Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/51dd21-9db1-4224-9aac-56afc3cbdf4e/1/zWy6EKtGXPDuPnYCXGf4VU0tAaU.mft
File: zWy6EKtGXPDuPnYCXGf4VU0tAaU.mft (raw, json)
Hash identifier: X/5nnnKFONiHA5rDaO/R8QTt2g2cK2QldnFFH4eBXUY=
Subject key identifier: 46:C7:2F:F1:9B:FF:EF:63:E9:BF:B1:A6:05:BA:14:47:CC:24:78:AB
Authority key identifier: CD:6C:BA:10:AB:46:5C:F0:EE:3E:76:02:5C:67:F8:55:4D:2D:01:A5
Certificate issuer: /CN=cd6cba10ab465cf0ee3e76025c67f8554d2d01a5
Certificate serial: 019A454D4AC2478DD7BF403FE3F74041C2B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zWy6EKtGXPDuPnYCXGf4VU0tAaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/51dd21-9db1-4224-9aac-56afc3cbdf4e/1/zWy6EKtGXPDuPnYCXGf4VU0tAaU.mft
Manifest number: 09C8
Signing time: Sun 02 Nov 2025 16:01:24 +0000
Manifest this update: Sun 02 Nov 2025 16:01:24 +0000
Manifest next update: Mon 03 Nov 2025 16:01:24 +0000
Files and hashes: 1: YDAV-stFbBYknK-MHQjAFGKIviM.roa (hash: SdDeY9dzrBZujPQFvilvXbGOkdZa6vv8FLkLN5jjZVw=)
2: zWy6EKtGXPDuPnYCXGf4VU0tAaU.crl (hash: FVZpzTn6e4jbuioe7CCK5+m6vdn4TDbhc9cULgz2F4A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/51dd21-9db1-4224-9aac-56afc3cbdf4e/1/zWy6EKtGXPDuPnYCXGf4VU0tAaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/51dd21-9db1-4224-9aac-56afc3cbdf4e/1/zWy6EKtGXPDuPnYCXGf4VU0tAaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/zWy6EKtGXPDuPnYCXGf4VU0tAaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Nov 2025 14:19:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:45:4d:4a:c2:47:8d:d7:bf:40:3f:e3:f7:40:41:c2:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd6cba10ab465cf0ee3e76025c67f8554d2d01a5
Validity
Not Before: Nov 2 16:01:24 2025 GMT
Not After : Nov 3 16:01:24 2025 GMT
Subject: CN=46c72ff19bffef63e9bfb1a605ba1447cc2478ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:17:fa:bf:2d:6b:f3:d2:65:f4:2a:58:e9:10:
80:33:10:19:85:d4:0b:f5:1d:da:20:4c:2a:9f:f4:
89:3e:48:1f:55:25:db:44:da:ff:eb:12:49:b4:c9:
6d:3a:2f:68:eb:63:15:57:94:58:0e:e5:c3:f0:1d:
cf:c4:47:23:0e:51:0d:7b:44:b3:01:af:d5:a0:41:
76:fb:78:11:c2:46:9b:49:95:f7:d7:2d:40:ec:29:
38:dd:de:f7:33:8f:e9:bb:39:4a:3e:25:82:00:6c:
da:c5:db:0e:b3:3b:81:44:46:58:47:d2:a5:3a:f5:
05:a3:e2:07:f6:24:27:14:61:f6:59:ca:90:cd:31:
ad:28:7b:0e:6b:2f:c5:da:bc:7b:83:d9:82:c9:9f:
e3:61:3e:9f:e5:8d:03:32:69:61:53:2c:1c:fa:69:
6f:59:2e:a9:85:0c:48:24:73:29:07:0f:a9:5b:51:
b2:70:e6:fa:98:37:97:2b:7a:eb:ff:2a:7b:b3:6b:
b9:f3:2a:11:ee:42:3b:d3:6c:50:48:91:a0:5c:3d:
26:23:4a:fc:a1:f4:12:86:cd:f1:32:e6:24:bc:a7:
02:7e:ee:db:f2:a4:38:04:1e:aa:2f:64:13:7a:61:
e9:f2:fc:ff:ad:05:e9:d6:63:ed:d1:a4:ab:17:0e:
26:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:C7:2F:F1:9B:FF:EF:63:E9:BF:B1:A6:05:BA:14:47:CC:24:78:AB
X509v3 Authority Key Identifier:
keyid:CD:6C:BA:10:AB:46:5C:F0:EE:3E:76:02:5C:67:F8:55:4D:2D:01:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWy6EKtGXPDuPnYCXGf4VU0tAaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/51dd21-9db1-4224-9aac-56afc3cbdf4e/1/zWy6EKtGXPDuPnYCXGf4VU0tAaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/51dd21-9db1-4224-9aac-56afc3cbdf4e/1/zWy6EKtGXPDuPnYCXGf4VU0tAaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:e9:db:0a:7f:55:dc:f1:e3:5a:00:7c:22:24:69:0b:0f:cf:
f2:9f:db:28:da:7f:62:4e:d8:96:7f:0c:e6:40:a6:30:5d:75:
be:ad:0d:47:61:42:01:88:67:9d:bf:42:30:cc:c2:4a:a8:f5:
02:47:09:a9:a5:ff:2e:24:55:46:1c:b7:28:7b:e6:49:31:ad:
45:d4:1a:23:47:22:70:93:a7:a8:c0:4f:66:a6:1c:76:82:31:
eb:d8:c3:bf:80:05:cd:21:32:b3:7f:ee:d0:73:e3:fe:3f:95:
f8:95:30:a3:e8:cc:17:8c:1c:3e:01:00:7f:67:65:6f:44:b9:
6a:c8:98:d0:a2:41:47:f4:34:f9:00:11:c9:5e:30:50:a2:2f:
dc:d0:a1:f2:1a:1e:5e:37:73:96:92:9d:9c:f9:8b:62:fa:49:
3a:29:91:79:59:00:07:d6:4c:04:b4:9a:89:4c:e3:6c:fd:73:
f7:d3:08:6a:a9:42:31:b0:96:cb:8f:76:6d:ef:f3:2f:5d:91:
22:9f:49:43:f2:d8:24:5f:c7:f2:94:ed:d4:6a:dc:96:aa:71:
ea:ea:5c:e3:fc:58:20:5f:b8:d7:97:87:c9:5c:a1:88:24:71:
f3:c9:3f:bc:7d:e4:c4:e5:61:cc:a3:d6:aa:d0:f4:71:b9:97:
4d:32:a8:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 2 19:19:12 2025 by rpki-client