Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.mft
File: znQefeZX5KEPk8qSxReoGywLJR4.mft (raw, json)
Hash identifier: qcPupdYWuv19knHgeRvAjzf+0gC6uj+J53gnOVM3ga0=
Subject key identifier: 22:B3:E6:F0:F7:9C:0F:C2:AC:E7:0F:E1:68:62:E7:68:6E:73:86:36
Authority key identifier: CE:74:1E:7D:E6:57:E4:A1:0F:93:CA:92:C5:17:A8:1B:2C:0B:25:1E
Certificate issuer: /CN=ce741e7de657e4a10f93ca92c517a81b2c0b251e
Certificate serial: 019A4F98EC8E701D6EEBAD5A0ACD4CB3F5D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/znQefeZX5KEPk8qSxReoGywLJR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.mft
Manifest number: 0D01
Signing time: Tue 04 Nov 2025 16:00:13 +0000
Manifest this update: Tue 04 Nov 2025 16:00:13 +0000
Manifest next update: Wed 05 Nov 2025 16:00:13 +0000
Files and hashes: 1: ZIl-tGPYsmILe8aUvhHfFRisBTg.roa (hash: ELX+nfW5VdhOFYsiqhpPo4rEHXv1DoXfvUrKNYNv+iU=)
2: znQefeZX5KEPk8qSxReoGywLJR4.crl (hash: TAMhSnAurzvGf4up4zgLiFsl5bWxen3QXmpm7pPetms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/znQefeZX5KEPk8qSxReoGywLJR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:98:ec:8e:70:1d:6e:eb:ad:5a:0a:cd:4c:b3:f5:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce741e7de657e4a10f93ca92c517a81b2c0b251e
Validity
Not Before: Nov 4 16:00:13 2025 GMT
Not After : Nov 5 16:00:13 2025 GMT
Subject: CN=22b3e6f0f79c0fc2ace70fe16862e7686e738636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:92:b7:83:6e:ef:47:7e:65:d1:56:30:5c:31:
d8:24:9e:56:ac:50:55:4a:aa:f2:cc:1b:83:1c:2a:
4b:bf:f1:5e:ec:ad:17:09:41:ea:03:b3:c4:c7:df:
5c:e4:49:2f:37:28:fc:8c:bc:5b:cf:de:13:e6:ec:
35:b1:e8:14:ef:61:4d:4f:26:2d:25:0c:04:6a:ae:
b2:0e:bc:cc:e7:ef:fb:7b:ad:90:96:a1:68:86:dd:
c2:f1:70:b3:6b:71:92:d0:6d:4d:c1:fa:45:ab:03:
5a:b1:cf:d1:87:2e:26:38:e9:9e:01:dd:f0:99:0a:
00:bb:13:33:10:60:28:50:4a:c4:d7:18:32:4b:90:
ef:2d:c2:dc:07:e7:18:0a:b6:87:71:38:1c:f1:d7:
c8:05:89:a0:87:cf:1d:5c:c9:65:21:95:8d:30:a9:
cb:b4:4d:de:d3:2d:b6:88:31:fa:ec:83:4d:92:7d:
9f:04:af:1f:d9:b0:33:1c:db:a3:f7:2a:ad:1e:3e:
2b:3b:49:f7:81:a8:e9:09:e8:97:30:0b:6a:45:d2:
97:79:73:8b:55:db:64:65:ff:4d:29:e3:ef:f9:a4:
d1:18:fa:eb:4e:82:95:e6:7e:07:aa:9f:fe:bb:ed:
db:c6:5b:ba:86:bd:64:20:25:b4:54:30:f5:07:e9:
fb:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:B3:E6:F0:F7:9C:0F:C2:AC:E7:0F:E1:68:62:E7:68:6E:73:86:36
X509v3 Authority Key Identifier:
keyid:CE:74:1E:7D:E6:57:E4:A1:0F:93:CA:92:C5:17:A8:1B:2C:0B:25:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/znQefeZX5KEPk8qSxReoGywLJR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:b1:a1:c6:a6:5f:84:5d:ef:74:03:6d:eb:81:49:61:92:6b:
bd:7e:da:2a:e2:09:82:8a:6f:12:51:60:d9:33:0e:bd:f2:49:
9c:27:08:e9:20:d3:c8:f3:15:c4:09:8b:2c:0d:37:d8:ad:b8:
bd:7a:bd:53:c1:21:8b:19:d3:b6:ea:17:49:45:d2:68:ba:44:
21:03:3f:ed:ba:24:9d:40:ff:da:ce:50:e1:45:8e:51:1b:bf:
de:71:33:cd:5c:80:af:28:ac:b5:f2:d5:74:2a:7b:50:7c:48:
c2:33:0a:f6:35:66:03:e2:82:c2:de:a2:8c:e7:c2:04:95:53:
11:7e:49:fc:47:f4:55:ca:bf:1c:2a:83:29:9c:ed:68:d0:3f:
b1:3a:2f:4b:a9:06:a7:11:f1:e1:7e:53:78:a2:08:65:eb:9a:
12:4e:93:57:ed:bd:89:73:72:66:1d:3d:e5:1f:6c:70:1c:2f:
fc:5c:e0:c9:ab:d7:f0:42:e0:20:68:01:54:33:0e:ad:7f:1b:
f1:b3:5b:56:b4:5f:24:20:b7:fa:e1:77:05:51:9b:69:1d:a0:
3c:9c:67:9f:67:65:6d:6e:8c:6c:42:05:53:5c:78:57:b3:2b:
cc:80:5e:16:d0:83:ae:b4:55:22:db:96:66:fd:00:d6:91:77:
83:32:8a:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:26:29 2025 by rpki-client