Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/e55ff5-a3ce-4d87-aba0-781ada6be3a0/1/zkyvauzIwxB7S3EXTrKZdOD9hVs.mft
File: zkyvauzIwxB7S3EXTrKZdOD9hVs.mft (raw, json)
Hash identifier: wgMcxzdmqo1+uF37lGoqfBbongmHsIrqsJ4h+52fguA=
Subject key identifier: 3A:6E:E0:50:88:A2:71:6B:E3:28:C3:29:E2:D8:BF:24:7B:4F:58:66
Authority key identifier: CE:4C:AF:6A:EC:C8:C3:10:7B:4B:71:17:4E:B2:99:74:E0:FD:85:5B
Certificate issuer: /CN=ce4caf6aecc8c3107b4b71174eb29974e0fd855b
Certificate serial: 019A4D06BA8D29E301C9B3B09F57C6295E15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zkyvauzIwxB7S3EXTrKZdOD9hVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/e55ff5-a3ce-4d87-aba0-781ada6be3a0/1/zkyvauzIwxB7S3EXTrKZdOD9hVs.mft
Manifest number: 170A
Signing time: Tue 04 Nov 2025 04:01:17 +0000
Manifest this update: Tue 04 Nov 2025 04:01:17 +0000
Manifest next update: Wed 05 Nov 2025 04:01:17 +0000
Files and hashes: 1: bveNVNZQRYaQggK5H4XE-ImTkzI.roa (hash: RsefAt4XMHkoKxXyBZqmXBMXlqDjbew2tMCZMb8OiUg=)
2: zkyvauzIwxB7S3EXTrKZdOD9hVs.crl (hash: XFQYA7FwBTowCKC8nin5eZgVW1+AVgq2sAkFCPboQvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/e55ff5-a3ce-4d87-aba0-781ada6be3a0/1/zkyvauzIwxB7S3EXTrKZdOD9hVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/e55ff5-a3ce-4d87-aba0-781ada6be3a0/1/zkyvauzIwxB7S3EXTrKZdOD9hVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/zkyvauzIwxB7S3EXTrKZdOD9hVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:06:ba:8d:29:e3:01:c9:b3:b0:9f:57:c6:29:5e:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce4caf6aecc8c3107b4b71174eb29974e0fd855b
Validity
Not Before: Nov 4 04:01:17 2025 GMT
Not After : Nov 5 04:01:17 2025 GMT
Subject: CN=3a6ee05088a2716be328c329e2d8bf247b4f5866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d8:63:52:45:41:3e:24:5c:ec:1b:46:22:87:
76:f4:4d:a3:a1:77:7d:08:4f:0e:d2:91:22:d7:96:
a9:99:32:81:e4:7f:c9:f9:66:10:36:de:91:0e:57:
00:b6:3d:77:54:13:3d:28:62:4d:89:10:cf:0c:5b:
7d:d1:fb:ab:fc:3d:1f:64:24:d1:d9:a3:b5:f8:1c:
cc:8a:57:d8:f2:dd:3e:7e:ef:94:c0:e0:fb:b5:51:
63:af:c6:0c:57:44:29:4a:19:5e:9e:4e:7f:d5:18:
0b:9e:4f:07:40:40:f2:56:1e:64:76:a5:10:d6:5a:
d2:6e:84:9f:b2:c6:2f:de:07:3b:23:6e:73:93:79:
f4:9b:3c:14:0a:6f:e6:45:40:53:30:20:ae:64:82:
d3:34:a7:ba:78:9b:80:f3:14:8b:2b:35:3c:36:37:
a8:4a:80:7a:70:1d:63:89:18:46:ec:78:90:96:6a:
92:5a:ba:1a:2e:8e:9d:e2:45:d8:35:75:8c:16:02:
6d:06:d2:3b:da:9b:b1:17:9d:3c:b8:72:36:de:4a:
5b:aa:21:96:a9:b5:3d:66:02:10:f4:8c:fb:be:3a:
be:d9:fb:06:3e:bf:38:41:f6:02:96:ec:45:d7:5a:
cc:cd:58:da:df:97:33:1a:fe:f9:d5:71:ac:e2:3e:
5d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:6E:E0:50:88:A2:71:6B:E3:28:C3:29:E2:D8:BF:24:7B:4F:58:66
X509v3 Authority Key Identifier:
keyid:CE:4C:AF:6A:EC:C8:C3:10:7B:4B:71:17:4E:B2:99:74:E0:FD:85:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zkyvauzIwxB7S3EXTrKZdOD9hVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e55ff5-a3ce-4d87-aba0-781ada6be3a0/1/zkyvauzIwxB7S3EXTrKZdOD9hVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e55ff5-a3ce-4d87-aba0-781ada6be3a0/1/zkyvauzIwxB7S3EXTrKZdOD9hVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:2b:c5:c5:89:2c:75:6c:0b:2d:66:c9:12:98:3f:8c:94:73:
aa:0d:cb:2f:01:3f:77:4a:40:d1:7c:dc:7c:d1:91:cd:e6:3e:
c7:39:75:de:7b:d1:8c:da:86:e8:51:da:e6:28:ed:e8:26:89:
93:67:0e:29:68:9f:ad:c6:98:cc:b6:a2:9b:9a:38:00:cc:ac:
71:29:7b:1b:0e:30:4c:85:d9:be:6d:3f:c6:58:ea:c5:54:ad:
51:7b:5b:75:25:1b:36:b0:51:26:f4:ea:bc:97:98:3d:40:0e:
23:c1:b7:98:af:cc:d9:e7:7e:ca:48:04:4f:21:91:ea:d9:a4:
f0:d4:6c:49:ce:08:94:d3:61:5e:6d:24:4a:e2:02:ee:33:40:
00:d9:f4:61:0b:7d:56:f3:dd:d5:45:3e:c0:cf:70:7f:06:89:
34:82:b2:60:8e:68:d5:d5:09:89:1c:57:2b:9b:d0:e1:e1:40:
97:34:97:57:2b:43:fd:94:6b:67:ca:5e:f9:21:bb:f3:87:8c:
d7:a6:50:1f:62:15:7e:87:1e:05:cb:90:5d:b7:4c:f3:1d:cf:
5e:64:25:9d:15:23:7c:82:ec:02:c8:7c:23:bb:a3:fd:6e:9e:
56:ce:dc:aa:27:09:e5:ea:ec:e3:f9:c1:ad:19:f4:9b:f7:5a:
92:f7:4f:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:43:45 2025 by rpki-client