Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.mft
File: zTmPfz1bO4Lc_eyQKwP3M9iV2uc.mft (raw, json)
Hash identifier: EY6L0rTy1ay7g3ECBt9VIvD7UwJbQpE+ymCLXo/vJ1U=
Subject key identifier: BA:B8:85:7C:7B:A1:E1:D7:EC:69:CB:A6:38:F5:3D:26:55:EB:CB:74
Authority key identifier: CD:39:8F:7F:3D:5B:3B:82:DC:FD:EC:90:2B:03:F7:33:D8:95:DA:E7
Certificate issuer: /CN=cd398f7f3d5b3b82dcfdec902b03f733d895dae7
Certificate serial: 019A5451CD3D0B28FD9FABC0DFB31DE98926
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.mft
Manifest number: 059B
Signing time: Wed 05 Nov 2025 14:00:38 +0000
Manifest this update: Wed 05 Nov 2025 14:00:38 +0000
Manifest next update: Thu 06 Nov 2025 14:00:38 +0000
Files and hashes: 1: R7JjHxkLaRMAq-eNFDHFR56Dyhw.roa (hash: QknjqXJUcPnKm7YDFtc8WvDMm5i4FQMrmsy86E9cK0o=)
2: dcPmo2XYjicBKISwFo1ah0M8EAk.roa (hash: dxaAbmfm7We1eLkAnEaZ1vpiKLgIut7Bw847FmfAdkc=)
3: zTmPfz1bO4Lc_eyQKwP3M9iV2uc.crl (hash: vZYtv/TAr3oOYAQBUTPQjCkJMUAztxlgcFF9B9mijJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:51:cd:3d:0b:28:fd:9f:ab:c0:df:b3:1d:e9:89:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd398f7f3d5b3b82dcfdec902b03f733d895dae7
Validity
Not Before: Nov 5 14:00:38 2025 GMT
Not After : Nov 6 14:00:38 2025 GMT
Subject: CN=bab8857c7ba1e1d7ec69cba638f53d2655ebcb74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e5:5a:68:06:94:ac:55:bb:6c:89:71:c7:94:
74:dc:84:a4:68:e8:ee:6a:b5:f1:69:ef:d0:09:34:
02:cb:a9:de:65:8e:97:0f:78:af:a7:20:29:bc:23:
ae:a6:63:24:1d:e0:eb:3c:f5:73:13:e3:a9:23:58:
2a:c4:ab:5d:38:de:eb:68:73:37:e0:5f:c7:cb:f5:
7a:99:80:b4:b2:18:a2:a0:20:04:22:8c:63:cb:d5:
58:29:18:93:fb:4a:b4:13:11:70:67:52:09:51:88:
58:c1:10:f0:d7:b5:dd:62:b3:1b:74:cb:9d:5c:a3:
89:f0:76:40:63:c4:fd:8e:55:3e:31:ff:b8:03:61:
3c:6f:6d:b4:e4:d8:f7:82:d2:7a:bc:a3:e9:7c:60:
f2:e7:71:cd:db:0e:00:68:07:3b:bb:40:cc:ad:52:
22:71:52:5b:98:b8:41:f2:76:8b:18:be:2e:19:fa:
09:3f:0b:d7:8a:93:bf:5c:4c:b9:e3:84:f1:80:d2:
24:07:bc:dd:2b:44:43:9f:30:e6:e0:d8:9d:93:98:
00:02:aa:2e:81:5f:68:b8:d3:98:4c:fe:42:0d:84:
9a:25:a2:9b:c3:85:c3:cf:18:12:44:fd:85:82:0f:
c8:eb:1a:ab:9c:2b:90:f6:19:88:9a:a9:5c:0a:42:
02:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:B8:85:7C:7B:A1:E1:D7:EC:69:CB:A6:38:F5:3D:26:55:EB:CB:74
X509v3 Authority Key Identifier:
keyid:CD:39:8F:7F:3D:5B:3B:82:DC:FD:EC:90:2B:03:F7:33:D8:95:DA:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:f2:65:21:3f:af:7b:6c:65:59:b6:38:ea:a8:71:3b:31:e0:
10:11:c4:10:51:91:b2:c4:55:58:59:5f:e6:da:25:bd:14:32:
3f:60:28:56:59:a3:ea:79:41:91:cb:1d:86:38:aa:67:b2:56:
ee:e2:58:e4:37:5e:48:04:4a:70:99:a9:22:5e:e1:6d:b3:a7:
36:ad:15:82:ed:4e:83:08:99:5f:b0:54:03:1d:87:cf:5d:ae:
37:b9:4a:f1:90:59:24:13:b3:4d:68:7b:0d:02:02:c5:1f:3c:
9e:f1:f9:d4:5a:f4:1a:cf:43:5b:f1:c0:ed:33:11:bf:a0:ee:
af:5e:c2:0a:0e:ec:db:ea:1d:f2:0a:19:f9:b4:97:8d:3f:db:
ee:4c:b9:40:52:de:83:f9:25:39:d4:a0:85:b1:18:37:94:a1:
4b:fa:36:f5:5d:ad:93:e0:6c:93:3d:f0:42:ad:db:f6:f9:fa:
98:5d:cc:b6:15:30:8b:77:43:5e:bd:e7:14:a9:b3:3f:65:bd:
24:a8:68:7d:56:5f:20:ef:56:86:8d:bf:2e:f7:ed:7e:d3:e2:
20:2e:5d:c8:86:7f:78:6e:0f:33:cd:f0:bd:84:47:c9:6e:37:
6e:3d:1a:38:7d:f6:4a:ec:55:ec:49:73:77:4c:f6:a2:66:d9:
d2:22:ac:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:14:36 2025 by rpki-client