Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/a1449e-2adb-4b1a-b23c-bd6d8badcdc0/1/zWmPVbQJWbF4987Lwgw16cE3k0Q.mft
File: zWmPVbQJWbF4987Lwgw16cE3k0Q.mft (raw, json)
Hash identifier: /JYbijJs9z4lmn66cWletPyGLkrrzw7tyy3j9zh0hkE=
Subject key identifier: 79:6F:1A:68:DC:A3:4A:9F:4D:EF:B5:A2:3A:62:79:BF:7D:FA:EA:69
Authority key identifier: CD:69:8F:55:B4:09:59:B1:78:F7:CE:CB:C2:0C:35:E9:C1:37:93:44
Certificate issuer: /CN=cd698f55b40959b178f7cecbc20c35e9c1379344
Certificate serial: 019A5074D970D436EACC4F139DA07755F665
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zWmPVbQJWbF4987Lwgw16cE3k0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/a1449e-2adb-4b1a-b23c-bd6d8badcdc0/1/zWmPVbQJWbF4987Lwgw16cE3k0Q.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 20:00:26 +0000
Manifest this update: Tue 04 Nov 2025 20:00:26 +0000
Manifest next update: Wed 05 Nov 2025 20:00:26 +0000
Files and hashes: 1: 4IRJfTOXaKsLO79AGo1JoJbZxnI.roa (hash: z5NYfWatjYuL33vBwldK4hifLGzdry9JPmtM091yFpE=)
2: zWmPVbQJWbF4987Lwgw16cE3k0Q.crl (hash: sq49ScOCsw6F8+rl9iC2o9ngOSmaVb+CWCkSn9hk3iA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/a1449e-2adb-4b1a-b23c-bd6d8badcdc0/1/zWmPVbQJWbF4987Lwgw16cE3k0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/a1449e-2adb-4b1a-b23c-bd6d8badcdc0/1/zWmPVbQJWbF4987Lwgw16cE3k0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/zWmPVbQJWbF4987Lwgw16cE3k0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:74:d9:70:d4:36:ea:cc:4f:13:9d:a0:77:55:f6:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd698f55b40959b178f7cecbc20c35e9c1379344
Validity
Not Before: Nov 4 20:00:26 2025 GMT
Not After : Nov 5 20:00:26 2025 GMT
Subject: CN=796f1a68dca34a9f4defb5a23a6279bf7dfaea69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3e:54:5c:59:81:9f:87:5e:05:c4:bb:ae:8a:
d6:01:24:12:4f:20:29:4b:95:9d:d2:2b:46:e0:91:
29:fe:c2:1e:6d:2e:f5:8f:74:e0:cf:df:b5:e1:65:
f7:db:15:cf:0e:08:03:0f:08:f0:8a:5c:73:61:df:
8d:61:8c:0e:9c:55:74:7a:55:8a:d7:6a:62:d5:d0:
b0:1d:e1:16:16:6f:f7:67:79:de:20:88:1e:64:df:
7e:cf:6f:2b:82:83:53:7d:ab:c2:ad:d9:8e:6f:e4:
89:97:60:34:e9:76:fd:e8:bd:af:c5:ba:1b:57:58:
1f:11:d0:b6:d7:d4:5e:a4:39:ac:9c:93:ed:b6:ea:
a1:34:09:ba:56:7e:b3:1f:86:d4:3b:fd:d4:03:bf:
72:cb:31:6b:65:7c:84:9e:f8:39:bb:64:5c:cf:8c:
73:18:f1:f8:4b:aa:fe:1a:ca:ba:12:31:66:37:62:
c9:65:9d:d8:7d:79:ed:ce:ab:5e:9f:d2:25:17:64:
78:47:89:25:4a:bd:e5:92:d2:b8:71:35:27:46:e4:
6d:3c:98:a6:f3:59:37:4a:a7:91:c8:0c:51:be:de:
df:60:12:87:49:d0:2b:53:e6:f2:fc:52:e1:ca:d2:
76:67:d5:50:3f:ea:c0:0e:77:65:a2:04:ec:88:b0:
40:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:6F:1A:68:DC:A3:4A:9F:4D:EF:B5:A2:3A:62:79:BF:7D:FA:EA:69
X509v3 Authority Key Identifier:
keyid:CD:69:8F:55:B4:09:59:B1:78:F7:CE:CB:C2:0C:35:E9:C1:37:93:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWmPVbQJWbF4987Lwgw16cE3k0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a1449e-2adb-4b1a-b23c-bd6d8badcdc0/1/zWmPVbQJWbF4987Lwgw16cE3k0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a1449e-2adb-4b1a-b23c-bd6d8badcdc0/1/zWmPVbQJWbF4987Lwgw16cE3k0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:85:8a:aa:74:06:16:44:48:1b:68:33:98:bf:ba:35:fb:3b:
83:3c:72:fa:00:b3:6f:38:f8:94:96:36:07:d7:38:86:eb:89:
23:ab:dc:a6:99:0f:ac:12:49:74:a1:80:1d:75:9b:c2:6c:fa:
1e:5d:9b:cc:1d:7b:91:51:79:41:d1:01:9c:8e:ab:9c:f8:1f:
3a:f3:7c:3b:f1:c3:12:ee:62:dd:7e:67:aa:df:d2:74:34:2d:
9c:d1:0d:3b:37:34:c3:fe:5b:2b:85:8b:e8:82:97:b0:ae:c9:
c2:f7:e6:38:54:33:41:95:1b:1b:3f:63:74:8a:f8:5a:d4:ff:
f1:63:2a:f1:b9:07:90:f5:3b:33:64:0c:36:ed:e5:5b:4d:9e:
bc:b2:e3:61:83:81:ef:41:f8:99:87:b3:c3:74:fb:52:a8:af:
86:f7:21:34:36:fb:e8:2d:16:d0:b9:e4:5f:ee:c6:83:dd:84:
46:07:83:59:65:0a:09:63:95:28:c2:9a:e6:4c:6e:07:0a:9b:
65:0c:b9:f7:19:81:d1:33:34:35:52:c1:75:07:f0:d9:d1:44:
a4:3b:3c:75:ac:4d:d3:84:7b:42:06:66:d5:c5:d5:eb:6d:1d:
ac:40:15:14:33:80:2b:2c:0e:03:fd:82:da:0b:55:43:0a:b4:
f4:87:57:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:09:33 2025 by rpki-client