Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/b0f31d-b4bf-450d-9acd-0a6b536c4394/1/fZZW1YZ7Q85QZEUpC7pwVyImBYY.mft
File: fZZW1YZ7Q85QZEUpC7pwVyImBYY.mft (raw, json)
Hash identifier: NyKZxrOCo4BtZjEUuAMWSX6QV2cq6NegJBACOTpTG50=
Subject key identifier: F3:A2:39:E7:10:CA:D9:C3:DE:4F:9E:10:85:DE:6A:5C:1C:DA:2A:6F
Authority key identifier: 7D:96:56:D5:86:7B:43:CE:50:64:45:29:0B:BA:70:57:22:26:05:86
Certificate issuer: /CN=7d9656d5867b43ce506445290bba705722260586
Certificate serial: 019A4D06399165D5E7DE9065583E907A0429
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fZZW1YZ7Q85QZEUpC7pwVyImBYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/b0f31d-b4bf-450d-9acd-0a6b536c4394/1/fZZW1YZ7Q85QZEUpC7pwVyImBYY.mft
Manifest number: 0C6D
Signing time: Tue 04 Nov 2025 04:00:44 +0000
Manifest this update: Tue 04 Nov 2025 04:00:44 +0000
Manifest next update: Wed 05 Nov 2025 04:00:44 +0000
Files and hashes: 1: fZZW1YZ7Q85QZEUpC7pwVyImBYY.crl (hash: 9eha7ePT5Ga0/XlhuRPBQSudJ9VVGSYQ4oj1upHC5Hg=)
2: mXWmJZwIRdfowUzFV6EabzHZO1M.roa (hash: k+dckJef8uAl2tggOKFrpt5ypzOEodrfcc+zZEAtNyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/b0f31d-b4bf-450d-9acd-0a6b536c4394/1/fZZW1YZ7Q85QZEUpC7pwVyImBYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/b0f31d-b4bf-450d-9acd-0a6b536c4394/1/fZZW1YZ7Q85QZEUpC7pwVyImBYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fZZW1YZ7Q85QZEUpC7pwVyImBYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:06:39:91:65:d5:e7:de:90:65:58:3e:90:7a:04:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d9656d5867b43ce506445290bba705722260586
Validity
Not Before: Nov 4 04:00:44 2025 GMT
Not After : Nov 5 04:00:44 2025 GMT
Subject: CN=f3a239e710cad9c3de4f9e1085de6a5c1cda2a6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:61:f4:98:67:55:0a:c0:3d:84:88:0c:34:36:
51:af:93:a1:49:48:27:c4:1d:d7:f8:65:fc:f9:ec:
9e:66:74:b2:68:de:46:ac:df:79:54:c7:7e:9e:0e:
b6:56:7a:7f:ac:e3:f2:a4:cb:c3:40:f2:74:82:1b:
2d:65:82:f0:0f:4d:d5:a6:89:b5:44:f2:c9:c5:e6:
39:89:c9:bf:c3:d6:d2:23:ea:30:8a:a4:88:3b:cd:
5c:d3:fe:2d:b0:1f:e4:58:9a:15:a6:bc:7e:be:9e:
e0:75:1b:86:1b:5e:3b:54:2a:b2:2e:7e:67:ff:37:
7f:2b:db:fc:b8:c0:09:2a:d7:b9:ea:15:5c:33:b0:
e4:95:99:22:7b:f6:1b:c5:cd:c2:0a:fe:55:66:7e:
7f:04:b2:59:61:7c:4a:79:0d:03:72:5f:f7:4a:16:
e8:14:ca:dd:74:f9:67:ae:fd:23:72:cf:7d:17:c3:
49:08:44:c0:86:52:f7:e8:81:74:67:29:da:c7:d8:
01:9d:50:52:94:6c:ab:9c:3a:59:40:6f:53:37:28:
4d:a6:01:74:85:c2:c4:4a:e0:99:f9:07:c2:95:33:
89:d4:13:e1:ba:11:f0:90:27:1c:20:2e:64:0e:4e:
73:fe:6a:79:e2:cc:f1:27:73:e4:82:96:90:db:95:
42:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:A2:39:E7:10:CA:D9:C3:DE:4F:9E:10:85:DE:6A:5C:1C:DA:2A:6F
X509v3 Authority Key Identifier:
keyid:7D:96:56:D5:86:7B:43:CE:50:64:45:29:0B:BA:70:57:22:26:05:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fZZW1YZ7Q85QZEUpC7pwVyImBYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b0f31d-b4bf-450d-9acd-0a6b536c4394/1/fZZW1YZ7Q85QZEUpC7pwVyImBYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b0f31d-b4bf-450d-9acd-0a6b536c4394/1/fZZW1YZ7Q85QZEUpC7pwVyImBYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:1a:5e:3a:09:78:fc:f2:68:56:3a:6b:6b:cc:67:4e:6d:48:
47:3a:f6:2a:a1:05:dd:1a:6e:56:17:d5:22:6a:c6:42:b4:49:
ce:b4:7f:e9:7e:c9:1e:b5:75:62:db:47:1f:3f:b9:d6:95:28:
3c:0e:c2:a7:27:ab:34:69:aa:9a:0a:53:fa:05:a6:0e:32:9e:
48:40:bb:ad:76:a3:ba:7c:22:76:ef:28:68:eb:06:8b:25:3e:
36:26:02:8a:3f:ea:30:70:c1:84:b6:8d:24:05:71:45:f2:04:
41:a7:3d:5c:08:77:bc:29:89:20:07:17:9b:62:99:6c:47:af:
84:82:7e:6a:62:74:78:42:ee:03:88:a0:32:2c:64:19:2c:b8:
e9:f3:73:a1:88:d8:32:91:26:eb:24:ed:f5:8a:d8:42:94:ef:
8c:e9:3c:17:69:be:12:f1:b8:b8:b7:88:1e:35:27:98:02:29:
11:a1:e6:9c:36:27:e2:b5:27:6f:6f:92:11:f9:48:02:c2:cc:
64:c2:22:1a:23:87:3b:82:9b:3c:5d:c9:a5:55:c0:7c:df:ee:
58:8b:42:88:a3:be:07:7d:9d:a0:08:d3:bb:dd:9e:e7:c3:68:
f9:c0:39:c2:4c:c0:94:34:42:e6:e1:b4:12:52:b1:2c:8e:78:
67:c6:6a:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:45:17 2025 by rpki-client