Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.mft
File: z_N0ZX9XB488oscRCdNZJ8IkhoE.mft (raw, json)
Hash identifier: wlehEkytDKQPzo4ypaHDyAb6MUfZeTvu5EGoFQjnHK4=
Subject key identifier: 5C:8A:C6:4F:EA:DA:B7:F2:5D:DA:D8:D2:E3:55:05:3E:2E:00:0C:48
Authority key identifier: CF:F3:74:65:7F:57:07:8F:3C:A2:C7:11:09:D3:59:27:C2:24:86:81
Certificate issuer: /CN=cff374657f57078f3ca2c71109d35927c2248681
Certificate serial: 019A23D38E1B03648FAE13485162A1E9C25D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z_N0ZX9XB488oscRCdNZJ8IkhoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.mft
Manifest number: 1039
Signing time: Mon 27 Oct 2025 04:00:58 +0000
Manifest this update: Mon 27 Oct 2025 04:00:58 +0000
Manifest next update: Tue 28 Oct 2025 04:00:58 +0000
Files and hashes: 1: 36HTuZWVYznRWr-Y9OyOjFMfg8o.roa (hash: O957t7QaHPCxhX8NuJXHyZq8mGIQrTkuzTmAY9BjQ/g=)
2: Jn6x2QCk2FqoSF1EyiUYV8JzSk0.roa (hash: U8WrE9TGTdUjZFCB6O02ti+OPe0fB0Uw0kiiaV4z4N0=)
3: z_N0ZX9XB488oscRCdNZJ8IkhoE.crl (hash: VYE/6e26au9A+jKk6Lw0ISIpi8d52hfGxXxSR5kC7HI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/z_N0ZX9XB488oscRCdNZJ8IkhoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 04:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:d3:8e:1b:03:64:8f:ae:13:48:51:62:a1:e9:c2:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cff374657f57078f3ca2c71109d35927c2248681
Validity
Not Before: Oct 27 04:00:58 2025 GMT
Not After : Oct 28 04:00:58 2025 GMT
Subject: CN=5c8ac64feadab7f25ddad8d2e355053e2e000c48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:6f:7c:57:fd:2d:33:79:22:e5:07:bc:52:df:
b9:42:1a:ca:56:f1:ab:b1:25:d8:0b:a8:29:8f:5d:
04:32:8b:b5:12:24:6c:91:96:8c:64:e1:24:f2:15:
50:24:69:92:8d:e2:86:53:7f:9b:f1:4c:f7:54:7e:
4f:26:84:41:e3:45:a0:a2:8f:f1:dd:20:d8:da:2e:
5d:c5:78:dc:ec:df:ef:dd:02:5e:e2:18:c4:a7:9e:
64:b3:c6:fb:59:f5:a6:5f:e5:22:11:0c:e7:3e:06:
8a:38:f2:b2:de:eb:54:eb:b9:4e:51:b9:9b:9a:e2:
bf:84:2d:ce:4e:8e:09:59:37:7f:e1:c1:61:5d:0c:
4e:86:6f:3d:6c:38:98:3f:f5:53:d7:46:f7:89:a6:
d3:fc:0d:c2:56:db:0d:fd:91:19:26:e4:19:56:b9:
bf:50:90:69:84:c0:11:d3:f4:d8:da:7a:14:47:1d:
55:1c:b0:c7:36:07:2e:cf:60:30:24:d6:58:54:e0:
8e:a0:5f:ba:9d:72:fa:3f:1e:41:5c:08:33:b2:d1:
be:64:1c:73:e3:eb:b7:b2:50:19:7e:84:0b:25:c1:
a9:bf:a3:6e:24:c5:04:c9:7d:af:d9:cb:d3:48:e7:
48:e7:57:51:ad:43:92:48:ca:eb:5b:69:89:a8:06:
06:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:8A:C6:4F:EA:DA:B7:F2:5D:DA:D8:D2:E3:55:05:3E:2E:00:0C:48
X509v3 Authority Key Identifier:
keyid:CF:F3:74:65:7F:57:07:8F:3C:A2:C7:11:09:D3:59:27:C2:24:86:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z_N0ZX9XB488oscRCdNZJ8IkhoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:03:43:55:40:76:5d:7a:e2:8d:3f:4b:ed:0a:10:10:07:0c:
70:6b:4a:36:6f:76:4e:95:e9:bc:88:97:49:c8:10:d3:94:e1:
25:5c:67:62:e6:c4:af:19:70:5e:4d:83:b9:1f:f4:36:a4:2c:
83:1f:32:eb:e8:ee:ea:48:20:80:df:80:13:39:b6:fd:dd:0e:
ed:fc:26:7d:3f:43:f8:0f:45:cf:83:cd:9d:c8:70:50:ba:20:
5a:dc:2a:e8:11:c5:9c:c4:53:2c:2c:35:30:f7:a7:a0:93:6a:
78:60:5b:5d:60:8c:c6:ec:28:ff:a4:df:32:04:49:90:04:9d:
2f:dc:5f:13:ce:c9:ef:11:23:25:35:1d:2d:32:d3:28:62:a9:
6a:04:21:12:26:3f:09:c1:09:13:ea:eb:ab:71:70:da:53:f9:
1d:36:f1:51:1a:62:85:ad:eb:8c:fa:fe:97:42:3f:0f:fd:b2:
f2:c8:d0:48:e0:68:15:96:06:0c:c9:01:8d:e9:eb:c3:c9:ce:
f3:16:bd:f8:08:87:57:70:a2:43:4b:80:6d:3e:c6:50:02:10:
8c:4c:b4:05:33:79:1f:49:39:d1:15:9f:9f:33:3d:84:8b:fe:
0f:44:6b:1c:ce:92:25:f6:da:d0:1f:7b:05:ff:a3:e3:3c:f8:
2e:61:bc:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:31:10 2025 by rpki-client