
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5ce3dc-03e2-4783-a34c-4375d675fcf3/1/C_z94Kdy-nw-nRn6cHf3AmvXcbI.mft
File: C_z94Kdy-nw-nRn6cHf3AmvXcbI.mft (raw, json)
Hash identifier: 0+betxeDt8VMm2hQUa9jyDzEoqeMNYVs/TxWQiPVTXA=
Subject key identifier: 83:38:17:42:9D:CD:C7:F6:99:02:61:EC:1F:78:B6:A3:42:1E:7E:05
Authority key identifier: 0B:FC:FD:E0:A7:72:FA:7C:3E:9D:19:FA:70:77:F7:02:6B:D7:71:B2
Certificate issuer: /CN=0bfcfde0a772fa7c3e9d19fa7077f7026bd771b2
Certificate serial: 019A522C0C8FDB1F8EE57C540E56B6950958
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_z94Kdy-nw-nRn6cHf3AmvXcbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5ce3dc-03e2-4783-a34c-4375d675fcf3/1/C_z94Kdy-nw-nRn6cHf3AmvXcbI.mft
Manifest number: 01E9
Signing time: Wed 05 Nov 2025 04:00:09 +0000
Manifest this update: Wed 05 Nov 2025 04:00:09 +0000
Manifest next update: Thu 06 Nov 2025 04:00:09 +0000
Files and hashes: 1: C_z94Kdy-nw-nRn6cHf3AmvXcbI.crl (hash: 97r/TabSxRXFWEPuLYR8VSk5T57YHV/djMtZPsQG7l0=)
2: ZFWlomNdM98mTRRpq_aoaHkQskg.roa (hash: 2nCI1N6NzlzYTCwqy1BPldF9j5r8eU6FY2+RvTWo+Dc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5ce3dc-03e2-4783-a34c-4375d675fcf3/1/C_z94Kdy-nw-nRn6cHf3AmvXcbI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5ce3dc-03e2-4783-a34c-4375d675fcf3/1/C_z94Kdy-nw-nRn6cHf3AmvXcbI.mft
rsync://rpki.ripe.net/repository/DEFAULT/C_z94Kdy-nw-nRn6cHf3AmvXcbI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:0c:8f:db:1f:8e:e5:7c:54:0e:56:b6:95:09:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bfcfde0a772fa7c3e9d19fa7077f7026bd771b2
Validity
Not Before: Nov 5 04:00:09 2025 GMT
Not After : Nov 6 04:00:09 2025 GMT
Subject: CN=833817429dcdc7f6990261ec1f78b6a3421e7e05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ee:96:38:d2:3d:b2:0e:79:31:fd:4d:48:78:
03:33:13:d7:bd:67:f4:17:3f:3f:d7:91:a6:ea:29:
f8:f5:c2:f0:de:e8:e2:71:a3:05:ac:1b:d0:9c:b0:
33:c6:d5:bd:83:93:88:3a:af:f5:5c:0b:4e:39:da:
6a:1f:51:3b:f9:5d:93:b9:ce:4c:ed:07:7d:79:1f:
b7:9a:e7:de:01:14:94:e2:03:54:ae:6e:1b:a9:be:
de:1e:6c:09:60:32:d0:6a:4d:0d:0d:e9:f3:a7:9a:
6d:ae:ee:5e:f5:ef:07:08:76:6a:b5:fc:e2:d5:8b:
82:bf:c9:92:05:bb:35:59:57:d5:97:51:e0:d4:9f:
6a:02:ed:4d:f9:20:16:bb:7a:98:78:7a:e8:41:08:
de:7f:eb:a0:a4:0b:f9:74:51:be:0c:4e:7a:2f:f8:
cf:0e:98:e6:5c:fb:e5:c2:aa:30:0d:7f:c9:7c:65:
cc:5a:ad:cf:81:c2:db:e6:27:b9:06:90:ff:15:ac:
18:3f:b3:89:63:36:05:bc:ea:5c:3e:23:86:e1:41:
88:18:46:17:04:62:c9:a4:92:0e:f3:68:73:49:30:
00:63:97:73:44:4f:e9:75:9f:21:2f:ef:64:24:5c:
6e:39:e9:b3:0e:74:54:68:3f:97:db:bd:dd:31:63:
02:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:38:17:42:9D:CD:C7:F6:99:02:61:EC:1F:78:B6:A3:42:1E:7E:05
X509v3 Authority Key Identifier:
keyid:0B:FC:FD:E0:A7:72:FA:7C:3E:9D:19:FA:70:77:F7:02:6B:D7:71:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_z94Kdy-nw-nRn6cHf3AmvXcbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5ce3dc-03e2-4783-a34c-4375d675fcf3/1/C_z94Kdy-nw-nRn6cHf3AmvXcbI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5ce3dc-03e2-4783-a34c-4375d675fcf3/1/C_z94Kdy-nw-nRn6cHf3AmvXcbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:fa:e8:3d:20:1f:b3:f0:a3:85:20:67:03:a0:b8:46:46:cd:
a7:37:23:0a:b0:ec:c4:a9:b3:5b:38:9a:f9:b9:8b:a5:54:3d:
15:ab:5f:5c:f8:4a:61:76:18:f4:15:1a:7e:9c:d3:b3:83:0d:
4e:43:82:05:30:1c:e3:33:e0:39:a8:ed:ff:bf:e4:fa:82:04:
49:94:35:87:57:46:fe:dd:74:3c:9e:24:20:b9:39:74:9e:fa:
fa:9f:9d:3d:dc:7b:8b:98:b1:1e:40:84:b1:68:12:44:e4:d0:
58:d5:ad:d2:77:45:86:04:7c:a3:b3:3c:39:c9:da:75:81:b4:
e3:91:bc:77:c4:1e:64:c8:08:e2:89:75:ac:ad:ec:d2:81:8d:
22:69:fa:53:0c:69:2c:27:81:a6:5b:bb:67:7b:1d:d6:5c:82:
84:03:2b:47:4b:af:53:8a:bf:a2:7e:4e:f5:2a:ea:fc:6e:cf:
45:ea:b6:b2:e1:7c:e8:99:a9:4f:cd:12:97:3f:33:12:0d:f6:
82:9f:8e:f8:e0:df:80:52:a2:48:57:28:f0:29:f9:b2:f8:ec:
f5:9d:89:3d:f2:9f:f7:69:c1:77:66:20:0b:d3:9f:f2:63:31:
cd:b4:ec:ba:39:d6:00:4d:1d:af:1f:e3:ec:56:ff:93:6e:a1:
b6:36:84:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:10:51 2025 by rpki-client