Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/a82f43-502b-42fb-88eb-83bd66f4e6f6/1/zsY7h6iuwJPb5H3MqShg6oQSKOA.mft
File: zsY7h6iuwJPb5H3MqShg6oQSKOA.mft (raw, json)
Hash identifier: rqjOzYAhro9G46z2JzgemNmyNe/dfD5HrtIpKn4OZX8=
Subject key identifier: 01:0E:32:CE:F2:F7:48:3A:E7:2F:C1:18:18:63:E6:34:0F:0B:EB:52
Authority key identifier: CE:C6:3B:87:A8:AE:C0:93:DB:E4:7D:CC:A9:28:60:EA:84:12:28:E0
Certificate issuer: /CN=cec63b87a8aec093dbe47dcca92860ea841228e0
Certificate serial: 019A4C6123730E3BB76FC5D14058C9CB9E7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsY7h6iuwJPb5H3MqShg6oQSKOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/a82f43-502b-42fb-88eb-83bd66f4e6f6/1/zsY7h6iuwJPb5H3MqShg6oQSKOA.mft
Manifest number: 0C14
Signing time: Tue 04 Nov 2025 01:00:25 +0000
Manifest this update: Tue 04 Nov 2025 01:00:25 +0000
Manifest next update: Wed 05 Nov 2025 01:00:25 +0000
Files and hashes: 1: oDVjxYPm7vPq-9FQVAv-wdPcmhE.roa (hash: SVNTWU/SFE8BeAZ7Bb0M+S0ysWhdx0WLLM1QECYtWDg=)
2: zsY7h6iuwJPb5H3MqShg6oQSKOA.crl (hash: D7qOKWbdHPQxfzKZw4uw1WJpgLi2lfZ1S8wOBKE7tQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/a82f43-502b-42fb-88eb-83bd66f4e6f6/1/zsY7h6iuwJPb5H3MqShg6oQSKOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/a82f43-502b-42fb-88eb-83bd66f4e6f6/1/zsY7h6iuwJPb5H3MqShg6oQSKOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zsY7h6iuwJPb5H3MqShg6oQSKOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 01:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:61:23:73:0e:3b:b7:6f:c5:d1:40:58:c9:cb:9e:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec63b87a8aec093dbe47dcca92860ea841228e0
Validity
Not Before: Nov 4 01:00:25 2025 GMT
Not After : Nov 5 01:00:25 2025 GMT
Subject: CN=010e32cef2f7483ae72fc1181863e6340f0beb52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2a:f4:a5:0e:34:b1:f8:4c:df:66:35:eb:96:
81:0f:4a:d7:22:44:20:2e:46:61:b3:09:79:d7:d0:
7f:74:12:46:e1:40:b3:09:d7:f7:45:4d:b9:7c:aa:
d9:5d:20:fb:9c:8e:f2:29:6e:c9:b7:12:3f:8d:18:
42:0c:f5:d5:3c:b2:6d:2e:d6:5a:a2:ab:55:f5:51:
be:2f:43:d0:77:57:7c:e3:be:98:6b:2d:ac:8f:47:
c8:45:82:83:82:d4:17:33:d8:2b:16:e2:1c:47:bc:
f9:b7:85:aa:94:dc:14:6f:e3:0c:b0:41:fb:69:05:
5b:b8:55:10:b2:c8:14:4a:56:8b:91:02:ad:f7:1c:
d2:7c:a3:fe:4c:42:e3:4d:4c:28:47:a8:41:d4:fd:
92:34:84:6c:2f:8c:fd:cd:dd:98:e5:a1:45:dc:e5:
18:b6:60:25:65:cc:f8:5c:5a:1d:d4:b0:9c:e6:3e:
09:db:d9:2f:a1:95:e8:33:db:9a:4f:d8:4d:d9:13:
f9:4c:f3:b1:b4:33:fa:8a:f4:2b:54:90:cc:2c:a6:
8a:60:60:bc:e7:24:d9:d1:89:1f:78:e8:82:5a:06:
0b:28:0f:6c:a0:21:2b:76:88:55:17:49:8d:c8:30:
35:51:f1:3d:cf:56:26:cc:fa:11:d3:94:fa:f9:85:
29:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:0E:32:CE:F2:F7:48:3A:E7:2F:C1:18:18:63:E6:34:0F:0B:EB:52
X509v3 Authority Key Identifier:
keyid:CE:C6:3B:87:A8:AE:C0:93:DB:E4:7D:CC:A9:28:60:EA:84:12:28:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsY7h6iuwJPb5H3MqShg6oQSKOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a82f43-502b-42fb-88eb-83bd66f4e6f6/1/zsY7h6iuwJPb5H3MqShg6oQSKOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a82f43-502b-42fb-88eb-83bd66f4e6f6/1/zsY7h6iuwJPb5H3MqShg6oQSKOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:2f:ab:d9:57:6b:91:5b:5c:a3:69:37:01:86:b8:0c:3d:83:
c4:94:01:28:98:70:29:2c:8a:2d:e8:14:da:a4:ff:92:88:d3:
c0:21:fd:e3:d6:1b:9d:67:f6:56:78:93:44:29:3b:a2:7e:1d:
c6:34:0b:55:61:8b:35:18:ed:6e:3e:97:32:51:ea:41:a8:e2:
55:d6:12:64:c4:a7:41:59:d1:41:4e:a4:70:77:83:ac:8d:1d:
b7:c7:4a:5e:41:1d:8a:44:41:3f:9d:da:9c:c4:5f:9c:71:3c:
a2:d0:13:6b:71:7a:80:36:37:08:32:56:ef:3c:97:30:ea:ca:
9c:06:32:be:73:cf:bc:c3:85:8c:70:b1:1d:a7:ca:38:cc:33:
ab:d4:96:73:ab:d6:33:22:28:5f:83:0a:c4:81:b7:76:29:9d:
50:45:7d:dc:bd:22:50:31:27:fa:cb:2d:7a:08:6d:04:c0:68:
1b:96:a4:4c:6f:4f:55:07:1c:54:31:82:27:11:0b:43:e9:fe:
d3:40:db:17:39:7d:1c:75:bd:20:60:06:47:79:9f:bf:de:bd:
9a:5a:be:fa:11:af:a7:f3:4e:36:b9:62:ef:8b:06:c7:4d:e7:
07:4a:6c:d9:40:2d:1c:0f:7b:e0:b8:b9:9f:0a:d5:a0:9b:6d:
38:27:99:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:18:16 2025 by rpki-client