Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.mft
File: zAGDPH7l80P_CTtsTmFR0ONkV2g.mft (raw, json)
Hash identifier: jtsjt9z7qrVa8IP8HHI8LlWvUzvhEGeWbFZe0aBMhVc=
Subject key identifier: EF:0A:60:A4:AD:A0:4E:09:BB:C4:D3:D6:DA:49:23:4E:0A:DC:6F:2C
Authority key identifier: CC:01:83:3C:7E:E5:F3:43:FF:09:3B:6C:4E:61:51:D0:E3:64:57:68
Certificate issuer: /CN=cc01833c7ee5f343ff093b6c4e6151d0e3645768
Certificate serial: 019A4DE156D88A1A09CCC6200A33A108E22E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zAGDPH7l80P_CTtsTmFR0ONkV2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.mft
Manifest number: 1715
Signing time: Tue 04 Nov 2025 08:00:04 +0000
Manifest this update: Tue 04 Nov 2025 08:00:04 +0000
Manifest next update: Wed 05 Nov 2025 08:00:04 +0000
Files and hashes: 1: 8B-49SRrYWj3BFm1FIacELaGu3s.roa (hash: laIZJXxS1vtVLt93zJEWrt+cjjvvJapngvXurJPqS7Y=)
2: a3gHziW8P1fHttGC9Ex68BgcGK4.roa (hash: 5EwUldHPQ4hQYwe5t3ER6qcsrkPeWX9lX5322mclP1s=)
3: zAGDPH7l80P_CTtsTmFR0ONkV2g.crl (hash: qa8kHa8+88Pp9NoPCyQ63ezf6WhjFtcAPB0ECVJTMLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/zAGDPH7l80P_CTtsTmFR0ONkV2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:56:d8:8a:1a:09:cc:c6:20:0a:33:a1:08:e2:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc01833c7ee5f343ff093b6c4e6151d0e3645768
Validity
Not Before: Nov 4 08:00:04 2025 GMT
Not After : Nov 5 08:00:04 2025 GMT
Subject: CN=ef0a60a4ada04e09bbc4d3d6da49234e0adc6f2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ec:df:30:d1:ab:c5:ef:a8:80:a2:e1:37:09:
f9:0e:2b:9c:d6:c1:c6:63:d2:00:ed:1e:0e:9d:04:
31:c5:67:be:80:59:d2:1b:5b:1f:a2:7d:ee:5b:58:
13:da:21:b1:dd:d3:1b:33:20:9f:47:a2:ca:de:e8:
b1:c9:1e:f2:dd:36:bf:d6:0c:e0:67:e6:cc:00:bc:
bb:b5:09:63:a6:11:7c:fc:72:7b:11:e1:7d:9a:5b:
16:82:1a:4e:1e:9c:79:5d:f0:29:2f:dc:1f:28:48:
2b:ad:f9:7b:44:24:21:b9:4b:8e:ce:c2:82:d8:30:
d1:f4:56:8f:b3:54:ee:4a:7b:dd:54:79:37:26:47:
ea:6d:07:6e:ab:48:25:63:5f:f5:d6:5f:69:a3:7e:
bc:89:b9:1d:45:5a:63:05:90:15:36:3a:56:f2:b2:
1d:75:69:dc:84:91:76:eb:b4:49:ec:bc:39:05:cc:
30:2c:6e:ab:06:48:92:fa:ce:0f:86:cb:4e:a2:29:
35:53:19:a0:da:97:a9:16:a9:44:e6:e1:a5:14:e4:
52:01:f8:66:c6:dc:97:07:c2:3d:2c:1d:20:df:cb:
8c:86:77:3d:bb:4d:cf:50:99:26:ea:b1:7a:14:f3:
0d:c6:8f:28:0e:1a:f7:78:3b:9b:16:96:33:3e:df:
a8:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:0A:60:A4:AD:A0:4E:09:BB:C4:D3:D6:DA:49:23:4E:0A:DC:6F:2C
X509v3 Authority Key Identifier:
keyid:CC:01:83:3C:7E:E5:F3:43:FF:09:3B:6C:4E:61:51:D0:E3:64:57:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zAGDPH7l80P_CTtsTmFR0ONkV2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:c8:90:87:d0:74:01:55:8d:10:95:45:1c:6b:1d:4f:10:10:
e0:2f:bf:53:c3:c4:16:e8:44:f0:5e:93:c8:62:46:de:ef:cd:
b9:68:c9:64:35:61:82:81:16:07:ac:56:64:e3:7d:fc:57:c8:
53:8d:9b:bd:49:a2:50:89:82:a9:89:21:82:ed:de:06:a4:ca:
ab:f4:b0:96:60:51:47:2e:0d:21:5c:d1:ff:03:0f:02:f3:01:
d4:41:07:92:41:ff:ba:a3:d2:96:27:01:a7:37:a9:a7:c0:7c:
e6:78:04:6f:56:b4:f7:a0:0f:79:18:6a:f9:ad:46:17:b3:d9:
42:cd:2c:9b:29:68:67:6c:b9:3e:6c:1b:39:07:9d:cf:52:1b:
0d:1d:70:95:b0:30:e3:ab:fc:e9:54:99:23:ce:ef:87:56:81:
8c:a5:81:e3:82:ec:18:f0:fd:d3:a6:97:c6:01:ab:d0:4f:3d:
31:28:9f:64:b5:4a:3e:76:bf:00:cf:3e:9a:1f:ee:c6:63:e4:
88:d1:c5:ed:10:bf:20:84:b0:d2:ba:e3:42:01:42:a4:91:d1:
f6:f0:71:63:5b:1d:9c:2f:eb:55:1e:b9:f1:6a:bf:21:11:49:
c0:a0:a3:5c:56:c4:d1:56:c8:5a:85:79:da:9a:d8:5b:5e:31:
7c:80:06:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:52:57 2025 by rpki-client