Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/1d7583-d10c-47db-aee1-58d664210669/1/Rzd55qd8flghMZh2TOKsDmvuYjY.mft
File: Rzd55qd8flghMZh2TOKsDmvuYjY.mft (raw, json)
Hash identifier: ecsifmEyaZQ2hoD8mKjgXkavEElCtzizInKA/H0EoMY=
Subject key identifier: C6:B3:4B:F2:46:BC:22:9C:ED:71:11:D9:40:61:6C:73:71:CA:32:38
Authority key identifier: 47:37:79:E6:A7:7C:7E:58:21:31:98:76:4C:E2:AC:0E:6B:EE:62:36
Certificate issuer: /CN=473779e6a77c7e58213198764ce2ac0e6bee6236
Certificate serial: 019A56401E49C01F3F15C9C094A19E4921FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rzd55qd8flghMZh2TOKsDmvuYjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/1d7583-d10c-47db-aee1-58d664210669/1/Rzd55qd8flghMZh2TOKsDmvuYjY.mft
Manifest number: 01EE
Signing time: Wed 05 Nov 2025 23:00:33 +0000
Manifest this update: Wed 05 Nov 2025 23:00:33 +0000
Manifest next update: Thu 06 Nov 2025 23:00:33 +0000
Files and hashes: 1: 9MjXTd2Lr1yJdEmK8CTeSoInorE.roa (hash: YWK7+nRLe8UfaY8PNHmd6MYAPs7Oj1F/tL2OOejEg1M=)
2: Rzd55qd8flghMZh2TOKsDmvuYjY.crl (hash: gIOGpLRqziuk1Y/or7q5ml8FRAZ1F24L83NB7DWnXqY=)
3: hGPKpUabfTwURA6WsciuOkTPGQI.roa (hash: KEkDVhj8xqmITURn5vzg3xzmIbncL3eYEldek/45XYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/1d7583-d10c-47db-aee1-58d664210669/1/Rzd55qd8flghMZh2TOKsDmvuYjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/1d7583-d10c-47db-aee1-58d664210669/1/Rzd55qd8flghMZh2TOKsDmvuYjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rzd55qd8flghMZh2TOKsDmvuYjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 23:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:56:40:1e:49:c0:1f:3f:15:c9:c0:94:a1:9e:49:21:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473779e6a77c7e58213198764ce2ac0e6bee6236
Validity
Not Before: Nov 5 23:00:33 2025 GMT
Not After : Nov 6 23:00:33 2025 GMT
Subject: CN=c6b34bf246bc229ced7111d940616c7371ca3238
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a5:fd:5c:da:43:60:d9:22:a0:0b:64:a5:f3:
46:38:a6:86:81:b1:b8:2d:e9:12:5c:2d:9a:59:e0:
97:41:70:6c:4d:c2:63:2c:eb:49:d8:74:83:2f:3c:
cf:fb:6e:77:18:a7:46:01:c5:f5:77:32:67:44:de:
ea:81:24:8f:63:0b:b0:33:b5:96:fe:96:ab:e2:5d:
e1:e4:9d:2b:a4:4c:d1:47:46:f3:69:0f:38:f4:de:
c6:11:5c:c8:e0:5d:3c:55:b0:e1:00:72:25:60:fe:
97:5c:4c:d6:87:c0:7e:db:73:d4:b7:03:02:e2:6a:
46:29:3a:31:44:72:37:13:ba:13:6b:a1:07:e2:c6:
25:70:85:ba:13:35:5f:86:38:54:81:a6:f6:32:a4:
b2:62:50:bd:54:8a:90:62:4a:ef:bc:6f:fb:cb:bf:
2f:78:3b:dd:8e:7f:e3:02:4f:a8:5b:c9:23:24:82:
47:e8:84:56:af:cf:b6:77:df:28:6f:77:20:bb:1a:
22:97:8e:47:d0:1a:ae:7e:bb:1a:73:96:19:f9:97:
6e:a1:5b:a9:bb:9a:0f:68:22:0a:47:c4:34:92:e2:
89:c9:ad:46:08:54:be:32:fc:42:ee:40:d8:37:77:
b4:ef:b8:56:1b:b6:c6:57:b2:73:ed:e5:d9:15:82:
07:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:B3:4B:F2:46:BC:22:9C:ED:71:11:D9:40:61:6C:73:71:CA:32:38
X509v3 Authority Key Identifier:
keyid:47:37:79:E6:A7:7C:7E:58:21:31:98:76:4C:E2:AC:0E:6B:EE:62:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rzd55qd8flghMZh2TOKsDmvuYjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1d7583-d10c-47db-aee1-58d664210669/1/Rzd55qd8flghMZh2TOKsDmvuYjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1d7583-d10c-47db-aee1-58d664210669/1/Rzd55qd8flghMZh2TOKsDmvuYjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:cf:6a:38:ff:c1:02:29:c7:a1:91:b7:09:e7:b5:ba:5b:00:
c9:33:dc:8a:dc:1c:4e:54:cf:55:6e:17:1a:f7:39:3a:fa:fa:
26:84:c8:73:fe:fd:42:c0:fd:8b:11:65:dc:83:2a:81:87:6a:
41:b6:40:0c:11:b8:73:64:f4:49:fa:3e:f6:a7:b6:df:7d:74:
21:d4:d8:06:63:2f:1b:aa:2d:e6:39:79:40:f7:e9:4a:f7:a8:
48:bc:5a:8c:0a:5d:1d:bd:3b:96:73:7d:2c:67:56:4b:2e:65:
82:9e:1b:ed:86:e7:9b:1a:c0:98:92:40:fa:d6:92:49:6a:ea:
37:04:f3:5f:0f:a3:7b:e7:3c:30:59:0a:1a:14:39:e1:94:37:
aa:b2:0c:66:f0:92:87:b2:08:1e:90:0d:8b:68:0b:1e:62:29:
5c:1e:04:94:34:57:0a:6c:85:5b:53:e9:d8:76:60:5c:c7:40:
63:ed:8d:5e:00:ab:de:1d:5a:04:99:73:c2:30:a3:e0:27:10:
fd:eb:44:ad:4c:28:f1:0c:73:c1:2c:6d:99:d7:b3:0b:e7:1c:
d7:35:51:22:a9:9e:40:de:87:8d:da:f4:4e:61:6e:1c:a7:a9:
4c:5d:db:44:53:e3:c7:43:f0:32:36:6b:29:0c:cb:2e:19:7a:
0c:9c:28:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 07:29:05 2025 by rpki-client