Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/zepK3ugLBlGc5A3T0T8oup9XWVc.mft
File: zepK3ugLBlGc5A3T0T8oup9XWVc.mft (raw, json)
Hash identifier: CoyXXAHRHRv24SBXh4JfY5rjTXiC8InYs3VK59xA4kE=
Subject key identifier: 3A:D9:81:B5:29:09:8E:B0:35:11:5D:49:3A:3E:E8:A3:F4:FF:6F:45
Authority key identifier: CD:EA:4A:DE:E8:0B:06:51:9C:E4:0D:D3:D1:3F:28:BA:9F:57:59:57
Certificate issuer: /CN=cdea4adee80b06519ce40dd3d13f28ba9f575957
Certificate serial: 019A4D73A8E3BB6EFE6D166CE5E01BB6FE99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zepK3ugLBlGc5A3T0T8oup9XWVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/zepK3ugLBlGc5A3T0T8oup9XWVc.mft
Manifest number: 141C
Signing time: Tue 04 Nov 2025 06:00:16 +0000
Manifest this update: Tue 04 Nov 2025 06:00:16 +0000
Manifest next update: Wed 05 Nov 2025 06:00:16 +0000
Files and hashes: 1: O0pEQEzhWfGPoGN9_GYQs2aEBkA.roa (hash: SE3IDQJtlW1HyYxGFEmw6qC9BXcob4+h3FZns0TYNu4=)
2: sVJ8yb4YMNZC8SR4z31lotsJRHA.roa (hash: +zzqZHb3MjdSyZ19xzKBnWrbrHGVz+kt5/OJZPLUdEA=)
3: zepK3ugLBlGc5A3T0T8oup9XWVc.crl (hash: 7IjL3i5rPzjIZUWoQxNiN84q0h2L/uJAOqyXXl0yPJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/zepK3ugLBlGc5A3T0T8oup9XWVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/zepK3ugLBlGc5A3T0T8oup9XWVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zepK3ugLBlGc5A3T0T8oup9XWVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:a8:e3:bb:6e:fe:6d:16:6c:e5:e0:1b:b6:fe:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdea4adee80b06519ce40dd3d13f28ba9f575957
Validity
Not Before: Nov 4 06:00:16 2025 GMT
Not After : Nov 5 06:00:16 2025 GMT
Subject: CN=3ad981b529098eb035115d493a3ee8a3f4ff6f45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:79:f8:3a:59:96:d6:a2:e3:b3:ce:d8:c7:de:
83:a5:52:b6:82:c2:67:00:05:23:93:d5:10:d5:c7:
8d:f8:e7:da:87:45:5c:4a:b4:00:43:08:7e:b5:ba:
ce:d5:08:7d:cf:1d:49:cf:3f:ec:ac:ca:23:c5:57:
ab:d8:d5:c4:2a:fb:07:72:a3:04:2b:2b:5f:a1:f8:
72:93:a4:70:14:78:29:56:22:37:1f:72:3a:4d:8c:
44:5c:d2:5e:c3:fd:f2:13:93:a4:b3:58:c8:3d:9a:
b3:7e:60:9e:e0:91:8c:ac:43:f1:87:c9:18:66:7c:
d6:29:61:3f:63:ce:ca:2a:a2:46:d5:7f:04:0e:dc:
e8:76:7e:9f:85:6e:d7:20:d2:ee:d0:8e:cc:44:3d:
50:c9:be:0f:b2:6c:ea:0c:6b:d6:d6:c7:db:f3:53:
94:ba:80:07:c2:38:1a:44:68:4a:f1:7f:11:bc:90:
07:7e:36:de:92:6f:cc:c9:e0:e4:9b:77:d4:a1:2c:
ab:77:3c:b5:14:4a:96:fd:c4:12:5c:ed:9e:10:89:
b1:06:1b:3a:c7:cc:fa:07:e1:b5:a4:0c:55:f8:7a:
3b:59:e2:5a:74:7a:42:6c:69:cf:f4:a7:5d:ab:a2:
34:74:85:3f:c6:68:e3:51:d3:75:5d:79:b3:56:f8:
30:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:D9:81:B5:29:09:8E:B0:35:11:5D:49:3A:3E:E8:A3:F4:FF:6F:45
X509v3 Authority Key Identifier:
keyid:CD:EA:4A:DE:E8:0B:06:51:9C:E4:0D:D3:D1:3F:28:BA:9F:57:59:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zepK3ugLBlGc5A3T0T8oup9XWVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/zepK3ugLBlGc5A3T0T8oup9XWVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/zepK3ugLBlGc5A3T0T8oup9XWVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:c2:2d:cc:44:0d:f0:0f:4a:43:78:e4:ad:0b:b3:8d:3d:44:
6b:cc:e4:7f:f7:b6:35:bd:62:dd:ed:a8:e2:e0:9c:08:ea:de:
d5:ff:94:bb:81:64:64:77:30:d6:ec:b9:d5:8e:bf:3d:c8:43:
2e:94:b1:e8:43:be:51:2f:f6:29:5d:c7:50:7c:94:9a:dc:ba:
2b:82:7c:2a:67:92:63:b1:82:8d:20:78:07:c6:ae:fd:c5:88:
f2:3e:f0:1e:28:60:0b:61:11:f2:89:64:0f:18:0f:bc:41:ce:
b1:51:c0:2a:5f:88:6c:3d:1e:05:6b:19:65:e6:7b:84:c2:fc:
bd:94:55:e9:9e:74:50:a7:36:4b:b9:52:9a:5e:8f:89:e0:8b:
e1:09:a0:26:0c:40:1d:68:b2:03:4f:4b:dd:52:08:67:cc:2b:
61:41:f8:16:e7:98:d2:41:45:ce:4a:cb:2d:a3:2b:f0:f2:af:
97:d4:d1:8f:f2:5d:48:60:cb:7a:73:18:e8:21:3d:1f:19:58:
04:3e:59:0a:ee:01:1e:2b:01:ce:c2:bb:58:fd:d4:46:27:13:
4a:7f:20:c5:f6:74:5e:be:c4:92:32:79:ee:a6:63:e9:cc:9f:
80:43:cd:9e:89:03:df:34:a1:e5:ec:33:96:4d:e0:52:5b:a9:
45:54:82:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:47:27 2025 by rpki-client