Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/fda298-02c7-4d71-8ad3-951fd75ac9a2/1/z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.mft
File: z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.mft (raw, json)
Hash identifier: /DlCgEI4/nSUX08V0JRtbvnWYQaLxPzGBg6rsePB3Jk=
Subject key identifier: 57:A8:A0:E3:88:BF:1A:58:00:CB:98:90:FD:53:68:35:5C:D1:42:48
Authority key identifier: CF:C0:25:A9:D5:5B:FD:64:37:57:DA:4D:49:9D:CE:17:20:17:74:D2
Certificate issuer: /CN=cfc025a9d55bfd643757da4d499dce17201774d2
Certificate serial: 019A4E18F4D2BBD1237F7E557ED118242276
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/fda298-02c7-4d71-8ad3-951fd75ac9a2/1/z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 09:00:49 +0000
Manifest this update: Tue 04 Nov 2025 09:00:49 +0000
Manifest next update: Wed 05 Nov 2025 09:00:49 +0000
Files and hashes: 1: 6U3Xs040zPO-wT1n1ipqEnLqdc0.roa (hash: iVKPeVo4dn6/xoX4wf7rwRU8cdeCDU4NP9VqaFlc7Ic=)
2: z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.crl (hash: mtnAtWFGpzM3F61m9BtZbJt3lQrnpuR3KrYcbDylH2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/fda298-02c7-4d71-8ad3-951fd75ac9a2/1/z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/fda298-02c7-4d71-8ad3-951fd75ac9a2/1/z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:f4:d2:bb:d1:23:7f:7e:55:7e:d1:18:24:22:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfc025a9d55bfd643757da4d499dce17201774d2
Validity
Not Before: Nov 4 09:00:49 2025 GMT
Not After : Nov 5 09:00:49 2025 GMT
Subject: CN=57a8a0e388bf1a5800cb9890fd5368355cd14248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ab:ce:97:eb:4d:62:d7:9c:f2:0c:51:36:71:
59:9d:95:91:ed:9c:f2:60:e3:78:27:9f:75:06:f3:
52:7a:67:25:9e:79:52:df:39:a2:0e:86:7d:f8:5a:
a1:cd:53:21:e7:6a:cc:eb:20:dd:41:4c:b4:94:74:
78:13:34:ce:3a:27:9c:32:fb:65:90:83:7b:89:b5:
cc:ce:e4:8d:90:bf:a6:3c:38:15:d1:aa:85:cf:65:
de:2a:6a:4d:b3:29:5e:99:9b:90:4e:bb:97:76:22:
bc:52:1f:99:1b:96:0a:0f:71:f3:34:11:be:cc:01:
0f:16:dc:7c:28:80:8b:83:27:56:0a:e3:a5:4b:c3:
3f:b5:df:ab:7f:61:31:c5:09:1d:92:e4:83:44:1a:
42:54:5d:69:5b:bb:3b:27:bd:b7:1c:ff:26:49:e9:
bd:bf:31:87:7d:de:3d:ca:d2:f0:78:c4:b0:45:c6:
06:ac:20:4e:ba:1b:71:7c:0e:d7:e7:94:6f:54:a3:
61:85:33:84:ef:b8:f5:79:4b:c4:7a:d3:9e:3f:37:
b8:8f:5c:2d:81:77:bc:ff:6e:ee:05:18:68:b7:1a:
e7:74:33:4e:42:05:df:a2:3a:8e:a5:c4:38:92:44:
8a:2f:96:73:72:71:79:36:4c:f9:82:24:26:5e:83:
7e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:A8:A0:E3:88:BF:1A:58:00:CB:98:90:FD:53:68:35:5C:D1:42:48
X509v3 Authority Key Identifier:
keyid:CF:C0:25:A9:D5:5B:FD:64:37:57:DA:4D:49:9D:CE:17:20:17:74:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fda298-02c7-4d71-8ad3-951fd75ac9a2/1/z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fda298-02c7-4d71-8ad3-951fd75ac9a2/1/z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:e2:ce:74:1b:7f:d6:a9:89:cd:a3:49:54:a3:eb:da:8e:1d:
81:f4:21:cd:c7:ff:65:bb:86:20:b7:57:cd:e4:20:74:25:be:
96:9a:ad:e1:c2:63:25:90:9b:78:b9:53:43:62:9a:a1:02:ae:
b1:b5:c9:ee:68:a8:2b:ef:3e:07:ed:47:7a:13:18:a1:83:87:
8a:5e:29:fa:87:89:7c:03:c4:a4:cc:0f:fd:e4:fe:5f:c5:7e:
81:d8:da:ec:3a:b1:d7:d4:39:61:5f:04:c1:7b:8e:00:fd:50:
94:5a:7a:6a:0a:ed:b4:09:63:25:17:87:d1:1d:f3:4b:cc:c4:
c9:db:46:da:82:be:cd:6e:24:cd:b0:cb:fb:e9:46:77:f6:45:
ac:a6:bb:91:37:06:90:21:5e:1d:5c:51:98:c8:30:20:c5:86:
14:aa:ae:49:00:c8:53:07:74:f4:d8:d0:8a:4a:c8:4f:c1:e8:
45:ef:3e:ac:9f:06:0d:10:a9:49:1c:39:f6:e4:2b:99:73:57:
fa:38:1a:fe:77:39:b5:f5:2f:50:cf:b3:b1:7d:54:51:60:22:
e3:d2:46:62:8a:b9:d4:a6:1c:a5:2c:ca:91:6a:6f:c1:7a:93:
e9:9d:9f:b4:13:35:e4:b7:b5:cb:67:9b:ba:c6:ce:9a:ff:20:
e3:43:ea:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:47:04 2025 by rpki-client