Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.mft
File: z7dRkZeIZvH8l_Ujx92kCoj353c.mft (raw, json)
Hash identifier: XqJ7m7M/YcTaN53Gfgujzd8l+HvSJq/FZ1iXDNhv3OU=
Subject key identifier: 9B:AA:E7:83:AA:82:5D:03:A2:12:D4:79:3E:69:3C:F4:E6:E2:26:A9
Authority key identifier: CF:B7:51:91:97:88:66:F1:FC:97:F5:23:C7:DD:A4:0A:88:F7:E7:77
Certificate issuer: /CN=cfb75191978866f1fc97f523c7dda40a88f7e777
Certificate serial: 019A4C9866DA4E160CB06216D8266729BF76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z7dRkZeIZvH8l_Ujx92kCoj353c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.mft
Manifest number: 0F78
Signing time: Tue 04 Nov 2025 02:00:47 +0000
Manifest this update: Tue 04 Nov 2025 02:00:47 +0000
Manifest next update: Wed 05 Nov 2025 02:00:47 +0000
Files and hashes: 1: eGtm056yGQQg5bwWBW43RWWJI-o.roa (hash: zk7QR1QAvdxGxg/qd+ZTmDsXohO4v1GDABqIS9ZMrPw=)
2: z7dRkZeIZvH8l_Ujx92kCoj353c.crl (hash: GUhjw6azrXWjr1Ld1oN6cW3Qi+UVSfhlhz/0R4iaNpI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.mft
rsync://rpki.ripe.net/repository/DEFAULT/z7dRkZeIZvH8l_Ujx92kCoj353c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 02:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:98:66:da:4e:16:0c:b0:62:16:d8:26:67:29:bf:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfb75191978866f1fc97f523c7dda40a88f7e777
Validity
Not Before: Nov 4 02:00:47 2025 GMT
Not After : Nov 5 02:00:47 2025 GMT
Subject: CN=9baae783aa825d03a212d4793e693cf4e6e226a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f8:35:dc:33:aa:9d:d9:5a:4c:2e:08:cb:3f:
d9:dc:b7:a9:67:27:e5:4f:f7:47:95:29:e1:3a:2b:
9d:71:d9:1a:b0:9f:90:49:68:96:7c:66:e7:fb:ff:
c7:2e:36:96:4e:14:b1:a1:1f:55:79:23:09:76:75:
03:97:b7:2e:38:29:85:4e:6e:ff:df:e4:3b:d3:8b:
d2:ba:5d:8f:e4:e2:17:07:e5:44:81:86:d5:11:10:
5a:07:c4:2d:20:3d:bd:2f:93:da:ef:29:8a:99:48:
ec:c6:2b:3c:a7:f6:9d:6b:56:ad:63:3e:0e:1d:12:
49:65:5d:83:2c:bb:f0:36:61:a2:63:fb:93:c7:01:
80:9c:08:f9:5b:e7:f9:0f:14:dd:c7:d6:5e:77:d4:
2d:53:8c:67:4c:77:7a:cc:9a:9b:bf:bc:33:e0:a6:
ae:71:59:63:0b:72:ac:7e:ad:b0:bb:17:cc:bd:aa:
47:37:a1:ef:5e:27:bb:e3:77:71:f4:8e:ea:56:d5:
08:3e:b1:20:0a:07:74:34:91:ad:d5:8a:40:8c:80:
b6:3b:dd:ad:4c:51:bd:5a:38:15:b4:51:40:5a:2a:
c8:95:dd:9b:cd:00:83:2b:be:be:c9:2a:9c:64:39:
36:71:0d:bd:d0:c2:e4:f4:3f:ff:00:6b:67:dc:f3:
0a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:AA:E7:83:AA:82:5D:03:A2:12:D4:79:3E:69:3C:F4:E6:E2:26:A9
X509v3 Authority Key Identifier:
keyid:CF:B7:51:91:97:88:66:F1:FC:97:F5:23:C7:DD:A4:0A:88:F7:E7:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z7dRkZeIZvH8l_Ujx92kCoj353c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:68:b8:62:14:fc:c2:d8:29:b5:9f:b5:e4:76:b7:8f:dc:2b:
1b:2d:60:d9:46:b8:cb:ae:12:c0:65:09:e9:a9:b3:fe:0a:ef:
c0:bc:c4:b1:ec:c9:f2:fc:a8:1f:7c:ad:3d:df:9f:ab:1a:b2:
10:4c:48:45:c2:3f:88:33:b7:c3:da:3d:98:c6:ed:b5:cf:92:
52:61:96:73:27:da:ae:c2:87:c0:e8:72:c2:05:6a:16:75:66:
07:ab:ab:d1:8a:41:67:d8:91:77:31:39:51:bb:10:39:a8:d2:
c1:aa:8e:e5:ec:f1:65:a2:f3:61:ed:20:39:20:f5:db:0e:00:
c0:29:c9:4a:f6:a5:3c:6b:b5:1b:05:7c:6e:28:f7:49:e1:35:
1c:dc:ba:1d:06:a7:15:7e:81:b4:a6:d9:c7:c5:97:b2:47:0b:
3a:98:11:af:90:61:c0:73:fb:42:5a:22:c4:bf:be:da:d6:b6:
64:c3:cc:7c:76:c8:51:1c:97:7f:90:53:39:49:66:e8:42:36:
11:5f:1d:04:d9:91:87:fe:78:e8:57:bc:46:46:0f:e2:95:14:
9f:91:21:a6:5b:8b:21:ba:1d:6f:7c:95:ab:60:31:f7:9f:0b:
a0:08:79:b4:94:b3:f6:81:bd:24:62:d4:48:38:90:ff:08:09:
94:9e:3d:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:56:21 2025 by rpki-client