Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.mft
File: zs05HGYMPlfFO4fAtS7A0vL0J3U.mft (raw, json)
Hash identifier: kOB4PAUhpWFpUSgWvTatr1mAecUVFQ8okevInchV0SI=
Subject key identifier: E0:54:82:B5:BF:32:BC:71:81:70:65:71:2E:7E:3F:12:84:77:FA:F9
Authority key identifier: CE:CD:39:1C:66:0C:3E:57:C5:3B:87:C0:B5:2E:C0:D2:F2:F4:27:75
Certificate issuer: /CN=cecd391c660c3e57c53b87c0b52ec0d2f2f42775
Certificate serial: 019A21AE0A7AD72C33E90862443A25343786
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zs05HGYMPlfFO4fAtS7A0vL0J3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.mft
Manifest number: 06AE
Signing time: Sun 26 Oct 2025 18:00:45 +0000
Manifest this update: Sun 26 Oct 2025 18:00:45 +0000
Manifest next update: Mon 27 Oct 2025 18:00:45 +0000
Files and hashes: 1: BvxwicsH1ZVfBk6Q4DoBq1qq_Cg.roa (hash: 4jEtLdDvLytqaDFqVfLMjurgO3/mhXlRnfALOClKcPM=)
2: IaQkr4wJmPFX7MlGIC068T5SLas.roa (hash: LZsKSu9vsLm4Oqz5UZoGBpM3ebW0TaSiuaWmenP7SS0=)
3: zs05HGYMPlfFO4fAtS7A0vL0J3U.crl (hash: 4e1eiWMUHue2CSgKR79t2U7FnUBryn1QJ/GpuXyth4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/zs05HGYMPlfFO4fAtS7A0vL0J3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 14:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:ae:0a:7a:d7:2c:33:e9:08:62:44:3a:25:34:37:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cecd391c660c3e57c53b87c0b52ec0d2f2f42775
Validity
Not Before: Oct 26 18:00:45 2025 GMT
Not After : Oct 27 18:00:45 2025 GMT
Subject: CN=e05482b5bf32bc71817065712e7e3f128477faf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c0:65:46:0f:00:01:df:0c:9e:d6:1a:41:3d:
be:45:27:67:b9:13:77:6d:0a:55:24:83:b0:e7:d0:
fa:b2:95:31:ea:1e:74:0d:0c:43:4f:7f:a5:64:da:
63:34:6f:7d:0c:21:82:da:6d:55:a3:07:2d:a4:c5:
52:0f:ea:a5:6f:7d:70:2e:b1:dd:b6:1a:a3:c0:86:
65:b3:36:db:05:33:5c:76:ae:97:8f:04:2c:b1:74:
6f:dd:e9:25:b9:cf:c1:76:05:a6:63:bf:b3:e9:b4:
bf:7b:17:66:b6:40:2d:91:64:d8:50:d4:07:62:70:
fc:e2:e5:84:7b:3b:93:8e:26:52:24:d9:3b:01:7c:
24:28:17:61:cb:1e:6c:43:85:60:15:4a:2e:47:8c:
ec:0d:b0:f2:3f:c1:20:cc:08:51:5e:91:19:1e:fb:
46:13:2e:73:63:a6:81:1f:dc:d4:74:7a:55:ca:8a:
b5:c3:36:71:54:ce:75:c2:14:dc:bb:54:8a:59:a8:
3a:f7:68:ab:73:76:a1:bb:27:4d:65:89:e2:d1:64:
77:d0:4a:32:68:68:27:71:3e:79:cb:59:0b:8a:4c:
32:ba:5d:3c:37:35:5a:35:a2:a1:5d:d3:bd:5a:b5:
e1:97:15:58:6d:7e:46:d6:69:04:33:3d:1f:02:8c:
cb:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:54:82:B5:BF:32:BC:71:81:70:65:71:2E:7E:3F:12:84:77:FA:F9
X509v3 Authority Key Identifier:
keyid:CE:CD:39:1C:66:0C:3E:57:C5:3B:87:C0:B5:2E:C0:D2:F2:F4:27:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zs05HGYMPlfFO4fAtS7A0vL0J3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:84:44:97:c4:8f:d9:e0:24:7f:9c:01:85:f2:46:f1:14:28:
51:f9:d0:30:1e:81:b6:41:4a:29:a5:27:6f:b5:fb:a6:f9:f6:
41:25:65:1f:1e:d5:8d:9e:07:dd:87:3e:4c:ac:71:32:e2:9f:
77:de:65:8c:5f:bf:cf:66:fd:9d:42:c4:7e:82:51:96:85:bc:
da:ab:fe:5b:93:ef:19:cf:1b:bf:86:46:8a:ad:73:d8:8e:d3:
31:dc:6b:8c:98:70:75:ce:84:1e:eb:d9:66:5c:3a:b9:87:96:
b7:05:84:e0:46:89:d8:2b:74:f4:d1:be:45:d8:43:b2:b1:0e:
4c:02:c2:eb:5a:cc:e4:fd:9a:ac:e6:3a:ea:c7:ca:fa:63:3b:
31:6d:ed:90:0b:bf:2c:29:06:0b:70:28:a6:b3:ee:4f:e7:ff:
87:94:cf:98:00:4f:9f:18:c9:aa:cf:1e:10:46:90:fa:95:82:
05:64:fc:ff:51:3a:74:2c:e5:f8:c9:dd:9a:91:ff:d4:1d:2c:
2d:47:e3:65:8b:c5:d1:38:65:a5:55:10:74:5e:b9:7f:d9:c6:
11:19:e6:79:f6:6c:7e:f7:0d:05:81:3b:ef:03:5c:db:9e:39:
31:89:d7:0a:2a:8b:40:82:e5:ae:5b:ba:22:77:a3:cb:87:06:
cd:d9:ea:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 22:50:58 2025 by rpki-client