9:86:c8:29:1a:41:
cf:9c:ff:8d:ac:e4:9c:24:5a:c0:e7:b5:b0:3a:e4:
e9:fa:9d:6b:11:f6:15:0b:a2:64:e4:9c:07:5e:2c:
f0:88:54:55:d3:f7:b3:7b:0f:c4:3a:8b:e1:23:c6:
e5:5d:c8:e6:66:1f:6a:26:44:2e:e4:5c:0f:81:74:
9e:7f:53:67:8d:0e:cf:4b:dc:df:9e:85:56:5d:bd:
f7:c4:65:71:6d:fa:08:f9:7a:71:f4:e3:b7:83:48:
a8:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:2D:DB:35:DC:34:2B:A3:BA:C7:8E:49:3E:23:85:01:A8:43:10:EF
X509v3 Authority Key Identifier:
keyid:CC:E5:7D:C8:23:4D:F5:F5:9D:67:FD:C6:85:6B:B2:62:E7:19:3F:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zOV9yCNN9fWdZ_3GhWuyYucZP1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/34acf4-747f-45fe-8129-402f1fb848cf/1/zOV9yCNN9fWdZ_3GhWuyYucZP1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/34acf4-747f-45fe-8129-402f1fb848cf/1/zOV9yCNN9fWdZ_3GhWuyYucZP1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:c4:8d:c7:3a:6f:2d:c4:d2:44:11:8f:73:51:c1:10:09:80:
cd:88:44:0e:52:ad:c0:92:89:e8:a8:58:d5:79:f1:7d:cc:c4:
b6:ed:fe:50:dd:9f:91:3c:92:93:65:12:55:55:c6:28:bd:c3:
83:db:e3:08:dc:9b:08:fc:18:7c:f9:24:0b:00:35:3e:43:91:
0c:49:f8:9c:65:94:b8:86:ba:31:9a:01:b3:5c:f9:41:cd:20:
0b:b8:1c:3b:ef:73:d2:8e:2e:1c:b5:ba:f0:c9:16:f8:d4:9f:
98:ab:aa:a8:31:5a:ec:73:62:d3:48:48:b5:19:53:a0:7a:61:
3c:da:02:fa:d2:1b:3a:b1:ed:c0:e9:d7:cf:fa:57:1d:f0:db:
1a:76:b9:2b:c4:bd:05:8a:6f:be:eb:04:4f:01:e6:3b:7d:72:
58:86:68:69:d0:58:dc:e3:8f:74:a6:73:df:79:b8:7b:3a:ca:
d5:38:e2:ba:34:24:50:00:bf:e2:a0:5b:c6:70:e4:c6:34:bf:
89:a2:51:1d:c3:03:cb:a0:6d:50:cf:af:53:db:37:81:b3:6a:
51:22:6f:2e:2a:c5:07:d8:b5:bf:64:92:81:27:fa:b1:7e:3e:
f8:60:c3:c1:16:16:8b:89:44:f0:eb:6f:f5:b4:34:5d:02:2c:
67:f2:c3:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:18:02 2025 by rpki-client