Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/d30eef-495e-43bd-919c-a2a0e2db49d0/1/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.mft
File: 2ZpHzcifRjQvkLDaPDDZ7F_WMjg.mft (raw, json)
Hash identifier: aNMlJcctBJsNp1kVcYEwJxiQDnZy7HnbSboWDiltVZ4=
Subject key identifier: 69:AA:26:03:8C:BD:64:CD:82:D3:D6:03:5D:25:A9:30:4D:35:5A:B9
Authority key identifier: D9:9A:47:CD:C8:9F:46:34:2F:90:B0:DA:3C:30:D9:EC:5F:D6:32:38
Certificate issuer: /CN=d99a47cdc89f46342f90b0da3c30d9ec5fd63238
Certificate serial: 019A515039F26026DABDF8EC5681000A0762
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/d30eef-495e-43bd-919c-a2a0e2db49d0/1/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.mft
Manifest number: 07C3
Signing time: Wed 05 Nov 2025 00:00:03 +0000
Manifest this update: Wed 05 Nov 2025 00:00:03 +0000
Manifest next update: Thu 06 Nov 2025 00:00:03 +0000
Files and hashes: 1: 20Dw3EtRjT0VsUf9XJsc0R3Ci-Y.roa (hash: eYk/5sRuyCDN9GA+BHkMTQtHbaoi0rArz9DpKNEObWk=)
2: 2ZpHzcifRjQvkLDaPDDZ7F_WMjg.crl (hash: M/HjXc6cMwf3grCJyM9pM2M/8xQJRZzhpVrfDCgUjW4=)
3: 4syStsiJ4_nkcJBvU4Ns9Pjm0oQ.roa (hash: 2p6GX7iVYhsRkTJt8jEU86F9xE4rex2UzZbhNm8D8D0=)
4: N_GpQaNWWGxkbuDZ3ulfH-r64tk.roa (hash: IM2SiURjMxHWXsFqFI4woiJ2ADSr+qZUIrRaSOqm3m0=)
5: oHg8th2m-6lkqpucCywGnTPw2Y8.roa (hash: fBPsGM2/mDx5oeAlhLVhusnxHUP4XIwFmPZfB6dTzC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/d30eef-495e-43bd-919c-a2a0e2db49d0/1/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/d30eef-495e-43bd-919c-a2a0e2db49d0/1/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:39:f2:60:26:da:bd:f8:ec:56:81:00:0a:07:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d99a47cdc89f46342f90b0da3c30d9ec5fd63238
Validity
Not Before: Nov 5 00:00:03 2025 GMT
Not After : Nov 6 00:00:03 2025 GMT
Subject: CN=69aa26038cbd64cd82d3d6035d25a9304d355ab9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:dc:78:36:85:14:af:ee:c5:40:90:9b:f4:f2:
0e:b1:5e:bc:e4:eb:b4:92:3f:6f:63:73:bc:41:91:
fa:39:92:58:4d:fd:a0:b6:15:6d:50:47:b5:84:49:
b7:b1:15:77:fa:62:82:2b:d9:9e:e3:ac:92:e6:c5:
2f:58:ec:e7:20:e7:0d:99:ab:2a:70:8e:0f:b9:24:
db:fa:c3:50:de:fd:e9:00:59:75:1f:c9:a5:70:e3:
c9:da:60:f0:dd:be:b6:97:3e:a8:5a:38:f4:03:5a:
ca:47:de:e4:3f:f5:19:66:ee:b7:d2:84:cc:c9:48:
84:22:5b:89:d4:3d:86:df:75:3b:36:c5:d8:a1:ef:
68:3b:40:b6:bd:db:68:4b:96:f0:7a:31:ff:41:5c:
df:53:b4:d1:92:b0:48:6c:6f:58:4e:68:46:f7:5f:
cb:27:d6:d7:64:16:f4:b9:ef:38:b4:e1:30:04:0f:
80:de:f5:5a:57:5f:ae:73:5d:b8:0f:e4:34:68:20:
d0:a6:05:1e:3f:1d:ff:8c:37:47:91:43:7d:b1:26:
8a:83:70:02:30:05:82:6d:27:35:c4:7c:f7:b6:a7:
70:51:27:84:83:25:28:a1:44:30:69:86:78:06:78:
66:7c:7f:0a:a1:c7:53:ba:22:3b:5a:53:9e:3d:8e:
1c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:AA:26:03:8C:BD:64:CD:82:D3:D6:03:5D:25:A9:30:4D:35:5A:B9
X509v3 Authority Key Identifier:
keyid:D9:9A:47:CD:C8:9F:46:34:2F:90:B0:DA:3C:30:D9:EC:5F:D6:32:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d30eef-495e-43bd-919c-a2a0e2db49d0/1/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d30eef-495e-43bd-919c-a2a0e2db49d0/1/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:ad:07:48:b0:81:0b:c9:2b:45:29:3a:ef:60:95:d2:45:14:
ff:0a:d6:cf:c9:ad:e8:8b:8e:de:74:c7:b8:ee:dc:c7:c3:15:
29:2a:5f:ee:74:2e:89:f6:ab:fd:47:51:3c:78:e4:35:6c:7c:
17:5d:7e:8b:5a:b3:18:be:79:1c:dd:5c:8e:63:aa:42:64:52:
68:bc:e1:cc:8f:e3:d7:f3:61:7a:ea:36:41:d3:d1:12:15:8a:
c5:8c:b5:25:dd:a3:40:df:5e:f3:80:6c:62:73:29:a8:3d:45:
d1:52:33:e2:71:b9:30:fb:b0:2e:be:ea:d7:7f:07:e3:e3:47:
47:88:6d:56:31:e1:5b:38:71:67:5a:61:37:db:8e:3e:c7:5d:
d3:72:71:89:30:13:ca:1b:98:e6:61:54:a4:20:21:f8:91:37:
3a:68:f1:ea:af:57:2b:87:9f:09:35:78:76:33:89:74:99:59:
79:d3:61:88:ba:d7:f2:67:37:a3:30:c2:39:9d:ae:62:2f:04:
b0:bd:05:70:a4:3b:92:48:6b:fe:28:af:79:82:a3:db:7f:1c:
7a:eb:ed:36:28:e3:5f:65:83:fc:8e:7a:d9:99:f5:42:99:75:
48:24:1f:b0:b8:83:ea:8d:33:f6:05:ad:3a:54:57:85:c2:c6:
9c:0e:57:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:38:08 2025 by rpki-client