Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/1168fa-fbf6-4e07-9ec7-919eefba48b5/1/z0AYX1Us2XUnbANGT1DHpdNRVkw.mft
File: z0AYX1Us2XUnbANGT1DHpdNRVkw.mft (raw, json)
Hash identifier: UCSb3Z2odgXcBDQ6k/Z081SVd8n+ECurJjQhgAnbYbo=
Subject key identifier: F4:28:06:ED:7F:EE:A6:C6:FF:94:FF:EA:71:89:20:AD:12:60:33:56
Authority key identifier: CF:40:18:5F:55:2C:D9:75:27:6C:03:46:4F:50:C7:A5:D3:51:56:4C
Certificate issuer: /CN=cf40185f552cd975276c03464f50c7a5d351564c
Certificate serial: 019A53080748ED2BD750B4656915B78CB1F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z0AYX1Us2XUnbANGT1DHpdNRVkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/1168fa-fbf6-4e07-9ec7-919eefba48b5/1/z0AYX1Us2XUnbANGT1DHpdNRVkw.mft
Manifest number: 27
Signing time: Wed 05 Nov 2025 08:00:26 +0000
Manifest this update: Wed 05 Nov 2025 08:00:26 +0000
Manifest next update: Thu 06 Nov 2025 08:00:26 +0000
Files and hashes: 1: QMCQYM6KLwMrhUyf5iYVPa2Vy4o.roa (hash: SzWr8zdcPAyWkLaDiuc219DsXOdQP+mExV/Svz/jWNo=)
2: Ty-iZb_Ec_nznm2_0cwyztJTc4w.roa (hash: gnzJFaxmd6CjC4tK9Lw/KvBHZRZ66fs4fKxH+FjxMvY=)
3: t4Me7o46EPXuuYLWaaf0tlmnDwo.roa (hash: opkJ9tQSl8kaOwV5x6n9qLElK+q3Eq2xK8X4ODbWPhY=)
4: z0AYX1Us2XUnbANGT1DHpdNRVkw.crl (hash: 1K35s5qLSQY6b+75c8B3e4dQ7svWCap9wPgRP2MINpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/1168fa-fbf6-4e07-9ec7-919eefba48b5/1/z0AYX1Us2XUnbANGT1DHpdNRVkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/1168fa-fbf6-4e07-9ec7-919eefba48b5/1/z0AYX1Us2XUnbANGT1DHpdNRVkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/z0AYX1Us2XUnbANGT1DHpdNRVkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:08:07:48:ed:2b:d7:50:b4:65:69:15:b7:8c:b1:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf40185f552cd975276c03464f50c7a5d351564c
Validity
Not Before: Nov 5 08:00:26 2025 GMT
Not After : Nov 6 08:00:26 2025 GMT
Subject: CN=f42806ed7feea6c6ff94ffea718920ad12603356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:47:f6:87:c8:03:6c:d6:e8:19:ab:29:f3:13:
fc:1b:32:c1:5c:a4:4f:cc:5f:48:6d:47:c5:4a:8c:
fd:59:62:00:b6:f8:21:6c:c3:d8:e4:0f:a6:9f:e9:
43:46:f5:24:e3:4f:6b:93:a9:12:ed:1a:fb:07:f6:
5d:4d:f3:bb:b8:b6:6e:86:1d:a0:1e:1b:78:01:24:
76:10:66:8e:85:15:be:0a:51:2e:c4:5e:af:f5:ea:
5f:1e:27:b4:58:52:a2:65:0c:58:36:57:0e:61:54:
a2:d4:33:99:f2:12:74:e1:7a:43:01:55:0f:9c:cc:
83:44:4c:6e:23:68:cc:25:2d:f8:b0:fc:76:30:c4:
ce:05:2c:84:1b:34:54:f5:ab:da:ec:de:e8:73:a8:
99:b6:10:6b:55:ef:ac:a6:33:94:f5:bd:d6:cb:ac:
ed:c1:b7:fd:1f:8d:c5:3a:71:57:e0:85:3b:a8:35:
bc:d1:39:19:96:03:27:37:47:b2:bb:df:be:d2:8b:
56:cc:1d:44:f2:38:56:d7:5f:9f:c1:3b:4d:a6:0b:
a0:ff:83:a8:83:98:30:68:bb:b8:8f:84:61:f7:69:
6c:08:e1:72:78:98:4a:4f:f6:b5:25:34:41:d2:ac:
d3:6d:59:2c:21:22:5c:25:16:80:c1:ad:5d:31:00:
af:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:28:06:ED:7F:EE:A6:C6:FF:94:FF:EA:71:89:20:AD:12:60:33:56
X509v3 Authority Key Identifier:
keyid:CF:40:18:5F:55:2C:D9:75:27:6C:03:46:4F:50:C7:A5:D3:51:56:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z0AYX1Us2XUnbANGT1DHpdNRVkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/1168fa-fbf6-4e07-9ec7-919eefba48b5/1/z0AYX1Us2XUnbANGT1DHpdNRVkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/1168fa-fbf6-4e07-9ec7-919eefba48b5/1/z0AYX1Us2XUnbANGT1DHpdNRVkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:bf:29:73:0d:4d:5f:83:02:f2:39:09:d7:da:aa:f3:1c:8a:
11:27:9a:2d:6f:67:9f:a1:2e:44:5d:17:fe:35:0d:79:b1:24:
c8:db:f4:9c:1b:b4:98:c4:2e:1d:73:93:2f:d1:8a:e3:b1:c5:
40:9c:86:b0:0c:2f:13:ad:29:f1:b5:4b:64:25:63:c1:70:15:
4e:2c:f7:27:c3:d0:f8:2b:f6:10:a7:86:be:4a:15:fd:0b:34:
61:5c:e3:00:f1:9b:f9:de:6e:19:58:5c:3e:a2:c2:dc:c2:6b:
49:54:78:05:3a:d3:ad:18:be:a1:84:e9:7e:4c:0c:4b:b4:90:
c7:35:0c:80:40:06:9e:ba:dd:f6:1b:5f:33:ba:d2:22:ae:db:
8a:e7:f4:03:22:2e:a2:76:5c:d2:d8:6d:fd:16:ee:85:70:e1:
34:82:ef:5c:7c:76:af:97:35:d8:46:d8:7b:a1:69:bf:7f:79:
39:a7:e8:07:d9:da:b2:68:64:ef:d3:36:14:08:fb:69:33:ff:
47:e4:d6:3a:27:2e:d9:04:17:13:65:96:e4:eb:44:3e:3b:af:
af:27:60:b0:43:af:9f:83:a5:49:75:ca:2c:8e:48:0e:de:06:
50:be:45:6d:bc:a5:e8:cc:a3:7c:7b:9b:f3:0e:09:7f:9c:e6:
5c:6f:7d:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:18:33 2025 by rpki-client