Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.mft
File: ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.mft (raw, json)
Hash identifier: 9C1hZv8j11KHdwaZBQEGRbKgjkaLrYjY40u/woCgcDg=
Subject key identifier: CD:5E:22:B9:DC:D4:31:35:35:E5:BD:33:1A:6F:92:09:A7:3A:92:5F
Authority key identifier: 64:2C:7A:4E:9F:02:B2:F4:E6:64:D7:D0:D7:2A:52:E5:12:61:DE:54
Certificate issuer: /CN=642c7a4e9f02b2f4e664d7d0d72a52e51261de54
Certificate serial: 019A4E86876C415E7750E9CC45B77AD9CC90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.mft
Manifest number: 0A50
Signing time: Tue 04 Nov 2025 11:00:30 +0000
Manifest this update: Tue 04 Nov 2025 11:00:30 +0000
Manifest next update: Wed 05 Nov 2025 11:00:30 +0000
Files and hashes: 1: ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.crl (hash: g1k/s8/oZoZ80RrsyWbiL04b7VYlpOC0f4kHqxLstqM=)
2: up0oav0rMtPMOzsYSRDujbJ3KTk.roa (hash: Rkvar+Ei1oJWKXR7rGewiiIwzRWDihGhTVyjbmAYcXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 11:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:87:6c:41:5e:77:50:e9:cc:45:b7:7a:d9:cc:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=642c7a4e9f02b2f4e664d7d0d72a52e51261de54
Validity
Not Before: Nov 4 11:00:30 2025 GMT
Not After : Nov 5 11:00:30 2025 GMT
Subject: CN=cd5e22b9dcd4313535e5bd331a6f9209a73a925f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:47:3e:db:06:4d:7c:5e:2d:c7:f0:46:d7:88:
fa:b9:da:42:d8:b5:ed:e0:e2:a9:37:9b:aa:60:c1:
83:83:a1:f5:92:5e:79:91:e8:3a:84:59:06:91:dd:
d1:71:a2:f3:bc:2d:02:c0:ad:d7:89:31:33:0a:95:
f3:ba:34:5a:fe:5a:41:15:cd:65:86:5a:e7:f3:db:
57:6f:95:d2:3b:0d:9b:14:bf:7b:7d:ab:2d:03:19:
b7:c9:6e:63:64:c5:59:dc:40:85:c3:28:32:d3:e3:
3e:bc:11:95:fc:63:ef:35:8b:3d:df:a1:05:4b:26:
eb:4b:7d:be:e4:8d:20:39:5e:56:54:28:da:f1:79:
00:cf:89:cc:6e:7e:7e:cf:7c:ce:7d:4d:7b:68:2e:
7b:08:2e:ff:e6:4a:54:8f:70:0e:18:27:11:9b:a5:
b9:06:b7:6e:3e:75:b9:1e:d7:80:03:8e:4b:36:a3:
2c:7a:0e:a1:e1:86:03:3a:cc:59:b5:ea:cf:a0:36:
a0:cd:c7:d6:f6:62:c2:f7:d7:c9:a8:84:49:10:7a:
84:6a:aa:2a:04:77:8a:b3:06:45:84:e2:3c:27:09:
b7:c0:ee:64:30:31:16:cb:54:aa:a2:c5:3b:d9:d6:
e5:53:59:fc:7a:74:e8:55:38:fe:b0:27:70:ee:a4:
2f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:5E:22:B9:DC:D4:31:35:35:E5:BD:33:1A:6F:92:09:A7:3A:92:5F
X509v3 Authority Key Identifier:
keyid:64:2C:7A:4E:9F:02:B2:F4:E6:64:D7:D0:D7:2A:52:E5:12:61:DE:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:b1:8f:4f:4a:05:69:01:b2:5a:5f:fe:d9:dd:83:bb:92:f0:
52:4b:d5:b3:f8:73:34:04:88:ef:92:f9:45:fb:20:a4:00:b3:
33:b7:f5:58:bd:ea:ee:31:ee:9d:25:b3:44:69:16:53:c2:e7:
2b:36:92:eb:27:bf:61:b3:1f:22:5a:39:87:c8:ba:ab:5d:e4:
7c:2c:7a:51:db:ce:65:a5:a9:e2:42:bd:29:ec:9d:29:96:e4:
ba:70:be:3c:cc:03:73:97:d1:98:9b:c2:e5:15:e6:87:6d:53:
ee:19:bd:43:1d:c7:6d:6c:45:9e:fb:7f:b4:3b:a3:48:64:3c:
00:d8:4d:86:68:64:82:23:91:af:8a:ff:15:95:84:42:dc:47:
02:74:0d:e7:1b:7b:4e:3c:9a:ae:e9:b9:1b:47:ea:be:d6:77:
bc:53:e3:d6:6f:77:ee:47:a3:02:d6:1c:a0:11:49:7d:49:02:
9d:16:74:30:a2:f3:2d:f6:c8:ee:5d:ed:93:67:1f:f7:fd:49:
06:1b:64:43:ba:9c:59:97:65:5f:93:17:cf:84:fa:52:90:f5:
56:1e:f2:d3:f6:fa:a8:3d:80:3b:0a:51:b9:20:22:9a:65:43:
a7:b3:2a:93:74:dd:3c:f7:e4:f2:68:72:34:19:5c:74:f3:e1:
b2:b3:78:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:22:34 2025 by rpki-client