Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/RZR46fHzCyT9FxmNHKyDW8Hk368.mft
File: RZR46fHzCyT9FxmNHKyDW8Hk368.mft (raw, json)
Hash identifier: 0fvMT9C8rBtFUghDPZRT2R3ZJmcUVBcInQGRqNOLE+I=
Subject key identifier: 00:E0:92:75:A3:57:30:1C:3E:74:DD:4A:55:43:CB:D3:35:9C:00:17
Authority key identifier: 45:94:78:E9:F1:F3:0B:24:FD:17:19:8D:1C:AC:83:5B:C1:E4:DF:AF
Certificate issuer: /CN=459478e9f1f30b24fd17198d1cac835bc1e4dfaf
Certificate serial: 019A4F994251B21BE94DF05587AFBBD40A94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZR46fHzCyT9FxmNHKyDW8Hk368.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/RZR46fHzCyT9FxmNHKyDW8Hk368.mft
Manifest number: 07AC
Signing time: Tue 04 Nov 2025 16:00:35 +0000
Manifest this update: Tue 04 Nov 2025 16:00:35 +0000
Manifest next update: Wed 05 Nov 2025 16:00:35 +0000
Files and hashes: 1: Ocy_m2zHXezY_DKukKlr3xhqDhU.roa (hash: UC3MI0ffSuAJ2UoCKWrS6GgqqpWg8XTm0KoUn3rbNKY=)
2: RZR46fHzCyT9FxmNHKyDW8Hk368.crl (hash: vBLY6mkfNZ7LvWF+cx3YhR0Q7l5BAGNximueCnfeYBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/RZR46fHzCyT9FxmNHKyDW8Hk368.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/RZR46fHzCyT9FxmNHKyDW8Hk368.mft
rsync://rpki.ripe.net/repository/DEFAULT/RZR46fHzCyT9FxmNHKyDW8Hk368.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:42:51:b2:1b:e9:4d:f0:55:87:af:bb:d4:0a:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=459478e9f1f30b24fd17198d1cac835bc1e4dfaf
Validity
Not Before: Nov 4 16:00:35 2025 GMT
Not After : Nov 5 16:00:35 2025 GMT
Subject: CN=00e09275a357301c3e74dd4a5543cbd3359c0017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8a:c1:ff:a1:fa:c6:9b:d7:08:a8:36:2b:28:
13:53:df:f7:74:86:c9:34:a8:ad:e4:13:4b:5b:ae:
c3:34:60:a4:b6:a0:00:c4:e7:27:04:0e:68:e0:76:
ee:a5:0e:f9:03:1e:1a:e3:c0:45:84:40:0d:94:13:
eb:72:77:fc:05:b3:4e:8d:a6:00:d9:e9:33:fa:ef:
a4:95:ac:07:92:39:30:42:7a:2d:0c:68:ca:f5:2a:
ab:ad:20:aa:cc:6c:95:a9:03:09:45:43:f9:f6:d9:
9f:d3:bf:29:58:1d:8e:c3:d4:95:10:77:da:39:82:
1d:75:20:c9:c9:c4:41:3f:8d:ae:d5:c2:85:0c:61:
b5:83:74:dd:d0:1d:28:33:b1:c0:4f:c8:03:92:78:
b2:45:d0:4e:58:5b:4d:33:a0:41:b0:51:94:7f:60:
04:0b:42:82:f2:de:78:a0:03:85:38:a3:63:af:87:
a6:66:2a:54:52:d9:34:14:2c:aa:e3:43:fc:07:5d:
3a:ad:c0:03:81:38:f3:c2:89:0b:a6:ba:b7:7a:b3:
dd:19:24:0a:2a:8b:0d:a0:9f:08:9f:96:02:5f:43:
62:e7:a3:2e:8f:2d:59:6e:b2:9c:23:14:38:5a:e3:
2f:53:f4:df:39:92:36:87:0e:12:6c:57:ba:e5:25:
bc:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:E0:92:75:A3:57:30:1C:3E:74:DD:4A:55:43:CB:D3:35:9C:00:17
X509v3 Authority Key Identifier:
keyid:45:94:78:E9:F1:F3:0B:24:FD:17:19:8D:1C:AC:83:5B:C1:E4:DF:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZR46fHzCyT9FxmNHKyDW8Hk368.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/RZR46fHzCyT9FxmNHKyDW8Hk368.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/RZR46fHzCyT9FxmNHKyDW8Hk368.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:c3:14:61:b0:4f:14:2d:4a:dd:90:7f:7d:19:af:4d:93:3a:
07:a7:aa:e9:b6:f0:2e:27:3a:62:8c:0b:96:f0:40:44:7f:b9:
11:04:1f:00:b2:0c:cd:1d:5b:9b:e8:77:f8:18:eb:ac:9d:63:
30:f4:ae:a6:71:69:67:59:ec:94:64:63:54:56:5d:ac:00:58:
bd:0b:09:6a:ec:2e:04:bc:65:c5:72:8f:b8:66:75:8f:7a:46:
44:3b:3e:08:ee:4b:a1:72:7f:1d:9a:74:48:6e:74:c3:fd:ec:
10:60:1d:cf:b6:d8:e4:1e:5d:7c:32:b2:07:ec:2f:e2:9b:08:
eb:95:7a:c5:ea:4f:3b:a7:b5:f5:d5:22:77:24:1c:2b:12:ec:
62:f9:b7:9f:b8:a0:40:73:e8:70:b2:30:4a:77:58:35:9b:1c:
3c:73:30:13:eb:c8:d8:13:43:02:f9:fb:68:43:fd:57:13:e7:
b7:da:2d:60:0e:bf:11:fe:c2:c8:87:27:6d:25:16:47:f6:9f:
b2:fa:bf:9a:96:59:c8:1a:0f:6b:d9:6a:13:80:8f:1c:90:c6:
9c:21:d5:fb:6e:27:1b:9b:11:48:18:5a:cb:f5:4e:3e:36:31:
af:00:1f:b0:ff:1e:2f:09:80:24:b7:4d:f5:a8:68:6e:04:ff:
ec:1b:7f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:34:25 2025 by rpki-client