Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/100c25-e025-45ef-90a9-f3463fc72cb5/1/zgDhEsA_aV-fJdO3K7I6TDTtITg.mft
File: zgDhEsA_aV-fJdO3K7I6TDTtITg.mft (raw, json)
Hash identifier: xySkCRZm6xLV3tSLvFLjU3ncKIGjrAu6Y1DrEawYLRI=
Subject key identifier: D2:B3:D2:4F:C7:0C:54:59:4A:F5:D0:F6:39:1F:75:CF:24:80:6F:D1
Authority key identifier: CE:00:E1:12:C0:3F:69:5F:9F:25:D3:B7:2B:B2:3A:4C:34:ED:21:38
Certificate issuer: /CN=ce00e112c03f695f9f25d3b72bb23a4c34ed2138
Certificate serial: 019A1FBF45D2BE6858974DB1F48B5E74A136
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zgDhEsA_aV-fJdO3K7I6TDTtITg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/100c25-e025-45ef-90a9-f3463fc72cb5/1/zgDhEsA_aV-fJdO3K7I6TDTtITg.mft
Manifest number: 11B5
Signing time: Sun 26 Oct 2025 09:00:20 +0000
Manifest this update: Sun 26 Oct 2025 09:00:20 +0000
Manifest next update: Mon 27 Oct 2025 09:00:20 +0000
Files and hashes: 1: ZzKeKFnkyYHVYzD_pBU_7j7GG50.roa (hash: eOvLaalF9JX35YbTIgyHeogUDwT0C/FDn0Iw2feFdmo=)
2: zgDhEsA_aV-fJdO3K7I6TDTtITg.crl (hash: 85E+qdi3/XthHWicfGBG1edsWvguHd5xwWgyGXPmLiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/100c25-e025-45ef-90a9-f3463fc72cb5/1/zgDhEsA_aV-fJdO3K7I6TDTtITg.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/100c25-e025-45ef-90a9-f3463fc72cb5/1/zgDhEsA_aV-fJdO3K7I6TDTtITg.mft
rsync://rpki.ripe.net/repository/DEFAULT/zgDhEsA_aV-fJdO3K7I6TDTtITg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 05:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1f:bf:45:d2:be:68:58:97:4d:b1:f4:8b:5e:74:a1:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce00e112c03f695f9f25d3b72bb23a4c34ed2138
Validity
Not Before: Oct 26 09:00:20 2025 GMT
Not After : Oct 27 09:00:20 2025 GMT
Subject: CN=d2b3d24fc70c54594af5d0f6391f75cf24806fd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:37:3c:48:ad:1c:64:34:21:7d:c4:1e:cc:8a:
eb:19:3a:75:27:ad:e9:71:b3:fc:d7:74:7b:c7:98:
2f:04:c6:7e:6f:e7:90:88:6c:0a:a6:12:fa:6a:e2:
bd:5c:54:7c:07:df:6b:32:43:bb:8f:1b:5a:30:93:
ed:05:27:0c:1d:f0:9f:78:7d:7c:51:d1:c3:19:ac:
18:8c:5f:79:32:d4:42:25:60:98:c7:53:86:fd:f0:
30:f8:6c:94:94:9b:90:62:69:53:01:a1:eb:40:c3:
1f:91:34:f5:dc:63:fd:d3:94:3a:96:a4:33:4a:9e:
25:0b:9c:38:84:92:96:8d:f4:66:1c:c1:7b:d5:28:
0b:d9:cb:8a:15:ba:49:9f:ea:f4:a8:06:f7:c8:bc:
c1:fb:0a:e3:14:0e:72:41:91:17:eb:e6:3c:43:1c:
5d:ea:65:b1:e4:b5:85:a6:4a:7f:f6:d8:0e:54:a9:
2a:6f:c5:7c:af:47:d2:ff:4b:a9:e1:e1:58:07:2e:
72:0b:3f:ce:72:98:e8:5e:a5:f2:d5:8e:c0:9a:99:
14:ef:37:6e:aa:c9:c9:af:56:96:72:72:e2:78:68:
bc:0a:58:f9:02:f9:cc:c1:ad:d6:89:ed:0e:b9:dc:
66:6e:c4:17:a2:da:61:0a:fe:63:55:96:aa:90:97:
a2:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:B3:D2:4F:C7:0C:54:59:4A:F5:D0:F6:39:1F:75:CF:24:80:6F:D1
X509v3 Authority Key Identifier:
keyid:CE:00:E1:12:C0:3F:69:5F:9F:25:D3:B7:2B:B2:3A:4C:34:ED:21:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zgDhEsA_aV-fJdO3K7I6TDTtITg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/100c25-e025-45ef-90a9-f3463fc72cb5/1/zgDhEsA_aV-fJdO3K7I6TDTtITg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/100c25-e025-45ef-90a9-f3463fc72cb5/1/zgDhEsA_aV-fJdO3K7I6TDTtITg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:a1:d1:c4:15:a0:3d:a5:98:bf:9e:d5:3c:45:95:bf:c4:0c:
b7:b1:7f:e7:d0:82:50:2b:2d:39:46:21:65:27:d6:20:ed:2a:
d0:be:77:c4:7f:03:f1:fe:7f:d1:9c:e5:96:19:ae:e1:e1:f1:
c2:71:48:d9:ff:a1:51:f2:94:ce:04:99:88:52:81:4d:f0:4b:
7d:16:00:42:19:63:64:77:f4:43:c1:8e:27:f6:5c:5a:62:e3:
10:33:f1:22:99:fb:cb:47:b6:5c:5e:13:07:46:ce:73:89:7b:
4f:c9:f0:d9:f2:0d:60:90:9a:43:6a:36:3f:a7:e5:f3:a6:22:
f7:7a:96:27:04:a7:2f:d5:7c:b4:9f:33:06:04:7b:2e:47:be:
a3:b2:6b:88:b8:3b:1b:bc:b2:cd:a1:4a:87:ed:94:39:fc:4a:
c0:b2:21:00:20:21:af:c1:20:32:47:6c:99:31:ef:67:32:8a:
e7:fc:03:44:6b:c3:c2:bd:b8:12:d7:bd:e7:b5:38:5a:c6:19:
80:25:09:37:13:32:b3:1c:1f:b2:34:5f:b5:c2:6d:9e:9e:f2:
60:f3:72:72:ad:98:69:c6:96:3e:76:1f:53:ba:8e:4b:b4:fc:
db:4d:c1:a8:57:9e:32:5d:e1:0f:36:1b:2d:40:72:cd:90:68:
3c:10:a4:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 14:30:51 2025 by rpki-client