Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/097b01-9470-48eb-850d-afc602714e13/1/zGygXEy2HZ4jKSmNNUwqdpvdBdM.mft
File: zGygXEy2HZ4jKSmNNUwqdpvdBdM.mft (raw, json)
Hash identifier: uVCREBPpJPAEep5ZCOm3GNGzmtxQ4ZwSd72Gn4CMI6M=
Subject key identifier: B6:C5:B9:65:9F:6D:DF:37:9F:4B:70:D9:22:42:72:59:FE:0B:F7:26
Authority key identifier: CC:6C:A0:5C:4C:B6:1D:9E:23:29:29:8D:35:4C:2A:76:9B:DD:05:D3
Certificate issuer: /CN=cc6ca05c4cb61d9e2329298d354c2a769bdd05d3
Certificate serial: 019A4DAA7757F89100AF296AB9BB9D284432
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zGygXEy2HZ4jKSmNNUwqdpvdBdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/097b01-9470-48eb-850d-afc602714e13/1/zGygXEy2HZ4jKSmNNUwqdpvdBdM.mft
Manifest number: 1707
Signing time: Tue 04 Nov 2025 07:00:08 +0000
Manifest this update: Tue 04 Nov 2025 07:00:08 +0000
Manifest next update: Wed 05 Nov 2025 07:00:08 +0000
Files and hashes: 1: 1QFlrvAPCEY9CxtKdM8ySIJ2CQM.roa (hash: qOb1k95cjdyB0rlC/+JRqF7RzF8ycajnDjjrG1VLQhQ=)
2: zGygXEy2HZ4jKSmNNUwqdpvdBdM.crl (hash: fc3BsSJsl0zQtRqECdrFZHiDHttPCaAm9GrmRNYlB44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/097b01-9470-48eb-850d-afc602714e13/1/zGygXEy2HZ4jKSmNNUwqdpvdBdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/097b01-9470-48eb-850d-afc602714e13/1/zGygXEy2HZ4jKSmNNUwqdpvdBdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/zGygXEy2HZ4jKSmNNUwqdpvdBdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:77:57:f8:91:00:af:29:6a:b9:bb:9d:28:44:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc6ca05c4cb61d9e2329298d354c2a769bdd05d3
Validity
Not Before: Nov 4 07:00:08 2025 GMT
Not After : Nov 5 07:00:08 2025 GMT
Subject: CN=b6c5b9659f6ddf379f4b70d922427259fe0bf726
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:48:a7:09:4b:11:3a:a5:2f:e1:29:40:43:eb:
06:02:07:03:6d:26:e9:9e:f5:c9:62:b4:f4:21:93:
5d:46:a2:bc:84:d2:56:6a:15:42:86:9e:33:f2:d0:
9b:a8:ad:57:d2:1f:4d:83:5a:35:ce:55:8a:74:0d:
51:f8:32:31:ea:85:0a:f0:54:90:31:a9:03:9c:40:
9f:13:9a:94:69:c7:1f:27:56:76:7a:62:88:37:91:
a8:12:82:4d:4a:47:20:94:5a:1b:ef:b2:f2:9b:72:
dc:ce:27:65:a2:fd:63:52:0f:1d:a2:26:19:30:ee:
14:d0:f7:df:d6:21:7a:58:83:52:23:32:58:fb:bb:
63:6a:a2:22:63:71:a1:91:f7:1a:ce:0b:13:87:43:
54:37:7e:bd:1c:8a:cb:6c:67:7a:bf:9e:74:6c:bc:
2d:65:8e:43:5d:ed:2f:3c:f0:e8:af:ce:05:71:cf:
6d:d1:b8:70:1d:21:27:fe:e7:c6:bb:7d:86:25:82:
95:e5:74:68:04:a4:fa:53:bf:22:a0:5c:f4:e2:07:
b1:2e:7b:95:22:5e:4b:90:ea:fe:73:8b:55:33:82:
b5:46:4a:6e:f5:c3:51:28:16:a9:07:f4:c1:0e:4f:
7c:37:43:a0:b4:56:cb:54:fd:ab:e1:96:d3:fc:26:
fe:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:C5:B9:65:9F:6D:DF:37:9F:4B:70:D9:22:42:72:59:FE:0B:F7:26
X509v3 Authority Key Identifier:
keyid:CC:6C:A0:5C:4C:B6:1D:9E:23:29:29:8D:35:4C:2A:76:9B:DD:05:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zGygXEy2HZ4jKSmNNUwqdpvdBdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/097b01-9470-48eb-850d-afc602714e13/1/zGygXEy2HZ4jKSmNNUwqdpvdBdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/097b01-9470-48eb-850d-afc602714e13/1/zGygXEy2HZ4jKSmNNUwqdpvdBdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:f2:4a:1e:49:dd:27:1a:19:74:ba:ee:27:e0:46:b2:01:80:
41:58:84:ba:df:d8:47:1a:a8:df:55:88:ce:0d:ba:ee:b7:70:
4b:09:21:15:25:8f:4a:d4:c6:75:f2:5e:9a:49:d0:e1:c3:87:
e7:c3:ea:25:3f:95:2e:13:f1:25:96:9e:5a:60:a0:d7:28:a8:
40:a8:4f:a7:0f:fd:03:d9:57:e4:3a:bd:be:2c:85:77:e6:a2:
c2:f1:d8:14:78:5a:6b:cb:b1:db:fa:c9:d9:1e:a5:df:39:88:
03:ca:06:17:11:95:60:d7:97:b8:98:79:15:75:a7:60:ff:15:
0c:4b:cc:4e:24:d6:63:cf:b1:63:81:46:16:7c:7d:1b:3c:b6:
55:ce:c2:e0:07:47:0a:a7:60:44:d8:68:3f:dc:72:05:cf:df:
6c:2b:a3:9a:ca:53:77:b2:47:5c:5b:12:a4:34:c6:61:a1:9c:
49:87:eb:bd:f3:78:ef:fe:ff:ce:ae:5f:29:05:ea:1d:44:14:
60:47:e2:59:55:0f:1e:eb:5b:e0:3b:11:ab:98:e3:bc:3a:c7:
09:4d:cf:0f:37:df:d8:b4:55:fc:e2:4d:91:f2:86:d8:fe:ce:
2c:f0:af:a5:d2:d2:3b:10:d0:ca:9d:a5:44:8a:be:98:2e:d7:
7a:f8:c7:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:56:14 2025 by rpki-client