Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/d38360-4d1f-422e-90ae-08b9e1101aa7/1/zLDKIpEnbX0qL4pwUPS6gn_pEKE.mft
File: zLDKIpEnbX0qL4pwUPS6gn_pEKE.mft (raw, json)
Hash identifier: rbA6jSHfVWXnIZGVggihDNe8iVerKs4tPRK4cC4ovYo=
Subject key identifier: 23:8F:28:A6:E2:1F:07:84:71:D0:88:C3:AC:B7:3A:47:13:3A:1E:F9
Authority key identifier: CC:B0:CA:22:91:27:6D:7D:2A:2F:8A:70:50:F4:BA:82:7F:E9:10:A1
Certificate issuer: /CN=ccb0ca2291276d7d2a2f8a7050f4ba827fe910a1
Certificate serial: 019A4F6290FEBAC1C2ECAB3987F5BDDBE793
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zLDKIpEnbX0qL4pwUPS6gn_pEKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/d38360-4d1f-422e-90ae-08b9e1101aa7/1/zLDKIpEnbX0qL4pwUPS6gn_pEKE.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 15:00:50 +0000
Manifest this update: Tue 04 Nov 2025 15:00:50 +0000
Manifest next update: Wed 05 Nov 2025 15:00:50 +0000
Files and hashes: 1: 3TjgfHBQ3TSR3m9y0lvASlg8xJE.roa (hash: xhRBJVrNxo2QfSSHQs80HTy1SPE+Tw63EIyLJNfW+98=)
2: O9iKTZs-NSCx-2a4wz3hixLMrQo.roa (hash: 9kWdgObviNsf7fH09ytaVex94ijVjQzdPVkcYWojJN8=)
3: zLDKIpEnbX0qL4pwUPS6gn_pEKE.crl (hash: 23RxNHEoGlknhwDCBplydMZ1HwILEYcFYqoGntLOshI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/d38360-4d1f-422e-90ae-08b9e1101aa7/1/zLDKIpEnbX0qL4pwUPS6gn_pEKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/d38360-4d1f-422e-90ae-08b9e1101aa7/1/zLDKIpEnbX0qL4pwUPS6gn_pEKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zLDKIpEnbX0qL4pwUPS6gn_pEKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:90:fe:ba:c1:c2:ec:ab:39:87:f5:bd:db:e7:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccb0ca2291276d7d2a2f8a7050f4ba827fe910a1
Validity
Not Before: Nov 4 15:00:50 2025 GMT
Not After : Nov 5 15:00:50 2025 GMT
Subject: CN=238f28a6e21f078471d088c3acb73a47133a1ef9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:dd:71:80:57:e9:cb:4b:89:a7:98:11:2e:fe:
c0:65:73:eb:24:63:d4:21:03:15:33:22:db:59:a1:
2c:98:4d:17:f4:2a:8a:fa:66:dc:6b:fe:23:2f:39:
f7:f0:e4:bd:c3:79:10:aa:98:00:47:8d:c2:d0:e5:
88:2f:99:29:83:7c:97:7c:f3:0e:2f:b4:a8:49:cc:
40:3b:44:33:74:eb:90:0b:23:5e:f8:33:fe:80:0c:
7f:48:b0:0d:e0:ec:df:79:28:5a:92:07:c0:9a:47:
fe:9b:6f:de:3b:3a:05:19:0a:86:d6:a1:3f:68:b4:
06:f9:39:0a:94:59:43:30:26:c9:56:87:21:a1:0d:
0f:be:0b:6c:c0:af:bf:57:41:39:4c:5e:7c:fe:7a:
1e:37:e0:da:0a:9d:49:83:2d:f7:5c:2d:bb:0d:92:
fa:72:0f:fc:1e:9b:ce:02:4c:89:ed:a4:04:88:2a:
09:d5:23:2a:15:47:47:e0:12:02:fb:29:f7:b8:04:
fb:6f:a7:a3:88:ba:3f:63:8c:ea:cf:97:f9:64:1c:
8d:cd:53:96:53:39:1d:73:c0:f8:ba:83:a6:a9:5e:
76:f2:b1:eb:0f:73:5c:e7:e2:71:ad:90:01:5d:c5:
74:4d:b4:80:94:38:71:24:59:b1:3e:fd:92:5d:dd:
41:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:8F:28:A6:E2:1F:07:84:71:D0:88:C3:AC:B7:3A:47:13:3A:1E:F9
X509v3 Authority Key Identifier:
keyid:CC:B0:CA:22:91:27:6D:7D:2A:2F:8A:70:50:F4:BA:82:7F:E9:10:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zLDKIpEnbX0qL4pwUPS6gn_pEKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d38360-4d1f-422e-90ae-08b9e1101aa7/1/zLDKIpEnbX0qL4pwUPS6gn_pEKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d38360-4d1f-422e-90ae-08b9e1101aa7/1/zLDKIpEnbX0qL4pwUPS6gn_pEKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:7d:5b:02:27:41:2c:7e:34:eb:8f:24:25:ba:85:b2:d6:c4:
73:2f:69:bb:bd:34:71:f4:94:af:31:64:5d:fd:de:7c:28:f3:
e2:bd:93:f0:89:34:ac:26:eb:cf:f8:19:fc:3e:d3:f3:16:6b:
32:3c:9f:57:7b:fa:03:f3:72:30:3d:91:ef:b7:cd:73:75:54:
93:54:7e:b1:f6:cf:64:ff:09:78:37:48:e6:83:11:f7:07:2b:
84:8d:84:ba:cc:b9:05:5b:53:2e:72:d8:29:f2:fa:20:0b:36:
02:d8:18:37:68:58:5d:30:d4:d6:be:77:9e:dd:d6:fe:57:98:
0a:b9:1a:21:8b:61:18:8c:01:c2:dc:1c:19:f1:67:93:73:91:
70:6c:3f:46:7b:8a:22:5c:57:cb:27:81:6a:f7:a7:b1:f0:34:
76:6c:4a:1c:8f:6e:fe:04:bf:62:47:17:67:8f:fa:04:a7:7c:
81:d9:b4:68:6a:f7:bd:e8:51:07:d4:9a:07:d4:e5:ad:92:6a:
b4:ec:47:8c:f8:d7:92:51:ca:9d:54:fc:3c:09:cd:2d:4f:46:
a9:8a:40:4b:08:c5:5f:e9:ae:b9:7b:14:70:71:da:0a:1a:16:
d9:2e:50:76:31:18:2e:89:32:41:2d:7b:a5:f8:4d:43:a4:59:
01:65:0c:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:12:18 2025 by rpki-client