Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/391092-82f3-48bc-b426-fcc6d27f444f/1/ziNcUEAZxQQCHgZi9wEzt-5zMXM.mft
File: ziNcUEAZxQQCHgZi9wEzt-5zMXM.mft (raw, json)
Hash identifier: qt9T02li7uMHuXYSQi3cf+HcsGUA1eojFwoGnPG7g9Q=
Subject key identifier: 5F:C6:00:2A:82:F9:DE:7B:04:26:D6:01:01:3F:4D:EF:D7:92:C6:80
Authority key identifier: CE:23:5C:50:40:19:C5:04:02:1E:06:62:F7:01:33:B7:EE:73:31:73
Certificate issuer: /CN=ce235c504019c504021e0662f70133b7ee733173
Certificate serial: 019A4D079073D81683E56BEACA24EC7CB5B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ziNcUEAZxQQCHgZi9wEzt-5zMXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/391092-82f3-48bc-b426-fcc6d27f444f/1/ziNcUEAZxQQCHgZi9wEzt-5zMXM.mft
Manifest number: 13CC
Signing time: Tue 04 Nov 2025 04:02:12 +0000
Manifest this update: Tue 04 Nov 2025 04:02:12 +0000
Manifest next update: Wed 05 Nov 2025 04:02:12 +0000
Files and hashes: 1: dVxPi-2BU6sN_zi1oxxkbrPcccA.roa (hash: LN+UvXmjMQ+4zMKoOoVm0IS9B+l8wMWW/8CPwN/xbVI=)
2: ziNcUEAZxQQCHgZi9wEzt-5zMXM.crl (hash: tz4Hqc26lbWvIi9q4W0M0YDMQ84oEIEztNIlQeQUQ/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/391092-82f3-48bc-b426-fcc6d27f444f/1/ziNcUEAZxQQCHgZi9wEzt-5zMXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/391092-82f3-48bc-b426-fcc6d27f444f/1/ziNcUEAZxQQCHgZi9wEzt-5zMXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ziNcUEAZxQQCHgZi9wEzt-5zMXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:02:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:07:90:73:d8:16:83:e5:6b:ea:ca:24:ec:7c:b5:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce235c504019c504021e0662f70133b7ee733173
Validity
Not Before: Nov 4 04:02:12 2025 GMT
Not After : Nov 5 04:02:12 2025 GMT
Subject: CN=5fc6002a82f9de7b0426d601013f4defd792c680
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:24:55:f6:b6:c9:73:33:a4:4a:3b:a5:a3:49:
d7:72:51:3a:40:33:4e:1d:0e:91:a3:55:81:a2:e7:
7e:33:92:b7:75:b2:34:e8:d1:c7:e0:68:f5:a6:9a:
ab:8d:b3:86:60:98:a3:b6:ad:32:e3:10:9a:d2:f8:
df:7e:93:52:10:39:75:f2:3d:65:83:03:93:14:d5:
59:9e:6f:23:4a:67:e7:02:ac:27:86:04:8e:a4:84:
42:22:61:b4:f2:49:7e:91:7e:09:cb:ae:31:d1:fc:
1e:e2:73:e9:8f:c6:b1:4e:15:78:5d:47:92:03:bb:
8a:c1:16:77:c5:1c:80:8f:5e:4f:fc:e9:69:25:26:
3d:a9:5e:23:6e:ca:b7:3b:d3:bb:2e:9e:83:02:fd:
04:20:f0:ed:73:50:ca:d4:24:96:03:6b:d5:7e:53:
75:3a:59:04:2a:e1:f9:d8:92:d3:fc:78:50:93:a9:
33:97:fd:af:4b:ab:27:16:4f:f2:3f:93:71:14:a9:
fc:5c:18:89:34:0c:c4:e2:1b:c1:f5:39:95:23:cc:
b4:75:a8:1b:24:30:3b:2b:0c:d9:6a:6a:fe:53:16:
ed:ab:33:1b:99:bb:1c:78:be:19:16:87:e8:11:db:
bc:bb:56:25:52:88:bf:4d:34:a7:98:f6:e2:9f:6d:
7b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:C6:00:2A:82:F9:DE:7B:04:26:D6:01:01:3F:4D:EF:D7:92:C6:80
X509v3 Authority Key Identifier:
keyid:CE:23:5C:50:40:19:C5:04:02:1E:06:62:F7:01:33:B7:EE:73:31:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ziNcUEAZxQQCHgZi9wEzt-5zMXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/391092-82f3-48bc-b426-fcc6d27f444f/1/ziNcUEAZxQQCHgZi9wEzt-5zMXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/391092-82f3-48bc-b426-fcc6d27f444f/1/ziNcUEAZxQQCHgZi9wEzt-5zMXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:c7:4e:b8:e1:df:1c:e7:98:88:97:98:f2:25:b2:e0:32:67:
c0:f7:c7:36:a8:f0:a5:02:b7:e6:a1:93:5c:34:51:1e:a2:5b:
9a:aa:83:79:6e:fa:4a:41:5e:28:3b:8d:9a:33:8a:64:a4:62:
34:0a:d9:e0:b9:45:8f:4b:38:7c:01:05:58:c4:4d:4a:62:99:
db:1c:ce:c7:0b:34:6a:49:c8:35:59:bb:77:ed:cf:44:16:04:
59:cf:3b:c1:c0:38:a8:7c:e5:a3:e7:81:88:09:6f:49:14:1c:
8c:48:43:30:8b:13:08:ce:33:fb:78:09:d5:1a:28:cb:a9:98:
6a:1b:53:9a:77:83:38:5e:d2:ff:0d:e7:f3:c7:54:35:e5:62:
fd:0b:c2:ca:8a:81:61:31:fd:7d:04:e3:1e:91:5a:f6:9f:b6:
f3:c3:16:fa:88:42:aa:38:bc:6b:93:70:70:8b:11:6a:5c:e2:
49:7f:c3:c6:a4:c0:dd:e3:01:ca:08:07:81:f8:0e:5c:c6:23:
bc:60:58:7e:e2:1d:53:24:5a:43:67:4b:d7:32:48:dc:44:5d:
2d:e5:39:c1:ed:e3:27:03:a8:7c:5c:b7:f6:8b:49:d2:3d:0f:
58:36:70:f1:56:7f:61:fa:69:c8:8c:3f:8f:5c:f7:ab:a7:cf:
20:66:9f:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:20:48 2025 by rpki-client