Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/zdtvEAMOJ2-DFidvQLPUpBhNlN0.mft
File: zdtvEAMOJ2-DFidvQLPUpBhNlN0.mft (raw, json)
Hash identifier: P1UhXI5YV6RiIQoDSzivTXcMEbP6/Rvqrc2qzGBSSrk=
Subject key identifier: FE:CF:AF:2E:73:6A:CF:AA:6E:D5:C9:EE:9C:BA:66:1B:5B:F7:75:35
Authority key identifier: CD:DB:6F:10:03:0E:27:6F:83:16:27:6F:40:B3:D4:A4:18:4D:94:DD
Certificate issuer: /CN=cddb6f10030e276f8316276f40b3d4a4184d94dd
Certificate serial: 019A552DCF28798635FB62B7F41EE59385F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zdtvEAMOJ2-DFidvQLPUpBhNlN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/zdtvEAMOJ2-DFidvQLPUpBhNlN0.mft
Manifest number: 0EA1
Signing time: Wed 05 Nov 2025 18:00:56 +0000
Manifest this update: Wed 05 Nov 2025 18:00:56 +0000
Manifest next update: Thu 06 Nov 2025 18:00:56 +0000
Files and hashes: 1: TvLjh2HZ_d_rU4Q7CUAOZ93ZHYk.roa (hash: UVHQPQPEMrt8FraIptsGKJQLRzbjMltNPf+IrL/aqn4=)
2: _51jX_RgZUWiVEK-S_q11tdiAsw.roa (hash: ojYxEEbJ9SvKIYoya6or2Wh9tzHv7tWRka6iaB4zigM=)
3: bvBCOOZR_53uuydhAIJbHOE_y50.roa (hash: O8HiOtyZpJTxAkEZvvlqiB0vlYICj10yBc68YG6rua0=)
4: zdtvEAMOJ2-DFidvQLPUpBhNlN0.crl (hash: ANPBK5C7Y8gN0fpgCfFFdjixR+e+NLj8WvmJYFF6+bE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/zdtvEAMOJ2-DFidvQLPUpBhNlN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/zdtvEAMOJ2-DFidvQLPUpBhNlN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/zdtvEAMOJ2-DFidvQLPUpBhNlN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:55:2d:cf:28:79:86:35:fb:62:b7:f4:1e:e5:93:85:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cddb6f10030e276f8316276f40b3d4a4184d94dd
Validity
Not Before: Nov 5 18:00:56 2025 GMT
Not After : Nov 6 18:00:56 2025 GMT
Subject: CN=fecfaf2e736acfaa6ed5c9ee9cba661b5bf77535
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:1e:5a:74:5f:5b:03:10:c3:a4:c1:15:98:58:
3b:27:d1:d4:b4:e0:65:0d:a0:a4:30:58:71:3f:9f:
ae:27:81:43:9b:34:f3:46:c0:4c:89:a1:41:be:1f:
88:c6:2c:c1:b0:b5:dc:5a:6d:ae:82:5f:b3:2a:44:
31:ff:14:da:fd:9b:a2:46:e5:da:59:bc:be:e8:b7:
49:18:26:e3:0b:4b:81:b3:c7:7e:5a:10:d0:b9:a0:
2e:0a:9a:86:0f:83:47:05:aa:66:f5:c3:ff:c1:c5:
cd:f5:f4:94:79:cc:f0:3a:14:e8:ac:d6:93:37:87:
92:a2:c1:f2:80:07:6c:4e:9b:b3:5b:b9:1f:b4:dc:
e5:b6:33:4d:20:da:44:82:e6:d9:6b:df:d3:f1:b0:
9f:49:b9:08:53:93:8c:06:57:98:57:ec:53:b3:49:
ef:ad:4c:a1:fa:21:66:80:16:c3:90:d3:89:8c:3d:
de:36:fc:39:d2:0b:9e:f8:34:1e:44:64:e1:bc:25:
71:d5:90:de:7a:b8:33:47:32:76:07:77:91:b6:e0:
af:46:65:7a:77:22:c6:34:ea:e9:77:02:f4:39:74:
5c:c8:67:10:e4:86:ff:cb:96:62:a2:68:d6:58:37:
73:50:f0:9e:90:ef:7a:f0:27:86:7d:b3:c2:b2:e9:
96:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:CF:AF:2E:73:6A:CF:AA:6E:D5:C9:EE:9C:BA:66:1B:5B:F7:75:35
X509v3 Authority Key Identifier:
keyid:CD:DB:6F:10:03:0E:27:6F:83:16:27:6F:40:B3:D4:A4:18:4D:94:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zdtvEAMOJ2-DFidvQLPUpBhNlN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/zdtvEAMOJ2-DFidvQLPUpBhNlN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/zdtvEAMOJ2-DFidvQLPUpBhNlN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:de:25:61:b4:7e:b4:ed:d0:6a:f8:dd:a8:6c:35:cc:f0:98:
aa:60:15:a6:48:ae:a8:cd:71:eb:8b:18:91:2a:50:de:8b:79:
6b:06:3b:3b:0a:0e:40:ec:ac:2d:59:61:1f:01:e0:7d:db:f6:
6e:92:fa:a2:03:7f:55:3f:0d:49:d5:92:77:89:5e:3e:cf:f7:
32:25:00:03:5b:64:0a:7b:4f:92:2c:6f:55:25:9a:ee:d7:0b:
30:57:84:3b:d7:68:79:98:85:55:62:7c:2b:ce:30:5e:0a:26:
b5:03:fd:7d:1a:96:e8:f1:57:da:94:4a:36:4d:74:74:28:f8:
c1:17:61:6c:eb:90:f2:c2:8b:35:a6:3c:d1:92:79:75:8b:e6:
24:17:7a:f5:bc:06:ba:65:d3:c1:ff:c4:7f:b1:36:1b:d3:d6:
ff:13:43:6e:a8:fa:41:b9:70:8b:7d:dc:93:35:7d:34:53:33:
31:16:50:0c:c5:7a:e2:72:42:af:51:78:06:a5:de:de:73:eb:
66:aa:d7:9f:4e:00:a8:e3:22:06:20:fd:18:81:62:c3:78:d0:
38:fa:f2:61:28:31:5a:9c:b5:b5:c0:8f:da:ab:d5:e0:47:c5:
73:a9:6b:83:95:b0:bd:92:cc:67:c4:e4:77:fa:cb:a7:42:dc:
4c:99:b8:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:28:08 2025 by rpki-client