Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.mft
File: z1VnEiqIypiJoXmLbJQtzAy8dTs.mft (raw, json)
Hash identifier: YaUg14PLt5VSWtXmBo/wS7qNMoDD0SzCRCyt+SkQ2r0=
Subject key identifier: BC:B3:A4:AE:FA:FC:13:EE:D3:10:11:B2:0C:48:FB:52:F5:A0:DA:BE
Authority key identifier: CF:55:67:12:2A:88:CA:98:89:A1:79:8B:6C:94:2D:CC:0C:BC:75:3B
Certificate issuer: /CN=cf5567122a88ca9889a1798b6c942dcc0cbc753b
Certificate serial: 019A4DE221B413C8147F0BC234439E3F2B69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z1VnEiqIypiJoXmLbJQtzAy8dTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.mft
Manifest number: 1756
Signing time: Tue 04 Nov 2025 08:00:56 +0000
Manifest this update: Tue 04 Nov 2025 08:00:56 +0000
Manifest next update: Wed 05 Nov 2025 08:00:56 +0000
Files and hashes: 1: YBpkKYl7hf_TRzIQKlqwjzGdNXQ.roa (hash: h+D2pJlFj/niq8kSK086wec9+0ZFE38ysN0VslreY9A=)
2: ZCpcz07bfoxqZmLpOfiQ2xZolXY.roa (hash: 6dY5wDKmlwtQaOeXt2ULBB4pGFCZsK4sBgWWnMb/pjg=)
3: z1VnEiqIypiJoXmLbJQtzAy8dTs.crl (hash: JHMoDe5j0cgE01/coKy/cqGt5qBp+GVPfskQ9hSwfhs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/z1VnEiqIypiJoXmLbJQtzAy8dTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e2:21:b4:13:c8:14:7f:0b:c2:34:43:9e:3f:2b:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf5567122a88ca9889a1798b6c942dcc0cbc753b
Validity
Not Before: Nov 4 08:00:56 2025 GMT
Not After : Nov 5 08:00:56 2025 GMT
Subject: CN=bcb3a4aefafc13eed31011b20c48fb52f5a0dabe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:d9:61:ff:e6:04:b1:27:5b:41:15:9d:ab:cb:
2a:0e:20:76:27:74:9e:df:83:d1:94:f8:a5:d0:0d:
7d:8a:81:49:a7:71:01:97:bf:44:26:cc:ed:ad:f2:
f4:c2:ce:68:0c:10:88:66:10:78:d2:48:99:53:19:
bf:72:b5:f5:54:96:e2:21:1d:1a:f5:b3:36:28:37:
2e:ea:be:ba:98:ce:50:0a:cb:cc:a8:ab:90:50:f3:
43:a3:be:bf:5d:24:6c:a3:4f:39:a2:de:9b:ad:44:
02:77:a5:81:20:3f:f5:24:6e:04:aa:eb:fe:88:13:
aa:f9:34:01:bf:5b:33:f9:e5:f0:36:2e:b7:82:1f:
54:2f:ca:ad:24:be:94:fa:cc:47:d4:9c:55:de:60:
33:1d:de:2b:1a:ce:d1:b6:91:1a:a1:0b:8e:5e:a8:
69:03:00:26:db:dc:fc:ae:59:9f:71:e4:66:c7:a4:
b5:f2:6d:0b:f7:1b:41:34:0d:72:bd:ea:87:75:bf:
77:df:41:89:0b:48:a6:a3:25:85:0c:f4:9d:29:0b:
0f:4f:d2:c5:a1:16:d2:d7:c2:24:18:c2:78:26:a3:
41:54:64:0b:21:0d:5b:78:cf:f0:3e:93:f3:df:a2:
e5:d8:c1:a6:15:f8:f6:1e:ef:a5:e2:b2:f4:e2:9e:
3f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:B3:A4:AE:FA:FC:13:EE:D3:10:11:B2:0C:48:FB:52:F5:A0:DA:BE
X509v3 Authority Key Identifier:
keyid:CF:55:67:12:2A:88:CA:98:89:A1:79:8B:6C:94:2D:CC:0C:BC:75:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z1VnEiqIypiJoXmLbJQtzAy8dTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:fd:b9:df:65:58:f1:a2:ce:73:70:1d:78:25:81:03:5f:f7:
cf:15:07:42:1a:9f:a3:a1:3e:de:e6:0f:6f:6e:86:cd:be:12:
a5:c0:de:e2:08:62:ca:7c:88:27:ac:0c:ba:d2:63:47:57:36:
63:05:36:08:fc:25:21:5d:93:f5:01:d9:c0:dc:40:f3:57:41:
45:d0:a1:42:79:b6:1d:74:48:73:a1:68:65:3d:80:d7:f4:8e:
e0:5a:56:67:65:78:e6:eb:50:ec:05:3e:60:6f:1d:9f:31:0e:
69:8e:c0:fe:de:0a:d2:c8:a4:aa:ee:c4:28:3c:08:cc:3c:63:
e7:a2:a1:14:d3:c0:07:71:72:a5:cc:63:a2:f3:67:34:7a:06:
de:ec:89:03:31:b9:51:12:d8:8c:97:a7:3e:87:0f:9a:ac:c6:
0e:c0:6d:d1:c6:a7:9d:2e:d9:1b:07:b6:fb:82:94:58:2a:c5:
90:13:d5:98:5e:d5:3c:cb:41:f1:57:7e:d9:c9:ce:f2:c6:09:
dd:64:f6:de:23:ea:dd:1e:97:4c:42:37:ff:3c:4e:bb:cb:43:
47:02:a9:6c:b0:a0:c6:16:c0:aa:11:e4:4b:4b:18:5f:20:7d:
9e:52:86:de:32:35:2f:fa:53:b4:32:7f:1c:21:a7:0b:0f:e3:
82:3b:93:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:48:01 2025 by rpki-client