Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/zoqNQOQ3rfSs182zjgQCR3ouUaY.mft
File: zoqNQOQ3rfSs182zjgQCR3ouUaY.mft (raw, json)
Hash identifier: O4pRKEkYBEgzXP3TNuS+pzwnRBZceSK/QRVVB6/LXLs=
Subject key identifier: 84:EB:36:4B:BB:78:1B:80:7D:2B:D1:1C:55:73:67:4E:2E:D0:24:82
Authority key identifier: CE:8A:8D:40:E4:37:AD:F4:AC:D7:CD:B3:8E:04:02:47:7A:2E:51:A6
Certificate issuer: /CN=ce8a8d40e437adf4acd7cdb38e0402477a2e51a6
Certificate serial: 019A53E3FF16FB78C3531A98F2240924C318
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zoqNQOQ3rfSs182zjgQCR3ouUaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/zoqNQOQ3rfSs182zjgQCR3ouUaY.mft
Manifest number: 0A22
Signing time: Wed 05 Nov 2025 12:00:42 +0000
Manifest this update: Wed 05 Nov 2025 12:00:42 +0000
Manifest next update: Thu 06 Nov 2025 12:00:42 +0000
Files and hashes: 1: ZU0tNOC8sQ8jU4fobxNoGMM10f0.roa (hash: QwRQZ/MqRHfZYgeS/1/5p5EaEsQfSDsz5C+SoKx9QXA=)
2: tBAnS3ymUAQmGfi4CNowsEWHdl4.roa (hash: cxNoVhZk6fGnu1pynsqNRKY+P3+OdQAptw2DD5peCyU=)
3: zoqNQOQ3rfSs182zjgQCR3ouUaY.crl (hash: 6wv50ltkLtKdXkZ2JoDdF7AmzvlKqGaNkQgNgyHVyeE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/zoqNQOQ3rfSs182zjgQCR3ouUaY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/zoqNQOQ3rfSs182zjgQCR3ouUaY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zoqNQOQ3rfSs182zjgQCR3ouUaY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:e3:ff:16:fb:78:c3:53:1a:98:f2:24:09:24:c3:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce8a8d40e437adf4acd7cdb38e0402477a2e51a6
Validity
Not Before: Nov 5 12:00:42 2025 GMT
Not After : Nov 6 12:00:42 2025 GMT
Subject: CN=84eb364bbb781b807d2bd11c5573674e2ed02482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:55:0b:73:8c:df:4f:b2:ad:a6:af:aa:01:cc:
8d:76:1d:0f:16:6e:4e:63:6a:15:83:15:07:b9:fd:
d6:f2:17:f5:59:23:32:cc:0e:62:f1:47:8b:9f:c9:
8c:3c:bc:a7:ab:53:a0:06:3d:ff:22:89:26:9f:28:
b2:4a:e9:cc:69:d9:d9:e6:ab:2b:77:47:4f:69:db:
31:c5:dc:36:5d:fc:24:64:d3:ac:24:ff:df:c8:e5:
a0:bd:d1:18:36:d5:54:fa:be:dc:d1:dd:d2:6b:8c:
f1:b4:1b:ca:c2:e8:39:38:02:8c:7b:61:5b:87:94:
63:30:96:7d:31:30:44:aa:49:de:e4:36:40:5e:ce:
75:16:c6:01:4c:e2:9e:26:41:ad:08:e3:f4:dc:20:
e8:e2:40:fb:56:fb:7c:98:99:ab:28:95:17:81:a4:
6d:51:b5:43:d0:8e:9b:7a:9e:b6:35:c8:66:be:3e:
0d:c3:5e:4d:f8:e4:46:b0:da:db:ee:ef:21:3a:03:
16:e9:dd:83:bb:aa:b2:48:2d:4e:3a:f7:75:cf:58:
09:0a:e6:e0:c1:e9:5b:8a:84:70:a5:95:77:5f:6e:
b1:50:2d:8e:0f:38:3d:15:fe:09:54:35:f8:f8:bb:
17:6c:8d:77:bc:36:a5:6a:60:3f:ba:af:e0:7f:c4:
95:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:EB:36:4B:BB:78:1B:80:7D:2B:D1:1C:55:73:67:4E:2E:D0:24:82
X509v3 Authority Key Identifier:
keyid:CE:8A:8D:40:E4:37:AD:F4:AC:D7:CD:B3:8E:04:02:47:7A:2E:51:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zoqNQOQ3rfSs182zjgQCR3ouUaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/zoqNQOQ3rfSs182zjgQCR3ouUaY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/zoqNQOQ3rfSs182zjgQCR3ouUaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:41:da:2a:66:29:a2:d2:37:c4:e0:51:3b:a0:da:b2:aa:ff:
54:76:40:61:47:3f:b8:e0:c5:a5:80:ec:c0:d7:06:b0:cb:12:
85:95:33:e4:ff:03:ec:ab:24:07:f3:f4:63:e1:f3:dd:a8:9c:
a1:5d:b6:10:db:97:ac:52:42:c9:b7:1e:c8:3e:80:6e:f5:74:
5a:51:39:c0:83:28:be:d1:d4:07:cf:bb:43:60:6d:7b:90:ba:
fc:1b:40:85:90:96:2b:cb:59:cd:70:c5:20:0f:79:d6:0e:81:
84:cf:7e:a3:c3:4d:18:1d:ac:f7:0a:71:15:9c:e8:41:2a:df:
a4:9f:c5:78:95:09:eb:45:2a:fe:de:fd:e5:5e:87:69:3e:1d:
47:ee:03:ec:e8:20:38:d5:c9:69:3b:0f:ec:8a:bb:3a:bf:49:
8c:cd:9b:1e:d8:78:b2:a5:13:e0:08:0e:11:b0:40:07:d1:b6:
7f:42:a5:03:ec:69:07:5d:73:fe:76:cd:a1:dc:67:c2:4f:5f:
0f:df:ef:ee:1d:25:2f:4b:ae:d0:d5:e7:36:aa:fd:b1:3d:ff:
5d:fb:60:63:2b:c2:91:bf:d3:4f:fc:38:df:6d:4e:17:a6:a3:
4d:3c:a8:4e:cd:87:d5:b4:91:6c:cf:cd:4b:ce:1d:08:13:d3:
6d:a7:87:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:58:15 2025 by rpki-client