Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/a765a3-ed94-4fe0-bf45-e0c7b96b57f2/1/z4N1wyHe-SZZg-IZTUC6l6_n8cw.mft
File: z4N1wyHe-SZZg-IZTUC6l6_n8cw.mft (raw, json)
Hash identifier: nvett0zcL0Kv+vWBP2hTiLkjC1M9ykQJmgdl7wnA1+0=
Subject key identifier: A7:10:92:A8:B1:F8:05:7E:5F:2B:E4:C9:83:8C:99:93:8D:A1:48:BE
Authority key identifier: CF:83:75:C3:21:DE:F9:26:59:83:E2:19:4D:40:BA:97:AF:E7:F1:CC
Certificate issuer: /CN=cf8375c321def9265983e2194d40ba97afe7f1cc
Certificate serial: 019A725C60DF00D460368FED667B0EB46B30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z4N1wyHe-SZZg-IZTUC6l6_n8cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/a765a3-ed94-4fe0-bf45-e0c7b96b57f2/1/z4N1wyHe-SZZg-IZTUC6l6_n8cw.mft
Manifest number: 1269
Signing time: Tue 11 Nov 2025 10:00:47 +0000
Manifest this update: Tue 11 Nov 2025 10:00:47 +0000
Manifest next update: Wed 12 Nov 2025 10:00:47 +0000
Files and hashes: 1: 1-nSqvJkTY-iEcaodIZX8AZ4YyPw.roa (hash: vUjOaLlV53p/HwQqT7e/Jx/GmnYkrtPHXgpsZfhmCG4=)
2: z4N1wyHe-SZZg-IZTUC6l6_n8cw.crl (hash: y8an5BZ5a79Wop7DVOpWHe/P6hKnhkty+CHGuJ7jt8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/a765a3-ed94-4fe0-bf45-e0c7b96b57f2/1/z4N1wyHe-SZZg-IZTUC6l6_n8cw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/a765a3-ed94-4fe0-bf45-e0c7b96b57f2/1/z4N1wyHe-SZZg-IZTUC6l6_n8cw.mft
rsync://rpki.ripe.net/repository/DEFAULT/z4N1wyHe-SZZg-IZTUC6l6_n8cw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:60:df:00:d4:60:36:8f:ed:66:7b:0e:b4:6b:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf8375c321def9265983e2194d40ba97afe7f1cc
Validity
Not Before: Nov 11 10:00:47 2025 GMT
Not After : Nov 12 10:00:47 2025 GMT
Subject: CN=a71092a8b1f8057e5f2be4c9838c99938da148be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:54:14:ae:69:97:45:62:1d:3e:90:27:bf:00:
a7:f4:8c:a4:58:04:37:91:c9:1c:c8:02:23:fb:60:
a8:a8:9c:a3:9f:0d:3e:24:d7:39:5d:e2:81:fe:fd:
f1:1f:9c:f4:2e:08:4b:ca:fd:53:0b:c4:22:93:ff:
a4:5a:6a:1e:97:98:76:e4:4a:9f:c4:44:c9:8a:68:
87:75:df:92:38:95:82:bc:c5:75:f8:6e:1f:4e:96:
61:74:19:55:02:24:48:8a:7b:a9:79:6f:44:66:02:
b6:01:20:54:a8:6e:4b:4a:39:17:35:87:9d:fb:00:
86:ea:8b:57:f0:fd:18:f3:e2:e3:7f:57:94:f0:9a:
4f:59:b1:83:e4:2f:30:24:84:ce:13:04:23:57:d8:
6e:d7:6f:1f:58:fe:19:0b:50:4b:0b:d4:5a:8d:b1:
28:2d:5a:60:47:57:f0:c7:48:be:74:e6:03:82:57:
f6:d4:91:f9:7b:18:50:0a:7f:0e:b5:68:0a:b6:f6:
bc:19:b1:39:ed:f6:b7:d5:ed:65:88:5f:e0:61:be:
41:87:7f:ea:ba:67:5b:61:69:cb:50:69:c6:a5:0e:
25:1d:e8:7d:7b:24:8a:ba:83:61:6f:4f:ef:4c:e3:
18:c0:45:38:c2:25:fa:9d:1f:7a:b2:b0:01:80:43:
72:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:10:92:A8:B1:F8:05:7E:5F:2B:E4:C9:83:8C:99:93:8D:A1:48:BE
X509v3 Authority Key Identifier:
keyid:CF:83:75:C3:21:DE:F9:26:59:83:E2:19:4D:40:BA:97:AF:E7:F1:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z4N1wyHe-SZZg-IZTUC6l6_n8cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a765a3-ed94-4fe0-bf45-e0c7b96b57f2/1/z4N1wyHe-SZZg-IZTUC6l6_n8cw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a765a3-ed94-4fe0-bf45-e0c7b96b57f2/1/z4N1wyHe-SZZg-IZTUC6l6_n8cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:8c:f3:da:cd:bc:01:fd:35:2c:5e:72:3f:b9:6d:21:04:f0:
04:d9:4e:c3:6d:b1:3a:69:22:ef:8d:6a:b4:06:2d:73:9e:53:
c2:a6:0e:e2:18:b8:94:3f:d9:8b:75:9a:f8:47:50:25:35:bc:
53:e9:f5:cc:be:ff:2d:58:06:62:14:a6:4d:ec:12:87:be:83:
36:bb:fd:10:5d:0d:2f:8a:ac:a8:04:3f:f7:b3:1b:28:0f:64:
69:10:89:4c:09:6c:ea:f4:75:4e:34:02:6f:b8:fe:56:90:ce:
95:74:71:50:0e:d7:46:33:f1:55:01:d6:08:26:cb:2f:9c:68:
c2:28:d3:90:01:31:98:1a:2c:b3:bd:61:8c:0f:25:e6:80:b3:
c5:c2:1b:09:d9:f9:4e:99:22:76:24:bd:d2:63:0e:46:90:12:
eb:4e:44:2e:5c:16:bf:25:47:88:4b:f5:fa:5c:a6:8b:00:17:
0a:73:b7:38:a6:6f:16:75:53:d3:25:19:49:e2:2d:d2:69:ee:
d4:95:4b:ca:27:5c:23:a4:4d:08:54:c5:f6:e4:9d:f7:96:eb:
e7:10:c5:9c:19:08:58:54:c9:9a:b0:4d:08:d1:5f:c4:47:b1:
c6:5e:6d:6b:aa:e2:ea:8c:ac:03:27:3b:50:7a:54:8f:22:c4:
12:96:3f:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:28:14 2025 by rpki-client