Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/ze54rYV2B1I7ULYKzZ4iyloQeFQ.mft
File: ze54rYV2B1I7ULYKzZ4iyloQeFQ.mft (raw, json)
Hash identifier: +eUdrERfDfTIK3jAxR1n/KaiHYxZlicaWaXsDDw2Cd4=
Subject key identifier: 5C:05:2C:40:89:D8:37:94:E7:E0:67:68:31:F3:AA:12:F0:2F:6B:56
Authority key identifier: CD:EE:78:AD:85:76:07:52:3B:50:B6:0A:CD:9E:22:CA:5A:10:78:54
Certificate issuer: /CN=cdee78ad857607523b50b60acd9e22ca5a107854
Certificate serial: 019A4D073C5B5E7336B207C475663504CB9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ze54rYV2B1I7ULYKzZ4iyloQeFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/ze54rYV2B1I7ULYKzZ4iyloQeFQ.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 04:01:50 +0000
Manifest this update: Tue 04 Nov 2025 04:01:50 +0000
Manifest next update: Wed 05 Nov 2025 04:01:50 +0000
Files and hashes: 1: X-KNJVz9F02-eLDfaKPH63PtzRc.roa (hash: qtVoMR5Y45CsVcXQuHhRRS1BbnVU7jS1ywbPtWRVweo=)
2: Zi7Ur4wbJWR3EdLIxTIMt470yv8.roa (hash: 2ojUhQY/moH0LhM/gEFCEK3T0bFJRBAMK4gF5wvlAf4=)
3: ze54rYV2B1I7ULYKzZ4iyloQeFQ.crl (hash: Hx7rH5P+vuvkvW4i1B97fExWmdw77WHxFoT3qVJPIKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/ze54rYV2B1I7ULYKzZ4iyloQeFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/ze54rYV2B1I7ULYKzZ4iyloQeFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ze54rYV2B1I7ULYKzZ4iyloQeFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:07:3c:5b:5e:73:36:b2:07:c4:75:66:35:04:cb:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdee78ad857607523b50b60acd9e22ca5a107854
Validity
Not Before: Nov 4 04:01:50 2025 GMT
Not After : Nov 5 04:01:50 2025 GMT
Subject: CN=5c052c4089d83794e7e0676831f3aa12f02f6b56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:7f:83:22:fb:85:07:a4:13:45:91:be:9d:f9:
61:7b:ed:a6:d5:dd:05:6b:e7:a2:ab:07:cb:bc:22:
3c:96:fb:3a:59:36:75:d4:c8:f4:80:79:be:ae:12:
3f:ed:90:4e:d8:18:90:ad:a4:21:09:f9:80:53:70:
65:84:52:3d:5a:05:ab:c0:cb:1d:10:68:a3:13:7d:
6c:8e:ed:17:a1:b7:68:cf:05:1a:d8:19:b8:af:4a:
3d:7c:e8:8b:06:8c:20:60:c7:c7:a8:a9:69:1d:ef:
1a:32:ae:0b:64:59:10:fa:9d:e7:77:36:fc:9e:e6:
1d:9e:2c:f0:a1:3e:36:80:b6:89:e3:19:bb:7b:f6:
8d:bd:e3:a9:3b:3e:ae:fb:a7:81:d3:4f:59:47:d8:
e8:16:06:ac:9a:0d:ff:44:35:5d:b1:9a:8e:35:cf:
44:08:ff:c2:41:83:44:fa:6c:04:39:9d:f4:50:59:
57:5e:25:e7:13:57:ec:ff:70:b3:d9:7e:b2:f5:4b:
c3:21:d4:97:17:9f:b0:79:68:18:e5:7d:64:82:cf:
ba:bb:b1:30:8a:50:66:74:91:8a:b2:b0:b5:d3:0e:
04:24:b2:17:9c:4d:79:39:c3:24:3d:cc:65:3f:57:
89:de:9d:ff:5a:de:2a:71:7f:c7:e9:c4:26:74:b3:
e5:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:05:2C:40:89:D8:37:94:E7:E0:67:68:31:F3:AA:12:F0:2F:6B:56
X509v3 Authority Key Identifier:
keyid:CD:EE:78:AD:85:76:07:52:3B:50:B6:0A:CD:9E:22:CA:5A:10:78:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ze54rYV2B1I7ULYKzZ4iyloQeFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/ze54rYV2B1I7ULYKzZ4iyloQeFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/ze54rYV2B1I7ULYKzZ4iyloQeFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:9e:46:59:f7:0b:89:fd:d1:b7:37:08:a7:5d:47:ee:e8:aa:
3d:e3:a3:20:b8:4a:f4:ec:83:b2:fc:12:6a:68:6a:28:82:ac:
40:e2:90:a5:2c:cc:8e:d4:48:d2:03:c5:8b:8e:5d:cc:96:a7:
64:be:1b:70:75:8d:7e:f7:d5:9c:3b:0d:c5:9b:83:15:66:83:
65:92:f4:d7:96:5c:0a:b9:f5:50:7b:96:ea:c9:ab:06:cd:23:
ba:16:c7:86:ea:55:d4:46:cb:2a:fa:98:08:4a:37:eb:79:ad:
61:f6:a0:02:0a:f7:95:43:85:ae:d0:11:d8:bb:b0:75:eb:d1:
49:bd:06:52:12:35:0e:94:33:25:77:ee:8b:05:4e:6c:b6:66:
bc:34:c7:a2:3a:6d:ed:be:88:ee:1b:72:b8:db:e1:80:ff:b0:
ef:0c:0b:a2:7d:5d:64:ad:6a:da:7a:dd:c2:e6:7f:ea:82:d4:
50:0e:05:bf:8f:4e:9b:7d:e5:f2:28:df:25:73:34:4d:44:b2:
3f:d1:6d:39:63:9d:62:06:dd:ed:a8:e8:ed:34:23:33:2c:f8:
5a:19:1a:34:7b:84:b5:8b:76:68:a6:35:3d:80:8c:e1:10:a3:
6c:ad:59:2c:68:2b:26:a3:08:12:a6:ec:03:c1:ef:34:66:2c:
9d:1b:92:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:19:01 2025 by rpki-client