Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.mft
File: Z9vzHVl3RsmhQ0cGBipAZTvFRcM.mft (raw, json)
Hash identifier: cEF2yy3+iA9ecHnzvc4duPrwGDxwaNNMW0xC1BaQWGw=
Subject key identifier: C6:43:A1:D8:0C:75:AC:BD:C6:82:34:83:0B:CB:23:1B:98:2F:F6:92
Authority key identifier: 67:DB:F3:1D:59:77:46:C9:A1:43:47:06:06:2A:40:65:3B:C5:45:C3
Certificate issuer: /CN=67dbf31d597746c9a1434706062a40653bc545c3
Certificate serial: 019A52D0F9419628BC06BDA27CD4E627EB93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.mft
Manifest number: 02A5
Signing time: Wed 05 Nov 2025 07:00:18 +0000
Manifest this update: Wed 05 Nov 2025 07:00:18 +0000
Manifest next update: Thu 06 Nov 2025 07:00:18 +0000
Files and hashes: 1: RB7y6640f4SnVimQzu6JWvm3C6k.roa (hash: uwidWxkKZEKWtlEveUv5MeKzL8ydf3kx4CybcObpyPA=)
2: Z9vzHVl3RsmhQ0cGBipAZTvFRcM.crl (hash: NPPxQydZe0+1S+aPQWpaLal7t18mgm6gojj7lLmuFGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d0:f9:41:96:28:bc:06:bd:a2:7c:d4:e6:27:eb:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67dbf31d597746c9a1434706062a40653bc545c3
Validity
Not Before: Nov 5 07:00:18 2025 GMT
Not After : Nov 6 07:00:18 2025 GMT
Subject: CN=c643a1d80c75acbdc68234830bcb231b982ff692
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:be:4a:a7:f3:99:ca:c0:f6:5b:72:dc:95:de:
94:9d:2c:bc:af:31:f0:34:b3:02:b4:60:fa:9b:0b:
5d:e5:4c:ff:43:48:a0:6e:eb:53:f9:7c:d1:e9:f7:
d1:56:16:51:51:19:8c:81:1d:39:a4:87:b1:2a:80:
e1:b9:f1:8d:e5:29:80:38:b3:fd:b4:17:bc:49:f2:
43:74:5e:58:58:20:e3:fe:f3:a1:96:43:aa:03:1b:
c1:1b:0e:a9:1e:bd:93:15:d1:f6:6c:be:03:43:75:
f3:ea:eb:bf:ad:73:23:20:66:94:18:98:39:a9:6d:
a0:a7:1d:5e:35:52:01:57:3f:87:32:b2:70:07:b3:
9c:80:d2:1a:ba:19:ec:3a:6c:f9:ab:f8:8b:79:0e:
b3:44:17:dc:d5:a7:00:fe:d3:3f:5f:3e:9d:d7:4d:
ed:0c:a5:fb:30:15:82:c2:34:53:95:05:31:71:fc:
37:06:2a:1f:96:6a:9f:d0:4b:75:45:05:91:a1:59:
e3:26:0c:c7:e1:16:80:1d:3d:76:31:94:e0:85:92:
4a:17:f5:bb:f4:eb:b3:50:b6:31:d2:79:8c:d2:e3:
75:8f:ed:67:b6:0b:e5:64:0b:ed:3f:05:32:ca:9d:
0c:7e:ab:aa:4a:51:be:84:4b:6a:83:02:4d:02:49:
8a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:43:A1:D8:0C:75:AC:BD:C6:82:34:83:0B:CB:23:1B:98:2F:F6:92
X509v3 Authority Key Identifier:
keyid:67:DB:F3:1D:59:77:46:C9:A1:43:47:06:06:2A:40:65:3B:C5:45:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:cd:16:ec:fc:ae:f5:a5:52:40:9f:a8:37:97:3d:70:8c:7c:
43:6b:e3:ae:9e:b1:f0:79:ec:77:5b:84:76:89:c9:ef:45:5c:
fd:8f:95:cc:5b:4f:83:59:51:e5:97:f4:ab:a7:92:36:4f:a0:
d4:75:e0:df:25:c5:35:59:5f:fe:22:77:bb:53:eb:99:b2:fa:
3d:15:05:24:06:d3:ef:a4:87:08:3a:46:37:0c:a2:f4:53:75:
84:9e:8b:eb:82:68:8d:41:70:94:ae:af:44:5c:04:0d:3b:e8:
88:42:1d:e3:f8:62:26:03:41:e5:9f:b2:43:f1:fa:34:60:17:
96:b6:ca:de:5a:ad:17:a8:78:d9:7b:26:8f:78:b3:15:a6:22:
a5:df:35:02:da:3d:e0:d1:ac:4d:20:80:cc:6f:d9:de:8f:9e:
4b:4a:8a:8b:c1:49:a1:f9:af:d2:b5:a5:2d:21:a2:80:1e:0a:
64:f6:a4:19:37:4c:44:cc:74:e5:d3:4b:ea:87:03:50:4d:3a:
f4:cb:e4:10:4b:61:2c:71:7b:9a:b9:63:27:e6:61:a7:dd:db:
2e:65:e4:82:19:f6:26:83:f0:f9:42:96:4e:15:12:1c:b2:87:
64:4e:9d:54:86:23:0a:1b:c5:69:09:80:ba:71:79:de:d7:27:
ba:6c:4e:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:54:59 2025 by rpki-client