Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/ebc748-6826-4140-a8e0-843eeee0a260/1/zCFfWBWexXaiAid26mT2HFuwAZQ.mft
File: zCFfWBWexXaiAid26mT2HFuwAZQ.mft (raw, json)
Hash identifier: gFaeyYjgL5Mpj4++eOop0pkUOc4iM0j8DD6YpZOWs+c=
Subject key identifier: 56:B4:16:07:3B:00:23:30:0A:99:40:0D:5D:F6:56:54:D9:A9:3D:10
Authority key identifier: CC:21:5F:58:15:9E:C5:76:A2:02:27:76:EA:64:F6:1C:5B:B0:01:94
Certificate issuer: /CN=cc215f58159ec576a2022776ea64f61c5bb00194
Certificate serial: 019A4BBC026AC853FFFFCA4CE570AE5DCD84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zCFfWBWexXaiAid26mT2HFuwAZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/ebc748-6826-4140-a8e0-843eeee0a260/1/zCFfWBWexXaiAid26mT2HFuwAZQ.mft
Manifest number: 170F
Signing time: Mon 03 Nov 2025 22:00:03 +0000
Manifest this update: Mon 03 Nov 2025 22:00:03 +0000
Manifest next update: Tue 04 Nov 2025 22:00:03 +0000
Files and hashes: 1: 2Ny-ueNvAFjL9IDe1yMO8HfDBJE.roa (hash: SriKAtzLJClJ8RYlJnsDDGPLefd9t0TyrlM6Ndh0w6s=)
2: HSDe33dztyDbbAh5edeiMrBstpw.roa (hash: hMHbKz19ucgy7N1gbQNpI/GP1wKSKMSFktFakjiCIw4=)
3: QRtKZhH9f2q5Qs4y3jok3HnjFK0.roa (hash: kTYNUIGwJLwA+YttUf3vVXejkVq8FL+41G3GFzyW8/w=)
4: jjYT0ual1nIv5rmaeDjlNg2jdtU.roa (hash: OjHVmf3z6fImr8f0+RF/L2hzt0WZmr2JT7HoyHilItc=)
5: vGoHfriPki42R6sM4AGNaZ6Sim4.roa (hash: QcwTT5U/Z4Mw3Ga8Qis4P0Rl1OjYiRfOAUfd5c277Jw=)
6: zCFfWBWexXaiAid26mT2HFuwAZQ.crl (hash: bX7odTmKxUBFm+6fU2LtIhyx9j/gxWDpx4NbefBPKpo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/ebc748-6826-4140-a8e0-843eeee0a260/1/zCFfWBWexXaiAid26mT2HFuwAZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/ebc748-6826-4140-a8e0-843eeee0a260/1/zCFfWBWexXaiAid26mT2HFuwAZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/zCFfWBWexXaiAid26mT2HFuwAZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Nov 2025 20:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4b:bc:02:6a:c8:53:ff:ff:ca:4c:e5:70:ae:5d:cd:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc215f58159ec576a2022776ea64f61c5bb00194
Validity
Not Before: Nov 3 22:00:03 2025 GMT
Not After : Nov 4 22:00:03 2025 GMT
Subject: CN=56b416073b0023300a99400d5df65654d9a93d10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9b:44:a5:44:81:90:60:45:ae:41:2f:b2:e0:
bb:48:74:02:5c:94:8a:6d:77:59:4f:04:10:e6:b6:
3c:0d:30:25:93:32:b1:a5:ce:9e:48:e9:43:0c:e3:
22:ac:7d:25:4a:b5:51:3b:18:ca:a4:5d:3d:5b:8d:
71:72:ff:81:57:b7:b9:8e:76:d8:b3:26:c8:7c:aa:
3b:e2:4a:01:c0:ac:b4:9d:7e:31:fe:99:7c:dd:03:
7e:79:4b:74:da:23:53:99:6e:c4:5b:2c:14:c2:6a:
9e:6b:e7:a3:61:0f:a3:7f:c0:7d:3d:ff:78:12:78:
23:ee:19:6e:f7:9b:b4:b6:db:05:06:9f:17:10:a6:
52:39:1d:4a:06:e9:cf:80:d8:c0:a7:19:0e:6c:c9:
9d:bf:48:3f:cc:05:d0:7e:32:ed:9a:23:99:5d:bf:
0e:47:56:b2:3a:86:5b:09:95:84:28:0e:94:01:0d:
82:04:3b:53:0b:7f:d3:75:8b:e7:86:15:6b:9e:61:
77:e7:64:70:d3:e8:07:c1:5b:48:4d:7d:27:6c:1c:
fd:bf:ad:ba:be:4c:3d:d8:70:67:df:8a:44:a9:95:
89:f2:96:ad:70:45:94:8d:fc:ab:07:52:7c:1a:06:
da:9c:62:17:d1:cd:95:e7:b2:cc:93:33:45:3f:78:
5c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:B4:16:07:3B:00:23:30:0A:99:40:0D:5D:F6:56:54:D9:A9:3D:10
X509v3 Authority Key Identifier:
keyid:CC:21:5F:58:15:9E:C5:76:A2:02:27:76:EA:64:F6:1C:5B:B0:01:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zCFfWBWexXaiAid26mT2HFuwAZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ebc748-6826-4140-a8e0-843eeee0a260/1/zCFfWBWexXaiAid26mT2HFuwAZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ebc748-6826-4140-a8e0-843eeee0a260/1/zCFfWBWexXaiAid26mT2HFuwAZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:10:bd:7e:4d:b2:78:7a:14:4a:99:0b:97:ed:32:fe:04:20:
ac:63:d0:42:bd:b4:f4:c7:c0:70:2a:5d:3b:c6:dc:70:b9:c1:
89:cc:84:32:fb:1e:cf:74:8b:dc:43:80:e7:db:6e:54:d9:f0:
9d:db:3a:ea:a9:fe:b9:25:69:cd:bd:7e:3b:ef:cb:99:1c:5a:
e2:a8:a9:90:ea:b4:26:d5:3a:10:37:fe:8b:fe:3d:66:71:10:
f1:8f:c7:e0:c1:a2:c0:87:f0:50:f0:dd:e0:0b:e0:e2:c5:f0:
06:a7:80:85:e7:36:c0:50:2f:48:e2:4c:09:24:f5:a5:4c:66:
64:62:a3:5e:a5:a9:71:1a:87:c9:79:43:4b:06:6f:0d:39:1d:
0f:0a:99:4f:52:74:7a:cf:f7:d4:ff:5f:60:29:90:eb:b3:57:
ec:1c:c2:24:8f:3c:2a:e4:cd:08:79:c3:8b:68:ed:eb:71:1d:
e0:92:44:90:ad:69:51:7b:e8:32:0b:9d:26:1f:da:af:98:4e:
6e:e7:c1:a2:2c:fe:8c:af:c0:54:13:b0:19:7e:41:f4:21:d8:
59:c1:af:b0:5d:ca:d9:d7:9b:47:67:87:98:c0:80:44:cc:d5:
85:f3:74:37:b1:24:35:cf:5c:3c:ed:fd:ba:15:eb:9e:3f:d1:
84:59:58:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 04:17:54 2025 by rpki-client