Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/6a2e5f-9bb9-43a4-b452-460c89b392b3/1/zNLcTzj5a21HeWmI7N3wxtDE6DI.mft
File: zNLcTzj5a21HeWmI7N3wxtDE6DI.mft (raw, json)
Hash identifier: SEOSGCi8SM0b0ivhyAS3wAzUyVvZesPwLtO5GLbI3fA=
Subject key identifier: 0E:19:90:A8:3E:94:87:55:D0:02:C1:FC:8B:E6:96:1E:2C:C7:A4:36
Authority key identifier: CC:D2:DC:4F:38:F9:6B:6D:47:79:69:88:EC:DD:F0:C6:D0:C4:E8:32
Certificate issuer: /CN=ccd2dc4f38f96b6d47796988ecddf0c6d0c4e832
Certificate serial: 019A5CE817FE1AF80CC915CC852D6CF22017
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNLcTzj5a21HeWmI7N3wxtDE6DI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/6a2e5f-9bb9-43a4-b452-460c89b392b3/1/zNLcTzj5a21HeWmI7N3wxtDE6DI.mft
Manifest number: 02C9
Signing time: Fri 07 Nov 2025 06:01:45 +0000
Manifest this update: Fri 07 Nov 2025 06:01:45 +0000
Manifest next update: Sat 08 Nov 2025 06:01:45 +0000
Files and hashes: 1: ckBMIFhsxRrJd8g3723Ngrkob0E.roa (hash: 2+AxiQZG50JBBA5rPTQbIhRHNAnVw7yeAiKa0FFBttM=)
2: zNLcTzj5a21HeWmI7N3wxtDE6DI.crl (hash: t/VnklEXJ+41eXvnLvn6cUWNCC3xoiuvjopq3sK1BeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/6a2e5f-9bb9-43a4-b452-460c89b392b3/1/zNLcTzj5a21HeWmI7N3wxtDE6DI.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/6a2e5f-9bb9-43a4-b452-460c89b392b3/1/zNLcTzj5a21HeWmI7N3wxtDE6DI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zNLcTzj5a21HeWmI7N3wxtDE6DI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Nov 2025 06:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:5c:e8:17:fe:1a:f8:0c:c9:15:cc:85:2d:6c:f2:20:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd2dc4f38f96b6d47796988ecddf0c6d0c4e832
Validity
Not Before: Nov 7 06:01:45 2025 GMT
Not After : Nov 8 06:01:45 2025 GMT
Subject: CN=0e1990a83e948755d002c1fc8be6961e2cc7a436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:f8:fe:55:9a:f7:48:da:10:0e:47:ae:e1:57:
71:d7:fc:0f:ee:81:20:42:e6:50:88:70:8a:f4:de:
29:eb:ae:2d:d2:16:c8:10:6c:b2:18:3e:71:10:c5:
9b:6b:91:84:6c:93:a7:48:2e:f7:a7:46:56:81:49:
91:58:df:36:95:a0:15:4f:86:ee:d0:d5:e0:72:6c:
25:a0:d7:9d:41:50:fa:ea:eb:87:f9:2d:13:a9:42:
28:de:00:6b:40:fd:7e:85:fd:2c:22:4b:35:b9:5b:
c1:76:71:d9:3f:73:97:4f:e1:5a:80:67:fa:98:f5:
0c:b5:e7:83:d8:6b:24:ab:d6:a6:f3:38:89:23:a7:
e3:c3:12:c9:4f:8d:db:cb:e4:d8:64:37:9c:33:db:
4f:95:12:bb:06:39:03:ba:8a:7f:4c:5e:da:87:fd:
8c:5f:67:c4:3b:7b:7a:d1:5f:c9:19:df:05:d1:c5:
d9:f0:6d:55:34:7c:e7:46:a1:85:a2:e5:b8:bf:87:
3a:22:3a:75:5d:f3:b7:56:bb:22:4f:35:0e:81:11:
6b:f8:62:9e:a9:56:c7:b0:15:64:8c:65:ce:a8:6d:
33:19:f4:3b:9b:a0:e9:f5:44:93:dd:c4:e1:89:6d:
c6:9e:bc:51:70:82:4e:15:21:ae:c6:83:48:d9:dd:
06:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:19:90:A8:3E:94:87:55:D0:02:C1:FC:8B:E6:96:1E:2C:C7:A4:36
X509v3 Authority Key Identifier:
keyid:CC:D2:DC:4F:38:F9:6B:6D:47:79:69:88:EC:DD:F0:C6:D0:C4:E8:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNLcTzj5a21HeWmI7N3wxtDE6DI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/6a2e5f-9bb9-43a4-b452-460c89b392b3/1/zNLcTzj5a21HeWmI7N3wxtDE6DI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/6a2e5f-9bb9-43a4-b452-460c89b392b3/1/zNLcTzj5a21HeWmI7N3wxtDE6DI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:6b:7c:1c:58:9c:d0:fb:7e:a7:95:38:1b:6a:ea:ed:3a:13:
a0:58:83:43:31:02:94:e9:32:80:95:91:bd:f5:ba:77:c5:b2:
f1:a4:c7:33:28:b6:fd:08:47:fd:d9:32:0d:04:5c:06:28:5e:
5f:8b:b9:53:99:18:a7:c0:f2:20:60:27:88:dc:8b:74:96:d3:
ec:d3:29:86:35:0e:11:5b:0a:35:bf:62:80:a3:2e:de:e6:e1:
c8:c7:b8:e1:f0:44:a1:fa:f8:e5:b6:06:b3:44:43:c9:5b:5c:
80:04:67:fe:cd:f4:99:4a:a2:6c:dd:a8:8c:6c:db:0d:57:4a:
11:c7:32:0a:64:05:d8:22:b2:62:bb:f2:6e:dc:c8:12:a3:b1:
1f:e9:8c:29:01:3c:21:4b:6a:83:3c:c8:2b:0e:ef:fd:f8:2a:
e9:62:22:6f:a7:6e:7a:43:80:15:13:90:b7:bb:c6:ef:12:26:
0c:b4:8b:7c:90:75:c4:98:28:20:09:27:c9:21:5e:e9:90:86:
e7:a0:3d:62:09:e5:7d:12:d6:d0:6a:82:02:1c:3d:54:3d:0d:
87:f9:d6:f4:4e:81:bd:2f:fd:8e:b2:5d:82:3b:cf:04:00:fb:
9b:da:f1:32:33:e2:d5:5c:95:b3:55:2f:94:09:11:22:cf:70:
49:e3:42:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 7 12:41:45 2025 by rpki-client