Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/z5gzJhaXZSw1VH6Y_AWn4ilO28c.mft
File: z5gzJhaXZSw1VH6Y_AWn4ilO28c.mft (raw, json)
Hash identifier: m+Tu77sySrmPxkaJDE6qgwpZO+m3C8FyXH+CDMahhZw=
Subject key identifier: 3D:97:4D:71:46:2F:05:42:26:7F:D4:E4:53:E2:B7:90:8A:5A:A2:FA
Authority key identifier: CF:98:33:26:16:97:65:2C:35:54:7E:98:FC:05:A7:E2:29:4E:DB:C7
Certificate issuer: /CN=cf9833261697652c35547e98fc05a7e2294edbc7
Certificate serial: 019A4F62735701714579FF4BB59BB7D53AFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z5gzJhaXZSw1VH6Y_AWn4ilO28c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/z5gzJhaXZSw1VH6Y_AWn4ilO28c.mft
Manifest number: 04D8
Signing time: Tue 04 Nov 2025 15:00:43 +0000
Manifest this update: Tue 04 Nov 2025 15:00:43 +0000
Manifest next update: Wed 05 Nov 2025 15:00:43 +0000
Files and hashes: 1: SYPIWFwWfIXYmXxn1AH13wYO028.roa (hash: QWvqjb5YHZY9I2Hyectp6IE4/NuwBT9jZBm7xDi/oyo=)
2: dZiRDpde3UOQ1xx2KMjg7n8fR5U.roa (hash: yPB+megpjB1yqKHInLenUJsMo1ixynNI2NtglnJ5Xh4=)
3: eZlHkjP7bcQ5mqdW_8q_Z3CHJtQ.roa (hash: 34+cbh9+LJiKxMOepvEoyovCBwIb8f2BDirppGV1VYI=)
4: z5gzJhaXZSw1VH6Y_AWn4ilO28c.crl (hash: UorzuhQBoGPeLNa323FM0FYIeiD2nX3935Q7oTl4a7w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/z5gzJhaXZSw1VH6Y_AWn4ilO28c.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/z5gzJhaXZSw1VH6Y_AWn4ilO28c.mft
rsync://rpki.ripe.net/repository/DEFAULT/z5gzJhaXZSw1VH6Y_AWn4ilO28c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:73:57:01:71:45:79:ff:4b:b5:9b:b7:d5:3a:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf9833261697652c35547e98fc05a7e2294edbc7
Validity
Not Before: Nov 4 15:00:43 2025 GMT
Not After : Nov 5 15:00:43 2025 GMT
Subject: CN=3d974d71462f0542267fd4e453e2b7908a5aa2fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:c9:e6:29:f4:42:f3:0e:a5:5d:7c:57:61:0f:
3d:be:45:84:1e:af:9f:35:76:ea:42:c2:3c:f6:2f:
8b:17:02:0b:fb:42:55:eb:d3:14:75:92:41:90:14:
c7:28:72:b5:ee:04:06:c2:ad:1a:fe:12:f4:be:fb:
d9:55:30:6c:68:3f:79:65:1a:f9:ba:9c:78:6c:36:
73:b3:d4:9e:39:e6:85:e1:70:6f:42:ad:20:fb:df:
6c:16:19:52:1c:15:f0:6a:6a:a6:73:64:16:0e:d9:
05:e4:13:5b:15:3d:17:d0:17:cd:39:92:04:e7:96:
42:23:d5:fa:55:b5:a6:d0:ba:70:b0:1c:9c:eb:f4:
bf:cf:f1:91:d6:15:70:2c:ba:0f:2a:ce:64:be:a4:
b5:af:bc:b5:cb:e2:1d:a5:e7:9c:52:a7:5d:35:52:
f7:a3:f1:22:ae:9e:a6:57:88:c1:0e:25:e4:07:63:
e3:6f:a2:80:84:95:0e:ae:b4:0e:aa:e5:4c:9f:35:
48:0f:e8:3d:23:87:fd:6c:2a:a4:a0:37:07:55:c0:
0d:ac:d5:d2:e9:80:bc:c4:3c:2e:49:cf:c1:bd:45:
76:c0:31:bd:45:dd:ab:ed:e4:71:95:63:df:a3:16:
6c:1b:2f:5b:03:46:1d:f1:ba:0e:88:77:02:7f:63:
c7:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:97:4D:71:46:2F:05:42:26:7F:D4:E4:53:E2:B7:90:8A:5A:A2:FA
X509v3 Authority Key Identifier:
keyid:CF:98:33:26:16:97:65:2C:35:54:7E:98:FC:05:A7:E2:29:4E:DB:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z5gzJhaXZSw1VH6Y_AWn4ilO28c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/z5gzJhaXZSw1VH6Y_AWn4ilO28c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/z5gzJhaXZSw1VH6Y_AWn4ilO28c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:65:97:15:93:6c:8f:b3:bd:05:df:84:5a:1f:18:a3:67:70:
6d:4f:20:30:53:a6:dd:9b:d3:d7:58:31:c6:80:c4:b1:a7:06:
64:ea:9f:38:74:38:11:02:a3:f2:06:73:d4:2b:ba:7b:09:01:
b9:e2:39:94:cd:4b:0f:3d:a8:51:66:13:1e:a0:aa:ff:ea:ed:
7d:4b:15:23:40:58:39:d6:f0:42:0b:8c:76:44:f2:ec:f0:76:
fa:b7:78:df:c5:0b:cd:a9:b7:a2:3b:17:80:0c:44:ba:07:23:
ee:b0:0f:22:45:d0:07:20:19:e0:a0:22:ca:6a:e9:bb:cf:5e:
b6:09:93:c1:f6:57:7d:78:be:39:0e:9b:03:34:ca:e4:25:07:
32:e1:5b:44:ff:ee:5e:36:50:1c:30:42:ea:61:0f:ea:a3:8a:
e6:43:04:db:a4:20:1b:88:47:3f:36:ef:b7:a9:07:e3:73:df:
6f:90:ff:48:71:95:92:d5:0e:2c:74:8f:d1:db:c8:16:af:32:
48:35:0c:31:c5:f9:62:7e:3e:af:ba:5f:ad:2a:e5:41:4a:68:
cc:82:ce:9d:66:77:c7:cf:ce:1d:57:39:d1:37:94:55:00:c4:
b6:40:12:b2:a0:e7:b1:f5:44:2a:3e:af:91:3e:d6:a7:30:a3:
23:91:e3:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:00:03 2025 by rpki-client