Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/3d18dc-73c6-4c6f-8c28-5a57234ddb76/1/zUNP2FkiOudujXhkipNylejs15o.mft
File: zUNP2FkiOudujXhkipNylejs15o.mft (raw, json)
Hash identifier: C0wB2oUhxVhO6JKNmVL2NRx9XD6x9xCyBHXvJZjezU0=
Subject key identifier: 63:3F:1A:08:34:13:86:7A:C7:16:E4:BD:4E:54:18:B5:4F:9B:45:5C
Authority key identifier: CD:43:4F:D8:59:22:3A:E7:6E:8D:78:64:8A:93:72:95:E8:EC:D7:9A
Certificate issuer: /CN=cd434fd859223ae76e8d78648a937295e8ecd79a
Certificate serial: 019A4EF43AEDF13E98707310868CC6ECF8C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zUNP2FkiOudujXhkipNylejs15o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/3d18dc-73c6-4c6f-8c28-5a57234ddb76/1/zUNP2FkiOudujXhkipNylejs15o.mft
Manifest number: 06BA
Signing time: Tue 04 Nov 2025 13:00:19 +0000
Manifest this update: Tue 04 Nov 2025 13:00:19 +0000
Manifest next update: Wed 05 Nov 2025 13:00:19 +0000
Files and hashes: 1: R9FIW-YXitjJpX1Q3jcy6-oEIFI.roa (hash: UPbldeCj6tFYKOIutM8BR+cGGez6vIB0/3ZKKmpjUZo=)
2: zUNP2FkiOudujXhkipNylejs15o.crl (hash: wkLb1x7jRqjVFefF2G3GluO7VeqzhP9IKqJhtemanJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/3d18dc-73c6-4c6f-8c28-5a57234ddb76/1/zUNP2FkiOudujXhkipNylejs15o.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/3d18dc-73c6-4c6f-8c28-5a57234ddb76/1/zUNP2FkiOudujXhkipNylejs15o.mft
rsync://rpki.ripe.net/repository/DEFAULT/zUNP2FkiOudujXhkipNylejs15o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:3a:ed:f1:3e:98:70:73:10:86:8c:c6:ec:f8:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd434fd859223ae76e8d78648a937295e8ecd79a
Validity
Not Before: Nov 4 13:00:19 2025 GMT
Not After : Nov 5 13:00:19 2025 GMT
Subject: CN=633f1a083413867ac716e4bd4e5418b54f9b455c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:02:ce:37:c1:88:e6:e7:79:b3:ba:b7:e6:1a:
25:26:78:8c:d3:9b:89:b5:f8:eb:c5:64:85:6c:8b:
76:cf:71:c7:5d:6e:cb:bf:f3:3a:ea:00:cd:c4:37:
7e:59:d5:b6:a8:89:27:1f:f4:10:a6:05:c6:d0:9c:
a2:bb:93:56:34:0c:8d:e2:e3:63:4a:ce:e2:32:d9:
21:a2:01:9e:5d:73:0e:a6:22:e0:1b:f9:e2:b7:06:
2a:00:ae:97:4f:e5:57:16:45:0a:d9:99:bd:ba:5f:
8c:7f:f9:96:b9:c8:d9:18:c9:4c:fb:b4:65:18:9e:
83:24:62:32:1a:24:a9:5c:45:d0:b6:dc:99:c6:23:
29:ca:73:5c:07:e6:1e:6e:e9:b8:98:25:ea:40:7b:
fc:99:4f:fe:71:36:ae:c7:f4:79:33:7b:3f:8a:43:
6d:07:b5:00:fe:77:b2:93:6c:56:02:22:8c:bc:d8:
f1:06:2d:e1:6e:50:04:b2:d9:30:2e:11:27:ac:79:
fb:db:56:36:82:b2:0c:32:14:bd:21:a0:87:da:f4:
00:1c:65:1a:0e:c1:5f:c4:c9:74:5c:b2:3e:94:35:
e7:1e:b1:51:0d:d2:da:c1:49:1d:49:60:06:bb:82:
ef:5b:a0:ab:03:5b:01:c4:10:81:04:b9:f3:b4:05:
9a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:3F:1A:08:34:13:86:7A:C7:16:E4:BD:4E:54:18:B5:4F:9B:45:5C
X509v3 Authority Key Identifier:
keyid:CD:43:4F:D8:59:22:3A:E7:6E:8D:78:64:8A:93:72:95:E8:EC:D7:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zUNP2FkiOudujXhkipNylejs15o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3d18dc-73c6-4c6f-8c28-5a57234ddb76/1/zUNP2FkiOudujXhkipNylejs15o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3d18dc-73c6-4c6f-8c28-5a57234ddb76/1/zUNP2FkiOudujXhkipNylejs15o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:5f:d8:6e:85:68:2e:90:3c:6c:40:53:e4:4a:5f:69:dc:a9:
ef:54:0a:8a:1e:03:90:ce:79:70:14:77:40:bb:54:f3:2a:d5:
e4:8d:ea:57:c7:8b:45:15:4a:0d:dc:cb:3c:a8:a7:64:c1:2d:
e0:a7:dc:ea:21:61:ee:6e:e7:1e:50:c9:48:0f:0d:c8:8d:10:
0a:3c:b5:06:70:08:8e:0c:43:d0:19:04:f2:59:5b:cd:84:59:
e2:0e:26:31:27:d2:f7:5d:2f:8b:e4:bf:89:a6:57:98:46:aa:
60:8f:d5:5f:75:d3:c8:ae:b5:54:8f:c8:57:68:18:9f:95:5a:
dc:e9:36:bb:18:2a:80:a1:69:a9:69:4a:f4:1e:f4:8d:d4:4c:
78:74:ce:5f:a4:47:a4:b9:59:1a:43:d9:2d:03:75:96:0f:41:
f3:38:ef:22:84:b0:5d:ba:ef:08:8b:55:8d:01:7e:01:88:3b:
db:f1:14:56:cb:e6:63:08:ac:90:00:f6:4d:c4:92:6e:5c:a1:
e6:05:75:a1:e8:d5:c0:21:12:e7:16:76:a4:1c:2d:3b:3f:9e:
a8:b0:7e:39:52:06:d0:39:00:53:97:2a:57:28:e0:14:02:b7:
37:1a:57:9a:48:f2:d5:49:a4:85:a5:20:a8:c0:10:36:08:a8:
8f:11:06:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:46:59 2025 by rpki-client