Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/c087e9-d11d-44a6-8c4d-2857f17037a1/1/zR5W5MTEpRjyOIpay1rwRSzCpZU.mft
File: zR5W5MTEpRjyOIpay1rwRSzCpZU.mft (raw, json)
Hash identifier: FaH8BtsFXslDB3eiO/eA666CJRZpM2b7urfHpxUfUpY=
Subject key identifier: 45:68:C6:43:55:F1:2C:9E:8C:46:0F:A6:D5:E7:1F:56:00:B4:00:2E
Authority key identifier: CD:1E:56:E4:C4:C4:A5:18:F2:38:8A:5A:CB:5A:F0:45:2C:C2:A5:95
Certificate issuer: /CN=cd1e56e4c4c4a518f2388a5acb5af0452cc2a595
Certificate serial: 019A4DAAED8FC6EF31A779553E8249A43492
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zR5W5MTEpRjyOIpay1rwRSzCpZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/c087e9-d11d-44a6-8c4d-2857f17037a1/1/zR5W5MTEpRjyOIpay1rwRSzCpZU.mft
Manifest number: 0ED4
Signing time: Tue 04 Nov 2025 07:00:38 +0000
Manifest this update: Tue 04 Nov 2025 07:00:38 +0000
Manifest next update: Wed 05 Nov 2025 07:00:38 +0000
Files and hashes: 1: ke5imTlr7fT0_-DE8h9O78Ggh4s.roa (hash: 05xyuy/re9IJXLD81+YTPEcHrtJ82VFe2mcpWEaKIAc=)
2: zR5W5MTEpRjyOIpay1rwRSzCpZU.crl (hash: vJbN+I4aXXXqSGAXQBQWQIw5qTHogdp/xnbG1MWbENU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/c087e9-d11d-44a6-8c4d-2857f17037a1/1/zR5W5MTEpRjyOIpay1rwRSzCpZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/c087e9-d11d-44a6-8c4d-2857f17037a1/1/zR5W5MTEpRjyOIpay1rwRSzCpZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/zR5W5MTEpRjyOIpay1rwRSzCpZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:ed:8f:c6:ef:31:a7:79:55:3e:82:49:a4:34:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd1e56e4c4c4a518f2388a5acb5af0452cc2a595
Validity
Not Before: Nov 4 07:00:38 2025 GMT
Not After : Nov 5 07:00:38 2025 GMT
Subject: CN=4568c64355f12c9e8c460fa6d5e71f5600b4002e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c1:eb:e0:43:28:ac:66:80:b3:33:cc:65:e1:
92:54:5e:ca:7e:c9:35:8f:1c:89:d3:98:3a:c1:d3:
66:c8:11:64:52:3b:b1:8c:0e:c5:d9:50:71:f8:f3:
a9:80:35:22:88:84:c4:f6:10:41:2b:16:f4:74:7e:
ff:b7:a0:4a:45:21:ae:26:f9:8f:06:7c:d0:bb:66:
cc:4e:d0:79:63:d6:66:39:4a:ee:58:6b:d3:71:ee:
ae:71:8f:22:47:31:06:44:fe:38:cb:df:df:42:ab:
30:62:3f:79:89:53:85:d1:49:58:c0:fb:42:df:57:
7b:9d:5d:7c:4a:7e:ac:a8:71:8d:8c:4b:b8:82:a5:
27:8d:9d:31:f3:fe:a9:7c:47:9b:83:85:3a:4f:55:
50:dd:8e:be:e5:c2:3c:e1:85:31:94:11:86:fe:8c:
00:ce:92:4b:ec:ec:8b:28:67:3b:7b:15:8d:18:b7:
a7:ab:0d:6d:b5:97:a5:94:59:23:b0:f4:82:33:30:
d6:60:df:5f:01:fc:8e:ac:c8:79:60:48:db:3b:af:
4d:ce:d9:17:6f:2c:88:40:fd:54:6e:f7:2f:88:13:
6d:42:4b:3e:51:d6:2e:a8:0d:82:ea:06:0a:47:27:
e3:5f:85:1c:86:4f:4e:6f:98:ff:3b:9c:5c:6b:ad:
61:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:68:C6:43:55:F1:2C:9E:8C:46:0F:A6:D5:E7:1F:56:00:B4:00:2E
X509v3 Authority Key Identifier:
keyid:CD:1E:56:E4:C4:C4:A5:18:F2:38:8A:5A:CB:5A:F0:45:2C:C2:A5:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zR5W5MTEpRjyOIpay1rwRSzCpZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c087e9-d11d-44a6-8c4d-2857f17037a1/1/zR5W5MTEpRjyOIpay1rwRSzCpZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c087e9-d11d-44a6-8c4d-2857f17037a1/1/zR5W5MTEpRjyOIpay1rwRSzCpZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:95:0d:11:1d:8d:81:2e:70:83:32:b9:1f:02:e8:5b:95:9d:
63:c0:53:88:f2:b4:59:0d:19:5a:3f:a1:1a:bf:cf:ce:0e:08:
c9:10:6c:58:00:83:65:7a:63:92:91:ee:05:61:67:cf:64:38:
ae:2e:04:b0:2d:0f:1b:69:1d:6c:53:29:99:6c:45:28:7f:82:
e0:d4:7a:5a:06:47:6c:25:82:81:6a:3b:bd:8d:5b:ea:02:d4:
2d:fb:2b:54:24:3c:ac:54:cf:16:77:3e:c7:b1:a7:48:17:af:
c6:3d:97:83:07:66:78:1d:32:9c:7d:83:49:d9:91:f8:8a:ee:
1f:18:c9:8e:97:ca:e8:86:d1:bb:05:d7:b4:3d:8e:19:08:d3:
4d:69:f8:19:94:73:69:af:94:44:00:ac:fe:46:9e:66:d6:64:
c4:e9:9c:15:73:40:d0:f9:5a:96:30:bf:33:be:c8:59:94:ff:
42:e3:2e:43:2b:3a:59:8f:70:06:0b:20:83:97:2c:c5:e5:87:
a6:ef:b0:4a:58:ba:05:55:a0:4a:67:33:1c:a0:4f:0b:91:e5:
5d:fe:d8:4a:e5:b0:15:7a:16:39:e0:a9:1b:0e:88:c0:04:04:
47:c5:30:77:c6:dc:38:86:98:d8:1a:89:0b:1b:4b:ac:ba:9f:
3a:af:2c:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:08:07 2025 by rpki-client