Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/4a05f0-7abb-4e1f-8c27-215cd570e409/1/zqF55PNT6p3K8C83pyt1Ds-hw1Q.mft
File: zqF55PNT6p3K8C83pyt1Ds-hw1Q.mft (raw, json)
Hash identifier: c9cFM7GXfbss7gEQFvYUSSGJinWJihjmhreRjF1Spwc=
Subject key identifier: 64:26:EB:AA:AF:72:4B:C3:B4:7D:3B:33:C5:02:F9:E7:09:C3:46:D5
Authority key identifier: CE:A1:79:E4:F3:53:EA:9D:CA:F0:2F:37:A7:2B:75:0E:CF:A1:C3:54
Certificate issuer: /CN=cea179e4f353ea9dcaf02f37a72b750ecfa1c354
Certificate serial: 019A729341BDCC990ECF43F317992A83F5BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zqF55PNT6p3K8C83pyt1Ds-hw1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/4a05f0-7abb-4e1f-8c27-215cd570e409/1/zqF55PNT6p3K8C83pyt1Ds-hw1Q.mft
Manifest number: 0FD3
Signing time: Tue 11 Nov 2025 11:00:44 +0000
Manifest this update: Tue 11 Nov 2025 11:00:44 +0000
Manifest next update: Wed 12 Nov 2025 11:00:44 +0000
Files and hashes: 1: JUuxGv_Lm_wDAeQKgUpF0b2dN-E.roa (hash: LxGPc9DuVZu7AFf7wSLnWbscOl013tf3bR9ibnxaHEM=)
2: zqF55PNT6p3K8C83pyt1Ds-hw1Q.crl (hash: 6h1/xEk2zaRzPwHKb7GkZns/dTngsmfPgVV/9vVVGzw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/4a05f0-7abb-4e1f-8c27-215cd570e409/1/zqF55PNT6p3K8C83pyt1Ds-hw1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/4a05f0-7abb-4e1f-8c27-215cd570e409/1/zqF55PNT6p3K8C83pyt1Ds-hw1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/zqF55PNT6p3K8C83pyt1Ds-hw1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:41:bd:cc:99:0e:cf:43:f3:17:99:2a:83:f5:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cea179e4f353ea9dcaf02f37a72b750ecfa1c354
Validity
Not Before: Nov 11 11:00:44 2025 GMT
Not After : Nov 12 11:00:44 2025 GMT
Subject: CN=6426ebaaaf724bc3b47d3b33c502f9e709c346d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d2:40:1c:c8:02:c1:b7:6b:e2:8c:2a:c1:02:
c4:2c:ae:7c:63:a3:79:bb:6e:bd:a8:f5:f7:92:33:
24:b2:3b:0e:7f:e6:80:1b:b2:7c:17:a9:d8:cb:c1:
70:e2:e5:04:f5:e3:e0:9f:86:52:ce:1e:c1:68:c3:
3b:db:75:d2:ca:b4:f8:4b:b5:55:1a:03:b2:25:66:
b2:8c:4f:7b:a7:02:86:b0:63:d1:c6:32:ec:a1:c9:
93:46:5e:5c:56:f8:63:eb:43:f7:3a:7d:5c:cf:4d:
30:40:da:e7:66:9c:39:25:5a:e1:6d:8f:1f:1b:ae:
29:17:65:73:48:a2:02:dc:aa:cf:98:bc:57:6b:d7:
ae:b9:86:6d:d4:c9:e1:16:31:e4:63:43:f7:9e:5f:
5f:24:6e:4d:79:36:1d:39:fa:81:54:04:87:14:01:
12:71:47:13:9c:44:e7:a2:9c:ab:ce:92:60:3b:ef:
65:9f:b9:87:b1:9a:0a:b6:85:37:1a:3e:8d:f3:4e:
91:12:6b:3f:72:e4:ef:c9:54:e7:2e:fa:70:c8:14:
85:f0:e8:e5:59:61:44:6f:59:97:6b:59:8e:6f:d0:
63:f7:65:fc:aa:59:e8:7e:8e:4c:3a:ed:68:ee:b7:
8a:ce:3d:41:ac:c7:aa:4e:3b:d2:1e:1e:09:3f:8c:
ac:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:26:EB:AA:AF:72:4B:C3:B4:7D:3B:33:C5:02:F9:E7:09:C3:46:D5
X509v3 Authority Key Identifier:
keyid:CE:A1:79:E4:F3:53:EA:9D:CA:F0:2F:37:A7:2B:75:0E:CF:A1:C3:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zqF55PNT6p3K8C83pyt1Ds-hw1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/4a05f0-7abb-4e1f-8c27-215cd570e409/1/zqF55PNT6p3K8C83pyt1Ds-hw1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/4a05f0-7abb-4e1f-8c27-215cd570e409/1/zqF55PNT6p3K8C83pyt1Ds-hw1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:a3:d5:4b:5e:ad:37:51:2e:06:c7:b3:ff:c6:2d:ed:0e:06:
ab:1d:31:a4:b2:48:44:8e:fb:7a:c1:4a:3f:f1:98:2d:ce:b6:
7c:b5:e3:55:2f:a0:6c:cf:11:c7:23:41:a4:c8:f5:b8:d2:12:
30:3b:fa:b0:be:24:2c:24:16:37:b6:29:07:b9:1d:83:60:3b:
f3:3e:10:3b:0f:66:6d:36:36:a5:cf:5b:bf:8b:5f:4d:01:81:
e1:4f:60:12:1c:c4:9c:54:5c:0d:b9:8d:2c:5e:f6:44:71:85:
50:9e:6d:dc:b7:49:83:9d:2b:0c:03:43:93:87:3c:d4:59:b8:
c7:57:1a:30:c1:59:93:90:d1:cd:c4:05:ea:22:16:60:5e:0d:
48:90:8d:b8:ad:1e:3b:0f:84:b1:62:9b:7c:6d:66:bb:ca:6b:
7d:05:e7:48:81:d6:61:dc:27:4e:84:24:63:b0:f4:8d:7f:30:
bb:bf:0c:c3:d3:a2:9f:76:05:39:d7:79:4d:15:ed:14:69:fe:
fe:dc:52:bd:32:a2:a3:a7:1a:fa:35:fb:e4:3f:e2:d9:c9:98:
db:3a:b6:aa:d9:f0:4d:09:dc:8b:5c:e6:6d:5f:a2:fa:82:6d:
af:a5:58:60:cd:57:61:29:32:77:50:54:ea:fd:b0:06:47:10:
19:6a:61:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:20:27 2025 by rpki-client