Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/3e3483-1845-442d-a59a-dd72550d78ac/1/zQHNoDArgT6xRVea2B9e19KcAgk.mft
File: zQHNoDArgT6xRVea2B9e19KcAgk.mft (raw, json)
Hash identifier: K4yLfzSFihVJBcvHzCfZp4GWuRiBr/HZkwsFZWta7Nk=
Subject key identifier: DC:EC:E8:C6:CE:66:A0:E1:B7:F6:5D:8F:BE:35:CA:ED:E4:86:1D:FB
Authority key identifier: CD:01:CD:A0:30:2B:81:3E:B1:45:57:9A:D8:1F:5E:D7:D2:9C:02:09
Certificate issuer: /CN=cd01cda0302b813eb145579ad81f5ed7d29c0209
Certificate serial: 019A4EF47DC96A34213FCBF424D9835BAA2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zQHNoDArgT6xRVea2B9e19KcAgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/3e3483-1845-442d-a59a-dd72550d78ac/1/zQHNoDArgT6xRVea2B9e19KcAgk.mft
Manifest number: 0C5C
Signing time: Tue 04 Nov 2025 13:00:36 +0000
Manifest this update: Tue 04 Nov 2025 13:00:36 +0000
Manifest next update: Wed 05 Nov 2025 13:00:36 +0000
Files and hashes: 1: 0CX7t2odLe1-aKNEQm4nhIdzG64.roa (hash: uGt7n5BK6nTit2QXoLjymR88j/L4jwCXMbpw123vP/Q=)
2: zQHNoDArgT6xRVea2B9e19KcAgk.crl (hash: 5AVnTfVFtaRzD8aNA+orBMXx51L93AqsXWC8kPtDjyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/3e3483-1845-442d-a59a-dd72550d78ac/1/zQHNoDArgT6xRVea2B9e19KcAgk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/3e3483-1845-442d-a59a-dd72550d78ac/1/zQHNoDArgT6xRVea2B9e19KcAgk.mft
rsync://rpki.ripe.net/repository/DEFAULT/zQHNoDArgT6xRVea2B9e19KcAgk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:7d:c9:6a:34:21:3f:cb:f4:24:d9:83:5b:aa:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd01cda0302b813eb145579ad81f5ed7d29c0209
Validity
Not Before: Nov 4 13:00:36 2025 GMT
Not After : Nov 5 13:00:36 2025 GMT
Subject: CN=dcece8c6ce66a0e1b7f65d8fbe35caede4861dfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:d3:5a:75:7f:7d:29:ed:ff:1f:4f:e5:32:55:
7b:da:61:67:65:3d:4f:46:02:dc:51:41:79:37:30:
18:32:24:64:38:f7:4a:8f:d6:cf:c0:e3:1f:c5:ba:
f9:af:68:6f:f2:4f:63:4d:72:48:ec:67:b1:92:60:
d1:43:03:7a:2a:99:46:ff:98:c9:65:7a:e5:54:52:
24:f1:85:eb:ce:b4:61:5f:fc:6d:c8:8a:32:bb:f8:
2c:26:32:93:7c:c7:bb:5e:b4:ac:b6:21:cb:6f:c4:
fb:09:4d:87:cf:93:7f:81:dd:93:28:24:4e:fc:5c:
e2:90:eb:8a:1b:60:2e:b3:4e:d4:86:4c:d3:5b:4f:
5a:c4:23:3f:37:b2:51:ec:ae:18:e0:71:09:b1:a2:
2e:ad:4a:77:87:be:78:08:33:76:c3:87:07:78:19:
3a:cb:f7:15:7b:d8:d8:d2:a7:d5:f7:b5:6f:74:93:
15:85:12:0a:50:4e:8a:de:76:0f:35:c6:05:18:dd:
1e:4b:69:ee:0d:7f:5b:4d:a5:ce:39:8c:1c:df:bd:
ec:16:c9:3d:13:a2:60:db:86:7d:40:90:22:35:fd:
d3:27:c6:24:25:fb:f3:bc:2c:d1:73:e5:c6:f8:32:
4b:74:72:46:8c:6f:e2:e0:e9:92:6f:6e:f1:e8:bf:
19:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:EC:E8:C6:CE:66:A0:E1:B7:F6:5D:8F:BE:35:CA:ED:E4:86:1D:FB
X509v3 Authority Key Identifier:
keyid:CD:01:CD:A0:30:2B:81:3E:B1:45:57:9A:D8:1F:5E:D7:D2:9C:02:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQHNoDArgT6xRVea2B9e19KcAgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/3e3483-1845-442d-a59a-dd72550d78ac/1/zQHNoDArgT6xRVea2B9e19KcAgk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/3e3483-1845-442d-a59a-dd72550d78ac/1/zQHNoDArgT6xRVea2B9e19KcAgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:29:a7:1d:63:bc:63:32:85:cd:8e:93:b5:e3:7f:da:28:5b:
d9:6a:ad:ec:01:0a:8c:ec:6b:88:29:f2:78:a4:fa:e4:0e:93:
9b:ae:60:4b:3c:02:bf:7e:63:6d:3e:0e:4d:1c:d5:20:b3:02:
3e:fa:bb:ea:4a:bb:43:4d:3a:7e:43:3d:c1:8b:25:fe:93:03:
3d:89:ab:c5:49:38:c2:4d:b4:a0:12:c2:f3:b1:ec:53:68:a8:
99:a8:86:8d:5e:56:bd:a4:eb:14:c5:ec:dc:11:54:33:0c:eb:
cc:60:98:1c:8e:e1:c1:36:da:ac:72:60:97:4a:c0:1f:bf:d1:
7e:a5:e6:c1:d6:e2:8c:98:5f:c3:aa:98:23:3f:b4:71:90:05:
05:78:9c:11:db:c4:13:9f:4b:d2:24:b9:fc:56:aa:29:cd:59:
30:34:fb:45:45:fc:dc:61:37:c9:7a:66:9f:49:3c:62:f0:61:
9e:27:af:4b:78:05:6e:65:d9:6c:9e:27:b8:56:b7:a8:8c:c1:
c8:69:a5:4c:fd:32:f8:7b:6b:76:c7:a5:ca:d4:bf:f9:ca:43:
93:13:27:05:fb:c0:28:87:b3:82:bb:d9:e1:55:6c:78:34:c1:
58:bd:f6:af:b2:2a:85:65:6b:b7:2c:48:4e:ef:30:ae:e8:39:
9d:f4:4c:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:31:17 2025 by rpki-client