Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/c8f41d-ea73-4a03-ba72-0f50773b0ede/1/_Zrjdhfz--SIgLIw_nx84PDcQcc.mft
File: _Zrjdhfz--SIgLIw_nx84PDcQcc.mft (raw, json)
Hash identifier: lO4Mp7gB62vGjYDCdWE7S9h21Tr8PUp8s2+BqRChHOQ=
Subject key identifier: ED:07:97:53:BF:73:B1:6B:0F:2D:1A:D6:A7:E6:FD:6B:0C:FB:43:A4
Authority key identifier: FD:9A:E3:76:17:F3:FB:E4:88:80:B2:30:FE:7C:7C:E0:F0:DC:41:C7
Certificate issuer: /CN=fd9ae37617f3fbe48880b230fe7c7ce0f0dc41c7
Certificate serial: 019A71B897F57B08C32D0A2BF6D5EEE90E6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Zrjdhfz--SIgLIw_nx84PDcQcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/c8f41d-ea73-4a03-ba72-0f50773b0ede/1/_Zrjdhfz--SIgLIw_nx84PDcQcc.mft
Manifest number: 038D
Signing time: Tue 11 Nov 2025 07:01:51 +0000
Manifest this update: Tue 11 Nov 2025 07:01:51 +0000
Manifest next update: Wed 12 Nov 2025 07:01:51 +0000
Files and hashes: 1: 9n6_QxUWNBj6pf-W1Docqojo_24.roa (hash: W63L5HqQHsa90UnMU3ePl9vAesD8fNZQ8F6zbeRpPKY=)
2: _Zrjdhfz--SIgLIw_nx84PDcQcc.crl (hash: oe3JnGnUZVgw0HEbkj8pOG6+9GYjPPMO8Ej+dH1CIEA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/c8f41d-ea73-4a03-ba72-0f50773b0ede/1/_Zrjdhfz--SIgLIw_nx84PDcQcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/c8f41d-ea73-4a03-ba72-0f50773b0ede/1/_Zrjdhfz--SIgLIw_nx84PDcQcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Zrjdhfz--SIgLIw_nx84PDcQcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:97:f5:7b:08:c3:2d:0a:2b:f6:d5:ee:e9:0e:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd9ae37617f3fbe48880b230fe7c7ce0f0dc41c7
Validity
Not Before: Nov 11 07:01:51 2025 GMT
Not After : Nov 12 07:01:51 2025 GMT
Subject: CN=ed079753bf73b16b0f2d1ad6a7e6fd6b0cfb43a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:59:08:fa:10:27:40:7c:0a:fb:35:b3:c5:6e:
6e:ea:a5:d1:ed:cf:10:1a:0d:b1:d3:bd:42:d1:3f:
e2:a2:3a:31:b3:fb:4a:51:f4:a4:15:9f:52:b6:e0:
5c:3b:ef:7d:a5:9b:7c:6c:f1:f7:0b:0e:75:db:60:
fb:eb:0c:50:a6:de:b6:9e:01:4e:04:69:a2:3d:8c:
6a:74:8f:6f:7c:df:d1:38:7e:72:43:0f:f9:f0:9c:
41:61:77:dd:34:84:3e:0d:94:be:b8:69:d9:df:fd:
c9:56:95:a8:95:f4:3d:e5:dd:c7:c4:7c:5b:e6:9b:
c0:75:0c:91:c2:60:7e:32:1b:3c:49:61:ea:fa:08:
2b:b1:7b:82:c4:b2:77:81:18:ff:21:0a:f8:d3:9b:
23:fe:9a:32:a9:b9:e1:d9:34:30:c0:5e:9a:47:26:
bd:8d:a5:42:9f:6c:2a:13:e6:26:c2:73:d7:7a:12:
38:5d:72:48:58:0e:aa:4c:d6:d5:d3:f9:0e:c6:0a:
99:c3:57:21:97:c2:30:99:5d:00:92:56:98:b2:0f:
9a:6a:93:1e:5f:1b:8b:7f:24:dc:e2:82:ab:f0:46:
66:6e:86:cc:3b:fc:5f:a0:86:28:0b:77:5a:69:23:
56:bc:b7:e1:c0:c2:0e:31:50:5a:3c:6e:c6:b1:93:
fc:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:07:97:53:BF:73:B1:6B:0F:2D:1A:D6:A7:E6:FD:6B:0C:FB:43:A4
X509v3 Authority Key Identifier:
keyid:FD:9A:E3:76:17:F3:FB:E4:88:80:B2:30:FE:7C:7C:E0:F0:DC:41:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Zrjdhfz--SIgLIw_nx84PDcQcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c8f41d-ea73-4a03-ba72-0f50773b0ede/1/_Zrjdhfz--SIgLIw_nx84PDcQcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c8f41d-ea73-4a03-ba72-0f50773b0ede/1/_Zrjdhfz--SIgLIw_nx84PDcQcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:94:41:4d:21:25:f6:65:65:45:ea:af:01:da:d3:91:a4:5c:
b2:3e:3f:95:c2:c7:79:68:c6:bc:2d:be:34:9d:c8:63:6c:6b:
2d:02:df:c4:36:2d:83:c3:5c:54:80:7e:2b:aa:69:d9:66:b2:
36:80:b5:94:7f:e9:3a:b4:dc:b8:66:1f:7a:b8:80:43:35:c7:
d0:68:d3:5e:80:3e:a6:1a:69:69:bf:b6:38:1f:e4:e9:46:54:
7e:cf:fc:99:de:9a:b7:80:43:b0:ef:27:ca:94:46:98:dd:01:
bc:3f:3c:83:8f:c5:8b:9d:07:7e:34:35:0b:41:1e:51:4a:94:
76:6f:07:cb:c9:07:f3:ed:0b:85:01:16:b8:ea:e5:67:10:7d:
13:cd:54:2f:4e:a2:31:c2:84:61:ec:a5:60:07:6e:72:99:8f:
15:ae:49:26:ff:a1:f2:12:33:f5:01:f0:f6:25:c2:56:e7:59:
a5:3f:cf:03:c7:c6:6f:26:59:bf:a7:cd:d7:c8:ed:60:18:cd:
9b:2d:7e:b1:a3:9c:b0:4c:26:a6:f4:65:53:40:69:0d:05:a3:
8a:9a:58:2d:b5:62:75:35:12:df:60:ac:52:85:58:4b:76:b1:
cf:a6:20:3c:6d:85:d0:fc:a8:3c:57:f8:b6:5c:16:60:b7:62:
67:f6:5b:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:35 2025 by rpki-client