Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.mft
File: rzrc42ZL8Of2iP9BIlUXNMTRR1Y.mft (raw, json)
Hash identifier: UoZoWQbbSbGf2rCec9UOHl/K+oGoxGtRz0jRxMa6UVA=
Subject key identifier: EE:26:A4:36:B7:79:CC:9D:59:D0:CA:C3:0E:50:EF:D1:5F:5E:2F:B1
Authority key identifier: AF:3A:DC:E3:66:4B:F0:E7:F6:88:FF:41:22:55:17:34:C4:D1:47:56
Certificate issuer: /CN=af3adce3664bf0e7f688ff4122551734c4d14756
Certificate serial: 019A552D58A13D47C9ADB732B09299459533
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.mft
Manifest number: 0145
Signing time: Wed 05 Nov 2025 18:00:26 +0000
Manifest this update: Wed 05 Nov 2025 18:00:26 +0000
Manifest next update: Thu 06 Nov 2025 18:00:26 +0000
Files and hashes: 1: 27OstEMkFz6z8oCspY9UEpTgDCI.roa (hash: lDFDHelXei1RQWdM96bxB8eJAkvqOPb886jPNWfOo/U=)
2: rzrc42ZL8Of2iP9BIlUXNMTRR1Y.crl (hash: VG5uKcvPDhGW51LVpJ4J0rV1X99vt+9MlYqCzUIKqvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:55:2d:58:a1:3d:47:c9:ad:b7:32:b0:92:99:45:95:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af3adce3664bf0e7f688ff4122551734c4d14756
Validity
Not Before: Nov 5 18:00:26 2025 GMT
Not After : Nov 6 18:00:26 2025 GMT
Subject: CN=ee26a436b779cc9d59d0cac30e50efd15f5e2fb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:78:e6:6c:a8:3d:cc:f2:4f:79:fd:8e:e9:a6:
ac:52:cc:83:c7:49:94:43:1a:37:8b:7b:3a:f7:07:
6c:de:82:9d:be:e1:b9:8d:ff:ac:cf:af:56:c3:8d:
f9:94:cd:cd:a7:8f:e4:f6:92:7a:aa:ec:6c:75:7b:
b9:7b:cb:82:33:c3:53:90:c7:71:04:0e:88:e6:f4:
e9:e8:70:33:a9:3e:a8:6a:c4:c6:9a:0c:f1:e0:39:
9a:fc:ae:b9:86:d3:36:1b:43:e1:cc:ef:97:0f:47:
5c:ae:47:15:20:ca:df:52:26:3d:b0:43:e4:be:e9:
c1:1a:f1:ef:33:24:3b:b8:d3:a9:63:25:a7:73:c8:
07:65:7b:40:f6:90:e1:01:11:b4:27:85:5a:31:92:
cf:45:9c:9a:d3:85:e4:04:e1:be:e2:18:23:d1:57:
07:6e:9b:96:17:2a:da:a3:2f:70:3b:52:a1:fa:19:
46:7b:53:66:a0:d7:4b:92:16:fc:96:72:37:ba:75:
db:0a:b8:b0:41:b5:ff:a1:15:d3:5a:04:14:b5:f9:
2f:50:62:66:9e:ff:a9:1e:5f:58:ae:f7:f9:a2:22:
78:0b:02:f3:20:a3:42:f3:0a:13:43:60:8d:a1:8a:
30:7e:82:3c:38:52:cb:97:9f:50:30:c6:69:f9:b0:
67:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:26:A4:36:B7:79:CC:9D:59:D0:CA:C3:0E:50:EF:D1:5F:5E:2F:B1
X509v3 Authority Key Identifier:
keyid:AF:3A:DC:E3:66:4B:F0:E7:F6:88:FF:41:22:55:17:34:C4:D1:47:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:8d:ec:76:32:31:6e:7a:fa:6b:52:df:ee:55:db:fc:c5:60:
c7:37:81:eb:91:ed:10:0f:ff:86:f1:17:45:4f:c5:a4:1b:5d:
ca:09:a7:06:c0:55:19:2a:1a:ca:20:68:9d:80:70:ff:c1:0a:
3e:ec:d5:20:58:cc:85:c8:4a:c9:69:56:b2:09:8e:41:a0:82:
92:91:12:9a:8e:87:e5:38:1f:ee:be:b8:c7:a1:44:ca:94:b2:
f7:4c:ca:82:20:fe:ad:68:02:e1:f7:4a:ed:65:25:b5:28:d7:
f2:26:23:f9:44:ed:d3:09:5a:20:76:15:46:77:cf:85:c4:32:
94:c1:6d:18:fd:f8:01:8d:aa:09:52:75:0c:38:e7:9b:f7:46:
bd:d0:ed:42:d9:68:3b:86:86:e9:63:a2:6f:e7:c4:a2:7c:6d:
7a:f9:7f:68:f1:71:11:fd:9f:b2:9e:81:96:42:a5:2f:8f:be:
57:19:f7:70:a7:6f:c9:0f:d8:21:4a:90:e5:c7:89:7c:f5:f8:
bc:8a:87:99:c3:51:f3:38:bd:a7:0a:f3:7f:25:1d:a4:72:17:
21:8f:dc:65:05:47:fa:22:f0:4f:4b:e1:49:c4:7f:e1:79:02:
12:b9:7f:55:1c:ba:89:66:28:5c:28:67:3b:3e:8a:ec:cc:97:
9b:34:66:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:45:22 2025 by rpki-client