Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/dd3f15-bbac-49d4-9435-399b7a3b20cf/1/zB58Rrgd2rJ0QnDFutmGr4bfT2A.mft
File: zB58Rrgd2rJ0QnDFutmGr4bfT2A.mft (raw, json)
Hash identifier: AxRacy9diCUUT6so+zRHtrYyg6Kk7a64yQC4c4pee3c=
Subject key identifier: 96:8F:E8:49:D4:08:6D:FA:14:FA:59:2D:45:40:E8:7D:EA:29:28:F8
Authority key identifier: CC:1E:7C:46:B8:1D:DA:B2:74:42:70:C5:BA:D9:86:AF:86:DF:4F:60
Certificate issuer: /CN=cc1e7c46b81ddab2744270c5bad986af86df4f60
Certificate serial: 0199C3E9827D9327FA66EFB5E4414BC3BFF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zB58Rrgd2rJ0QnDFutmGr4bfT2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/dd3f15-bbac-49d4-9435-399b7a3b20cf/1/zB58Rrgd2rJ0QnDFutmGr4bfT2A.mft
Manifest number: 0B2A
Signing time: Wed 08 Oct 2025 13:01:24 +0000
Manifest this update: Wed 08 Oct 2025 13:01:24 +0000
Manifest next update: Thu 09 Oct 2025 13:01:24 +0000
Files and hashes: 1: cin36IkcVIQMWPjd44GqXKLQuWQ.roa (hash: OwdXlpnQGHCbD8dLSbClcbklFBICkGpHdsNc3VSAeno=)
2: xJ066uLw5CBis8gyryLoKkqRKLI.roa (hash: WiY+5aheCWzt8o2WuBVa4kjZbzzagp24qPWKgNtl8EM=)
3: zB58Rrgd2rJ0QnDFutmGr4bfT2A.crl (hash: kweGb1+ZuAFgtbNDMIBO1G6k7Vm3HmHjhN448ndj8mU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/dd3f15-bbac-49d4-9435-399b7a3b20cf/1/zB58Rrgd2rJ0QnDFutmGr4bfT2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/dd3f15-bbac-49d4-9435-399b7a3b20cf/1/zB58Rrgd2rJ0QnDFutmGr4bfT2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/zB58Rrgd2rJ0QnDFutmGr4bfT2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 13:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c3:e9:82:7d:93:27:fa:66:ef:b5:e4:41:4b:c3:bf:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc1e7c46b81ddab2744270c5bad986af86df4f60
Validity
Not Before: Oct 8 13:01:24 2025 GMT
Not After : Oct 9 13:01:24 2025 GMT
Subject: CN=968fe849d4086dfa14fa592d4540e87dea2928f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:4d:81:53:44:9a:17:0b:e3:dd:19:c9:0e:1b:
6b:c6:44:62:02:b9:63:60:a7:7c:3f:6c:f0:19:09:
a5:a6:64:ad:24:c5:17:c8:8a:65:f3:28:f7:8b:0f:
21:2d:a6:09:3b:34:ed:21:de:10:9c:70:35:a7:00:
8e:79:da:5b:80:a4:0f:b2:12:59:4b:b0:4a:11:c7:
26:c7:d0:3c:91:8c:43:af:b2:6a:11:ac:9f:65:65:
29:71:b1:ce:0b:79:b8:0c:81:fe:55:03:70:4c:1f:
f4:75:3b:11:12:40:5f:1b:eb:cb:b5:35:70:68:cd:
52:60:90:a7:24:16:ee:b9:7c:a0:4e:bb:2d:13:75:
0e:3c:76:10:92:30:3c:67:ad:a0:68:1b:41:18:12:
f7:88:18:1e:13:4d:60:ac:98:1b:6b:fc:57:57:5f:
02:d0:81:d4:b3:f9:56:98:88:f5:a6:58:a5:2f:f4:
2e:30:46:e3:3b:da:a3:17:d2:aa:af:78:1f:ff:0b:
15:62:63:ca:fa:4c:94:aa:7f:67:be:1f:98:f2:18:
d7:d7:c4:47:ad:00:63:d4:ba:7e:74:62:ed:eb:8f:
88:59:22:fa:cb:e4:a0:7a:a6:7a:8e:2e:ee:34:44:
e9:c9:0c:1a:be:27:5c:81:d9:f0:e5:47:e3:c6:85:
90:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:8F:E8:49:D4:08:6D:FA:14:FA:59:2D:45:40:E8:7D:EA:29:28:F8
X509v3 Authority Key Identifier:
keyid:CC:1E:7C:46:B8:1D:DA:B2:74:42:70:C5:BA:D9:86:AF:86:DF:4F:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zB58Rrgd2rJ0QnDFutmGr4bfT2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/dd3f15-bbac-49d4-9435-399b7a3b20cf/1/zB58Rrgd2rJ0QnDFutmGr4bfT2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/dd3f15-bbac-49d4-9435-399b7a3b20cf/1/zB58Rrgd2rJ0QnDFutmGr4bfT2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:6a:1f:b7:23:38:78:80:e4:cd:7c:a3:39:e1:73:2a:7a:cd:
a1:38:9f:90:f3:a6:75:8b:18:e7:4a:11:0e:4f:09:5b:8e:fd:
53:ea:de:93:1d:ce:f0:f4:42:fb:52:d4:e6:c3:86:da:0c:de:
d5:4f:5f:96:f3:7e:f4:58:6b:14:b8:05:16:21:f8:d5:44:d9:
f6:fa:17:de:4e:01:33:d1:3e:1d:bd:6f:94:80:7d:1c:76:a5:
21:5f:d6:eb:1b:fb:ee:6d:69:98:86:cb:dd:c9:9d:d1:4f:5c:
29:4a:cf:8d:c1:aa:c7:af:f6:38:21:f5:30:bd:d7:09:e3:f0:
00:e0:1d:94:e4:1a:c7:f7:a2:be:c3:aa:ef:b8:f9:e4:61:8a:
5e:ad:ac:a1:d4:95:db:f0:2e:04:a1:99:a3:30:78:d9:db:f4:
3f:ce:dc:bd:db:8a:e0:15:53:73:2f:f4:10:ea:b4:8a:b1:c8:
3a:ad:99:cc:b2:c2:cf:95:7f:3d:80:53:b5:85:34:44:6e:6f:
ac:7e:fe:b1:07:f5:61:1e:ba:c5:fc:7b:0e:64:ec:c9:00:53:
22:f9:ad:8e:b1:96:51:89:6e:4e:2a:32:a1:1c:d5:d8:1b:93:
95:33:91:cd:55:68:58:21:4e:4a:fe:73:6e:04:87:a2:11:96:
14:4d:cd:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 21:27:47 2025 by rpki-client