Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/28c90c-9a63-40b4-92cf-2d7b8570dd03/1/zuTBXIcH3739qDvjppPDWUfxbVk.mft
File: zuTBXIcH3739qDvjppPDWUfxbVk.mft (raw, json)
Hash identifier: 20slc67Y1npnp2cEF+G0WAqTLrgeYNyOBLKLHGS48vk=
Subject key identifier: 9A:36:7D:6C:D5:66:A3:C0:1B:24:04:24:5C:66:02:94:96:48:D5:AE
Authority key identifier: CE:E4:C1:5C:87:07:DF:BD:FD:A8:3B:E3:A6:93:C3:59:47:F1:6D:59
Certificate issuer: /CN=cee4c15c8707dfbdfda83be3a693c35947f16d59
Certificate serial: 019A4D05BB6F7F1B77AB586DD67D58FC2A82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zuTBXIcH3739qDvjppPDWUfxbVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/28c90c-9a63-40b4-92cf-2d7b8570dd03/1/zuTBXIcH3739qDvjppPDWUfxbVk.mft
Manifest number: 12D3
Signing time: Tue 04 Nov 2025 04:00:12 +0000
Manifest this update: Tue 04 Nov 2025 04:00:12 +0000
Manifest next update: Wed 05 Nov 2025 04:00:12 +0000
Files and hashes: 1: 1-kWouvqhvO6QXm5D6yd0r-fU40A.roa (hash: JCShaFnKnvA8sZMMixxLfe1BsbpkwxYTmgfNpAOFDxA=)
2: zuTBXIcH3739qDvjppPDWUfxbVk.crl (hash: vDytG7+wFRYVIg/JlQRGTw8oYZHSevnpafZB9aMR1QA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/28c90c-9a63-40b4-92cf-2d7b8570dd03/1/zuTBXIcH3739qDvjppPDWUfxbVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/28c90c-9a63-40b4-92cf-2d7b8570dd03/1/zuTBXIcH3739qDvjppPDWUfxbVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/zuTBXIcH3739qDvjppPDWUfxbVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:05:bb:6f:7f:1b:77:ab:58:6d:d6:7d:58:fc:2a:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cee4c15c8707dfbdfda83be3a693c35947f16d59
Validity
Not Before: Nov 4 04:00:12 2025 GMT
Not After : Nov 5 04:00:12 2025 GMT
Subject: CN=9a367d6cd566a3c01b2404245c6602949648d5ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:9d:c4:1f:08:b3:c4:2f:56:3b:ad:18:5e:63:
9f:01:02:2a:6a:92:6f:cd:5d:d3:49:98:1e:03:28:
d8:95:f0:6d:d1:a4:1e:e7:12:78:ef:d6:98:9d:b2:
f4:6f:3d:23:0d:28:64:36:c8:f3:26:bd:02:40:46:
3b:a6:44:75:34:02:57:bb:af:dc:f8:c5:a5:ac:e5:
18:82:60:df:6e:0a:e0:36:2f:78:ea:9f:20:2e:80:
e9:e4:7e:86:1f:eb:b5:69:91:bb:ca:c2:52:59:b6:
99:a0:fb:cd:41:0b:d9:d9:01:51:78:73:89:19:c5:
7f:b9:9b:c1:44:1a:24:64:01:6d:66:a6:e5:52:6e:
10:3b:ce:ff:d9:90:6d:25:58:41:86:8b:ef:79:2a:
e3:5a:8f:92:18:ba:68:c9:c1:a0:db:e9:d1:fb:7d:
4f:04:84:f3:36:6e:3b:97:a5:d9:e0:a9:e8:eb:ac:
c3:1c:23:a2:14:3d:c0:14:c4:b5:7c:fb:90:bf:82:
88:20:ed:4c:c8:af:bc:54:83:28:9b:20:cb:40:ab:
1d:6d:e5:15:cc:3c:54:cf:29:b6:f3:a0:d7:c2:2c:
1a:10:00:db:0f:40:a1:cc:cc:c8:58:76:f7:3b:c7:
1b:c6:41:b3:fe:e0:21:cd:50:8d:94:d9:6d:cc:94:
81:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:36:7D:6C:D5:66:A3:C0:1B:24:04:24:5C:66:02:94:96:48:D5:AE
X509v3 Authority Key Identifier:
keyid:CE:E4:C1:5C:87:07:DF:BD:FD:A8:3B:E3:A6:93:C3:59:47:F1:6D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zuTBXIcH3739qDvjppPDWUfxbVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/28c90c-9a63-40b4-92cf-2d7b8570dd03/1/zuTBXIcH3739qDvjppPDWUfxbVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/28c90c-9a63-40b4-92cf-2d7b8570dd03/1/zuTBXIcH3739qDvjppPDWUfxbVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:ac:1c:b6:a4:ac:80:36:2c:c2:7c:e3:5e:08:27:a2:72:90:
31:64:95:a7:d8:f3:79:e1:98:5c:0b:9e:69:08:24:95:4a:5d:
2f:c4:eb:aa:e2:8e:3e:57:15:f1:b9:a8:5f:ce:48:89:bf:51:
95:54:be:2d:d8:d7:b7:c4:f5:9b:0f:3e:a0:69:5b:7a:17:14:
84:3a:31:6a:f6:9e:42:ae:ad:b2:d1:b4:dd:28:ea:36:2e:30:
76:bd:5c:c2:b7:6d:35:51:68:fe:fb:5c:82:41:3b:37:d0:95:
f8:c7:b9:4f:7d:e1:3c:21:64:6b:11:68:3d:dc:c2:50:7d:65:
55:93:e4:22:e0:16:b5:46:4a:b4:48:77:54:e1:40:1e:72:41:
21:4d:39:36:12:43:2e:c3:30:00:70:50:20:33:2d:51:6b:15:
e0:df:a0:59:95:93:a1:03:7e:c4:7e:9a:93:d0:aa:b4:8e:6b:
e4:20:b0:e4:6c:32:fe:45:24:7e:f0:2e:f0:19:66:86:ff:5d:
ac:56:3f:dd:0e:03:87:d7:ad:7e:ad:72:e4:3d:71:7d:b1:2a:
a9:2c:8b:28:f1:25:8d:9d:60:6a:fc:5b:ba:32:65:38:5a:14:
fd:07:e1:43:e0:13:ef:a4:85:dc:c7:3d:02:05:7e:8f:58:62:
74:eb:ea:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:17:53 2025 by rpki-client