Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.mft
File: zybJGvCrJmijYBstlX3EzgAtWYY.mft (raw, json)
Hash identifier: mVpLK12QNt+mclBhx8yMwipDQtArfhSdPCvNWQpWrlw=
Subject key identifier: D1:2F:DF:EE:5B:3D:AC:DC:04:37:21:2C:E9:34:44:8C:12:63:93:7A
Authority key identifier: CF:26:C9:1A:F0:AB:26:68:A3:60:1B:2D:95:7D:C4:CE:00:2D:59:86
Certificate issuer: /CN=cf26c91af0ab2668a3601b2d957dc4ce002d5986
Certificate serial: 019A4D746A3983CEF791E8D41D1807B8534E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zybJGvCrJmijYBstlX3EzgAtWYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 06:01:06 +0000
Manifest this update: Tue 04 Nov 2025 06:01:06 +0000
Manifest next update: Wed 05 Nov 2025 06:01:06 +0000
Files and hashes: 1: JauXkuBrJ-Jj9T7iuekamPiA2KM.roa (hash: +JxWUzvZHawG/TTDHvvjcR4tNCgM0dBRjS+5hf64dGM=)
2: zybJGvCrJmijYBstlX3EzgAtWYY.crl (hash: w3BS/E7ehUrt16ReUhpX75ZSisCxycQZQvh8sHqtsO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zybJGvCrJmijYBstlX3EzgAtWYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:6a:39:83:ce:f7:91:e8:d4:1d:18:07:b8:53:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf26c91af0ab2668a3601b2d957dc4ce002d5986
Validity
Not Before: Nov 4 06:01:06 2025 GMT
Not After : Nov 5 06:01:06 2025 GMT
Subject: CN=d12fdfee5b3dacdc0437212ce934448c1263937a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:80:ff:e4:a5:14:56:1b:6d:6b:c3:4e:be:56:
84:1c:76:e2:42:aa:5a:84:fd:4e:c4:cd:16:f1:5a:
e3:6b:e3:69:fb:d9:86:1b:ae:6f:9a:f6:74:6d:58:
19:7f:49:c8:1d:5e:8a:0d:2a:d2:53:f4:d1:a4:08:
ce:36:7d:f9:1c:a9:3d:c6:c0:e6:97:55:3c:91:5f:
61:1c:70:68:a8:32:76:59:61:1e:16:e2:a3:e2:65:
42:98:08:c7:8c:a6:29:a2:85:b5:be:ae:f8:47:11:
64:3a:c3:d8:c5:73:91:59:41:dd:74:fb:ec:c6:78:
c3:f6:ae:35:d4:de:8b:3a:68:d7:2d:bf:c4:39:2f:
b1:3d:96:9e:1e:72:b9:33:47:5b:35:18:3d:fd:f8:
ef:05:f6:bb:ad:e2:0b:24:be:31:9c:fa:42:a6:2a:
86:a3:03:e2:03:5e:e4:ff:60:a7:8e:85:7b:d4:5a:
0d:7a:5b:eb:8b:d0:ad:94:a9:a4:b4:66:74:66:9c:
ab:95:05:be:65:c0:2b:c0:ae:2c:40:9a:69:7e:c8:
bb:60:43:12:bf:a4:26:08:57:81:9a:e6:ee:66:d4:
8f:fb:56:87:08:98:67:59:69:db:67:0f:b5:f9:49:
73:1c:b6:bc:30:56:51:52:02:0c:7d:f3:b2:23:f0:
bd:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:2F:DF:EE:5B:3D:AC:DC:04:37:21:2C:E9:34:44:8C:12:63:93:7A
X509v3 Authority Key Identifier:
keyid:CF:26:C9:1A:F0:AB:26:68:A3:60:1B:2D:95:7D:C4:CE:00:2D:59:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zybJGvCrJmijYBstlX3EzgAtWYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:01:81:71:f0:5f:00:9e:3c:32:b1:51:7e:0c:61:a3:f1:b1:
68:0b:78:78:3b:11:30:4d:ff:05:8c:5f:ff:9c:39:76:2d:55:
7e:74:59:53:1a:1a:28:db:8b:38:0f:3f:1a:ec:b2:a3:e5:9b:
42:e6:1e:08:50:16:52:5b:d7:86:2d:82:e6:f5:09:86:3b:0c:
ba:55:af:66:f4:35:7b:65:7c:ff:52:ee:b7:2c:02:2d:5e:96:
52:9a:04:a3:95:88:0f:f3:a9:c5:06:46:2c:5d:1f:27:f7:98:
bc:70:d7:a1:d4:d2:17:9d:b2:9d:02:4a:fb:3f:7b:71:47:0c:
a8:56:ca:c7:5a:ec:b7:0a:b0:0c:31:ed:db:cd:4d:bf:df:3c:
19:6e:87:79:95:1a:75:aa:4e:6b:12:6c:2c:92:b9:72:57:d2:
89:48:25:49:54:86:28:b6:9b:c5:2c:c4:6f:5f:15:86:b1:11:
cd:56:86:24:a9:5c:eb:e2:65:0c:46:ea:0a:99:18:72:ef:eb:
4c:28:fb:39:a5:6a:6c:e6:40:50:54:09:9e:29:85:7d:94:10:
9e:e2:b0:ae:fe:a1:d1:9a:24:0c:7d:37:04:62:41:87:92:82:
34:23:8a:22:32:b3:71:81:14:d0:92:54:65:49:c2:e3:7e:20:
fb:89:31:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:56:09 2025 by rpki-client