Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.mft
File: zUBlln3sCStfyQFS5KlTObodIok.mft (raw, json)
Hash identifier: dLCBxx7eqEBdTm382ChYZQ1FhyctYvoeKWMC0wrWLLg=
Subject key identifier: AB:4E:F4:0F:77:9B:38:1B:E5:88:7D:B1:B7:C8:0B:D7:FF:66:CF:02
Authority key identifier: CD:40:65:96:7D:EC:09:2B:5F:C9:01:52:E4:A9:53:39:BA:1D:22:89
Certificate issuer: /CN=cd4065967dec092b5fc90152e4a95339ba1d2289
Certificate serial: 019A4FCFED7FA00E3FCC37D3D4765AFE677C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zUBlln3sCStfyQFS5KlTObodIok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.mft
Manifest number: 0D63
Signing time: Tue 04 Nov 2025 17:00:18 +0000
Manifest this update: Tue 04 Nov 2025 17:00:18 +0000
Manifest next update: Wed 05 Nov 2025 17:00:18 +0000
Files and hashes: 1: O_Eyba2hWiJ1G1yko5jMVf-Hi74.roa (hash: 6Ep9rh8riGcgqLK1eN8d8mtWbuCz5+WFjzg4sxJvKMw=)
2: zUBlln3sCStfyQFS5KlTObodIok.crl (hash: Q0DyBrpY1MX3Os6lI9Dj38tRd7M9WflpOce7oQw6EpQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.mft
rsync://rpki.ripe.net/repository/DEFAULT/zUBlln3sCStfyQFS5KlTObodIok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:cf:ed:7f:a0:0e:3f:cc:37:d3:d4:76:5a:fe:67:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd4065967dec092b5fc90152e4a95339ba1d2289
Validity
Not Before: Nov 4 17:00:18 2025 GMT
Not After : Nov 5 17:00:18 2025 GMT
Subject: CN=ab4ef40f779b381be5887db1b7c80bd7ff66cf02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a5:6e:62:0c:70:ea:bc:e0:06:df:9c:75:12:
96:27:eb:61:a2:69:93:6f:9c:14:37:13:1a:83:8a:
1b:e5:7b:98:02:10:59:2a:ee:68:4e:ba:33:00:ed:
26:26:0b:fe:37:2a:d4:46:98:50:79:7c:26:4e:72:
1f:e8:b0:95:8f:a1:15:56:77:f9:c6:06:18:61:1e:
76:29:11:2f:44:4c:64:4f:43:ad:ff:9b:f8:cd:93:
cc:5c:1f:e1:f9:9d:13:39:37:db:55:72:d7:06:b1:
ae:3b:80:e4:f0:a2:75:02:f8:fb:18:93:d0:2f:5c:
68:3a:df:bd:c0:ed:30:de:40:4b:6a:4a:85:3a:ac:
09:ad:b8:33:eb:56:fc:ed:81:cf:6a:68:c7:e5:e2:
9a:85:73:cf:52:35:1d:2c:2b:a5:e2:59:72:b1:64:
71:1b:fc:9a:46:6c:34:e9:a9:53:76:0e:2a:6a:26:
50:8e:74:5f:23:a7:ba:b4:87:8c:58:18:ac:21:25:
2d:57:8b:15:d0:39:b0:a5:a4:5c:1b:b3:c9:04:d6:
7e:1c:92:2c:83:11:0d:d7:83:5b:3c:4c:85:e2:74:
f0:d2:3d:b2:b6:e9:56:a6:e7:16:1d:de:5d:dc:6d:
a6:a7:9a:7d:bc:af:a3:7a:aa:c3:e4:d9:09:98:3e:
07:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:4E:F4:0F:77:9B:38:1B:E5:88:7D:B1:B7:C8:0B:D7:FF:66:CF:02
X509v3 Authority Key Identifier:
keyid:CD:40:65:96:7D:EC:09:2B:5F:C9:01:52:E4:A9:53:39:BA:1D:22:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zUBlln3sCStfyQFS5KlTObodIok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:f4:d9:ad:1a:41:0c:21:72:80:31:b0:eb:50:ce:a0:b4:f2:
b6:f5:6e:3d:fa:95:d0:8d:e6:e7:1a:0c:65:14:87:43:95:eb:
e8:0e:2c:9b:86:10:e9:cd:9e:2e:11:86:8f:64:21:73:d2:1a:
15:e6:36:0a:e9:1c:6d:20:3a:90:83:3b:dc:90:2c:07:42:ab:
44:96:61:ae:96:b7:45:23:a3:2b:08:ca:55:ae:60:79:c2:97:
f0:12:c7:ab:4f:55:0b:54:60:0b:88:46:dc:89:1c:50:13:09:
70:d4:76:ac:49:b8:c6:f0:4a:e5:1d:f6:82:14:00:8a:38:08:
9f:e8:38:a4:18:0e:29:1d:9f:01:b6:76:ad:f7:69:d4:67:05:
08:55:7c:3f:ce:c3:5d:a7:48:ac:f5:1e:0e:c5:5a:bb:bd:19:
df:3b:34:f6:d4:d1:91:b2:2c:49:8b:74:4f:ca:be:0c:c6:4a:
ca:1b:e8:b7:cc:5c:d1:96:6d:21:1f:16:74:25:12:97:ff:99:
2a:a8:e7:f0:83:94:98:5c:bf:de:9e:03:d6:d2:a1:77:73:1a:
25:13:1b:0e:0f:63:ba:66:40:80:ac:e7:20:10:74:52:7f:e8:
bd:88:86:0a:cf:f4:7e:c1:89:56:02:da:ec:1f:cc:95:69:35:
ab:b1:ca:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:43:32 2025 by rpki-client