Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/1f9e6c-e6b8-4ad4-9941-f46f9d674f6c/1/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.mft
File: cZ5ZtQF7_mNEEZSe_y1wugoHxUA.mft (raw, json)
Hash identifier: owg2lLuq/3Yjem1M2AUDcvFG23lp3z0heKaJ3xEPOuE=
Subject key identifier: C7:1D:47:42:B4:19:DF:4E:EE:F2:FE:A4:31:53:C1:AF:D9:5B:70:02
Authority key identifier: 71:9E:59:B5:01:7B:FE:63:44:11:94:9E:FF:2D:70:BA:0A:07:C5:40
Certificate issuer: /CN=719e59b5017bfe634411949eff2d70ba0a07c540
Certificate serial: 019A500720D4F69BED6638771FD7DF33C00E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/1f9e6c-e6b8-4ad4-9941-f46f9d674f6c/1/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.mft
Manifest number: 0CC0
Signing time: Tue 04 Nov 2025 18:00:35 +0000
Manifest this update: Tue 04 Nov 2025 18:00:35 +0000
Manifest next update: Wed 05 Nov 2025 18:00:35 +0000
Files and hashes: 1: NznO4CxJJ6L0xLB6PTLKpB7weFM.roa (hash: cSE4XxBXPFFORCEl811D1OzY3o/1e0FebNC7EW5YkMk=)
2: cZ5ZtQF7_mNEEZSe_y1wugoHxUA.crl (hash: Ta8EZ5+bG4YUwLaAYbFaHnA42w2zaG09kPdWkcCVwTc=)
3: hVV7bHBD-mLe_PCozGrmTHxovsM.roa (hash: YI06CwugD4QjZYDajA4+sFtJ0/JL/QvZ5A+ius2+OkM=)
4: i_ZSP4msxm1SkHkJA_HtKWJPNjY.roa (hash: XTx/K5oWGL66kYYSkjQ0rxGrZ4iJ40KRc43mQ3O3oXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/1f9e6c-e6b8-4ad4-9941-f46f9d674f6c/1/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/1f9e6c-e6b8-4ad4-9941-f46f9d674f6c/1/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:20:d4:f6:9b:ed:66:38:77:1f:d7:df:33:c0:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=719e59b5017bfe634411949eff2d70ba0a07c540
Validity
Not Before: Nov 4 18:00:35 2025 GMT
Not After : Nov 5 18:00:35 2025 GMT
Subject: CN=c71d4742b419df4eeef2fea43153c1afd95b7002
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:f0:47:9e:22:1f:23:7e:8f:1e:44:d4:b7:1e:
98:38:e4:8e:36:36:d3:ab:e2:25:9f:f2:b8:7c:1b:
c8:0c:a5:55:e6:30:17:2e:e6:df:ae:c8:f4:9e:17:
f5:5d:7a:7b:ee:e1:ca:f6:45:fb:99:fe:a3:cc:ce:
b5:ef:95:27:d0:b1:b6:73:61:d6:c6:99:28:b1:97:
5a:0b:55:3c:60:7a:f1:b2:f8:ab:c8:ef:56:2f:6f:
1f:bf:a1:06:b2:d5:14:68:70:ac:6a:b8:b8:6f:b2:
e1:e2:fb:53:f0:94:8a:ed:f6:2e:65:7f:c6:9f:db:
3a:1e:2c:39:54:88:6e:6d:13:fc:7a:4e:b8:29:b4:
49:be:04:02:6e:5b:1f:5b:1c:f1:99:fc:07:30:bd:
0c:19:3e:b7:51:0c:02:5a:b6:8b:89:b9:50:c9:4a:
35:6b:6c:6b:95:8f:17:38:62:c9:fd:de:e5:d9:57:
68:af:b9:df:26:82:af:bd:a5:b3:5e:45:d8:1b:be:
2a:e5:b5:f9:46:6c:25:30:7a:98:27:c0:79:fa:73:
90:86:82:c9:35:05:50:e8:66:95:ad:5f:bf:c9:60:
24:83:2c:7f:13:fa:73:1d:1b:60:a3:60:37:55:2f:
ed:05:8b:85:4e:d3:cd:b2:de:c1:d9:c1:4a:3a:79:
d8:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:1D:47:42:B4:19:DF:4E:EE:F2:FE:A4:31:53:C1:AF:D9:5B:70:02
X509v3 Authority Key Identifier:
keyid:71:9E:59:B5:01:7B:FE:63:44:11:94:9E:FF:2D:70:BA:0A:07:C5:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/1f9e6c-e6b8-4ad4-9941-f46f9d674f6c/1/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/1f9e6c-e6b8-4ad4-9941-f46f9d674f6c/1/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:07:a5:dd:16:cd:9f:f1:b3:12:f8:bb:94:8b:f5:7d:b2:93:
a9:b2:2f:fa:38:ff:4c:00:f4:d0:b6:e4:4c:43:f9:d7:79:a7:
f7:10:b5:86:f1:46:f2:68:6f:05:d9:d9:8c:0f:7e:e1:2c:9c:
62:19:28:48:c3:bd:1f:35:c1:cd:1b:7b:1b:cc:70:57:53:b9:
65:6e:7e:bb:25:d3:f6:00:81:47:71:9a:57:b2:bc:75:4f:93:
27:ba:b0:66:73:e7:10:0c:52:c9:6d:5c:99:3c:32:f0:88:70:
0f:a8:51:ca:13:71:28:0b:fa:b0:31:8d:5e:bd:01:16:a9:46:
e2:76:ed:4e:6a:47:c9:66:db:bb:86:11:f2:a2:a9:46:fc:de:
34:91:77:45:17:18:15:8c:ad:f8:9f:38:fd:f9:07:86:af:d0:
7d:4b:55:1f:98:74:17:f1:79:ce:46:72:02:10:eb:93:0f:b4:
c7:d6:ab:b1:43:fc:69:2e:6a:e5:06:9f:54:3a:ae:48:01:85:
77:0b:10:42:b8:fd:61:e1:b9:9a:31:8a:6e:00:1f:98:81:2d:
ef:ec:f3:3c:9b:d9:4c:6e:0e:a0:47:78:bb:6b:04:00:c8:ec:
85:c0:26:7c:1c:bb:08:2f:a5:ac:ac:e1:97:c6:93:46:a4:9a:
a6:da:58:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:44:56 2025 by rpki-client