Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/360fdd-76ae-41f1-98c0-2b275043719f/1/zFkRQzuiBvRQrJvQZchslmCEAcE.mft
File: zFkRQzuiBvRQrJvQZchslmCEAcE.mft (raw, json)
Hash identifier: dBPaDZgypoxZitN4dkYcp8m0xB5TyZPUv4bnzlR+rsU=
Subject key identifier: 7A:32:6F:E3:6B:E9:60:72:81:D7:CD:45:BC:F0:7D:99:D3:36:A3:73
Authority key identifier: CC:59:11:43:3B:A2:06:F4:50:AC:9B:D0:65:C8:6C:96:60:84:01:C1
Certificate issuer: /CN=cc5911433ba206f450ac9bd065c86c96608401c1
Certificate serial: 019A72933B866288E5F4DE8184A49A004011
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zFkRQzuiBvRQrJvQZchslmCEAcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/360fdd-76ae-41f1-98c0-2b275043719f/1/zFkRQzuiBvRQrJvQZchslmCEAcE.mft
Manifest number: 1722
Signing time: Tue 11 Nov 2025 11:00:42 +0000
Manifest this update: Tue 11 Nov 2025 11:00:42 +0000
Manifest next update: Wed 12 Nov 2025 11:00:42 +0000
Files and hashes: 1: 4LK6RGBLui-aEbPRtqPLVkSUW60.roa (hash: HKFxqJUpJsHV+sptJ97e+oKZWNhWHZ0wI/MLAzbhfC8=)
2: 7SnZ2wdTAHyiVcyhnIAGtBdWwvY.roa (hash: KOo8uRmX/xugX/zDKxM39qWHbAMQmIcpriUpdt/0wYA=)
3: PAAVgOudpAsUIfqhJcqm8oy8JDE.roa (hash: ymqqiqdeF4cim2K3zQCPb5b7mDDQ30DVocSbeg0Ahjc=)
4: zFkRQzuiBvRQrJvQZchslmCEAcE.crl (hash: CTOa5/vqgPgDsO64dw/aAcVlbBpLyo7uxnPOw7pjqp4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/360fdd-76ae-41f1-98c0-2b275043719f/1/zFkRQzuiBvRQrJvQZchslmCEAcE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/360fdd-76ae-41f1-98c0-2b275043719f/1/zFkRQzuiBvRQrJvQZchslmCEAcE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zFkRQzuiBvRQrJvQZchslmCEAcE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:3b:86:62:88:e5:f4:de:81:84:a4:9a:00:40:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc5911433ba206f450ac9bd065c86c96608401c1
Validity
Not Before: Nov 11 11:00:42 2025 GMT
Not After : Nov 12 11:00:42 2025 GMT
Subject: CN=7a326fe36be9607281d7cd45bcf07d99d336a373
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:66:33:00:70:7a:87:d1:f4:ed:2b:e4:cd:cb:
ba:b6:2b:d8:8e:a0:a9:67:8b:68:a1:18:b6:31:fc:
ed:8a:34:b9:94:07:b5:cf:e3:f0:05:65:2a:7b:37:
45:f2:66:cb:f0:6d:a8:f6:2b:8a:5e:25:5f:2e:da:
57:37:32:ce:fd:c5:df:1d:79:f6:6e:e8:b1:59:10:
95:82:96:17:b4:29:85:40:80:22:ca:73:37:6c:e6:
e7:77:3e:44:1b:89:20:8e:32:1d:32:a1:53:5d:01:
95:ca:55:96:68:d8:2c:36:c9:6f:0e:ab:05:e4:b3:
60:f3:22:68:33:4a:99:f8:17:af:ef:61:b3:d3:1e:
83:c9:f3:64:5f:a5:cc:ad:4d:40:b7:af:ac:aa:63:
af:42:22:54:20:9a:ee:56:5d:d9:8a:f5:64:1b:39:
9b:83:f4:fe:48:77:c3:a1:4a:fc:58:22:a4:6e:79:
69:ea:06:bf:e5:95:ff:3b:84:a4:ce:71:85:88:3f:
5f:c0:9c:dd:b5:fb:20:4e:50:8d:e0:5c:48:7f:33:
32:d2:6b:11:98:5c:2f:d4:dd:ee:26:74:61:2e:9b:
5b:1b:2f:ea:fb:40:d9:ae:c4:c4:24:49:f3:36:f3:
65:5f:a0:1c:85:b2:e6:40:dc:5e:5a:47:e8:c6:77:
ea:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:32:6F:E3:6B:E9:60:72:81:D7:CD:45:BC:F0:7D:99:D3:36:A3:73
X509v3 Authority Key Identifier:
keyid:CC:59:11:43:3B:A2:06:F4:50:AC:9B:D0:65:C8:6C:96:60:84:01:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zFkRQzuiBvRQrJvQZchslmCEAcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/360fdd-76ae-41f1-98c0-2b275043719f/1/zFkRQzuiBvRQrJvQZchslmCEAcE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/360fdd-76ae-41f1-98c0-2b275043719f/1/zFkRQzuiBvRQrJvQZchslmCEAcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:86:96:6c:39:f3:10:1f:b8:ed:11:c6:32:11:93:d7:8a:78:
b7:b1:6f:07:fc:03:39:86:ec:4a:58:cf:a0:0d:e5:cd:8e:61:
89:af:fe:7f:c8:07:f3:64:4c:ff:e9:9b:65:6d:0f:2f:a7:a1:
20:15:b1:d8:b3:c2:3c:e8:f0:3b:e8:f6:1f:13:3d:b9:b5:01:
91:80:73:85:62:fd:5d:12:66:30:76:db:10:6e:c3:a5:56:d5:
c3:ef:14:ba:05:71:03:97:46:e8:2d:22:6b:45:13:21:25:f4:
a0:d5:d8:37:ff:6e:b4:2f:2d:77:48:74:2a:72:5d:57:a6:da:
98:ad:e4:b4:a5:4f:8f:72:1c:f1:e6:ff:36:ac:eb:e1:e2:73:
b9:4d:58:42:f0:e8:ef:6f:7f:56:9e:cd:f1:fb:7d:79:87:91:
b3:5f:0e:ec:85:7e:30:51:6e:b7:d2:c9:a5:b0:23:60:c3:48:
a7:73:ff:db:6a:26:31:1a:53:be:d3:71:84:06:e3:d3:2f:6a:
c8:08:3f:0b:18:c3:b6:79:11:55:d1:3e:d8:22:a4:28:5a:3c:
f9:db:d9:02:70:a9:32:61:11:b7:a0:4c:1e:a6:34:d1:47:76:
93:fe:36:21:91:b3:06:9e:5c:22:a5:f2:63:0b:d9:4a:3a:9d:
1f:18:e6:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:49:43 2025 by rpki-client