Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/407a3f-66c0-4979-a725-09eb0013fc24/1/zJgWyv_6ViY90NdIGclNVALxu20.mft
File: zJgWyv_6ViY90NdIGclNVALxu20.mft (raw, json)
Hash identifier: YXvIVHoGLWWjfY9X8xwx5y9sGXBC5U1jylRYCuNhn2w=
Subject key identifier: DA:B8:F2:C2:74:99:B7:18:8A:DE:40:93:D2:AE:5A:7A:10:36:51:97
Authority key identifier: CC:98:16:CA:FF:FA:56:26:3D:D0:D7:48:19:C9:4D:54:02:F1:BB:6D
Certificate issuer: /CN=cc9816cafffa56263dd0d74819c94d5402f1bb6d
Certificate serial: 019A7112ACB73DF0048BFDDB74E93F4FFA0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zJgWyv_6ViY90NdIGclNVALxu20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/407a3f-66c0-4979-a725-09eb0013fc24/1/zJgWyv_6ViY90NdIGclNVALxu20.mft
Manifest number: 02D3
Signing time: Tue 11 Nov 2025 04:00:39 +0000
Manifest this update: Tue 11 Nov 2025 04:00:39 +0000
Manifest next update: Wed 12 Nov 2025 04:00:39 +0000
Files and hashes: 1: 8o5AYWh-4RXgT7Kh5e_5gWGFnZs.roa (hash: WhyrbQbNYw+ibwL1fIGjF77XjkxU2NCmWVAW1D5cDrM=)
2: zJgWyv_6ViY90NdIGclNVALxu20.crl (hash: KhfFnkkUrb8GapTxTjtDpuO1OgNJ5Bco+i/CJU3oE/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/407a3f-66c0-4979-a725-09eb0013fc24/1/zJgWyv_6ViY90NdIGclNVALxu20.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/407a3f-66c0-4979-a725-09eb0013fc24/1/zJgWyv_6ViY90NdIGclNVALxu20.mft
rsync://rpki.ripe.net/repository/DEFAULT/zJgWyv_6ViY90NdIGclNVALxu20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:ac:b7:3d:f0:04:8b:fd:db:74:e9:3f:4f:fa:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc9816cafffa56263dd0d74819c94d5402f1bb6d
Validity
Not Before: Nov 11 04:00:39 2025 GMT
Not After : Nov 12 04:00:39 2025 GMT
Subject: CN=dab8f2c27499b7188ade4093d2ae5a7a10365197
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:84:1b:c8:74:ff:45:13:93:59:62:db:b2:8b:
f9:46:7a:17:53:2e:4d:cd:de:6b:33:a4:5d:ae:d0:
bd:92:b6:1e:3d:01:3d:b7:ae:92:6f:75:9b:11:8c:
15:f5:5c:ad:a2:dd:eb:1c:b6:2b:a0:96:5e:83:86:
84:4d:05:9b:9b:d8:ca:43:fc:32:dd:79:4d:a6:b4:
d6:eb:ca:26:02:70:c1:64:24:4b:f0:8a:31:57:60:
60:35:76:ca:8d:7d:5e:7a:07:0b:54:f8:6d:35:a4:
fb:4f:83:56:0f:c3:73:8c:a5:47:dc:e1:5d:7c:c9:
a1:ac:0b:27:98:54:8c:ef:07:d3:29:02:af:c8:77:
0d:af:20:44:77:28:df:f1:77:a3:d7:4b:c9:27:be:
12:e7:be:c4:32:e5:ad:4d:53:dd:c9:82:a8:7f:f6:
c3:b2:9e:12:8a:27:8b:7c:1e:59:c3:bd:4b:2c:f6:
13:3c:b3:c5:e0:44:15:ed:39:a6:5c:5e:fb:f8:da:
46:83:54:57:d4:57:4f:bd:15:65:17:14:4b:e6:1a:
73:23:ff:4c:a6:48:c2:eb:67:dd:a7:2f:be:ab:5e:
ee:a3:7f:70:2d:53:be:c8:af:86:53:cb:76:a9:ee:
9e:b9:68:a4:e2:55:5f:ef:71:05:bd:8a:bc:10:89:
fa:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:B8:F2:C2:74:99:B7:18:8A:DE:40:93:D2:AE:5A:7A:10:36:51:97
X509v3 Authority Key Identifier:
keyid:CC:98:16:CA:FF:FA:56:26:3D:D0:D7:48:19:C9:4D:54:02:F1:BB:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zJgWyv_6ViY90NdIGclNVALxu20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/407a3f-66c0-4979-a725-09eb0013fc24/1/zJgWyv_6ViY90NdIGclNVALxu20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/407a3f-66c0-4979-a725-09eb0013fc24/1/zJgWyv_6ViY90NdIGclNVALxu20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:e9:af:69:ee:22:d2:da:b2:84:49:1e:78:44:80:f6:dc:6a:
49:fb:6a:b3:35:cf:74:45:ce:d5:0c:97:eb:70:3d:5c:7c:4d:
1b:e6:e7:19:a1:dc:fc:83:66:1a:10:d8:fb:eb:e7:0c:4c:9b:
49:d1:07:4b:8b:4c:54:4c:25:f6:57:42:8d:41:6c:93:d8:34:
4e:53:2e:5a:3a:15:96:a5:b5:ed:9b:52:cc:97:33:90:7b:ed:
c0:c9:26:6c:87:89:e6:4d:b8:f2:0e:92:96:37:64:e8:da:2b:
d3:9e:4a:ef:9b:bf:f0:f5:71:48:b9:e2:c2:cd:5e:e8:09:40:
13:e8:5e:5a:c2:8f:37:bf:89:51:19:cd:f8:ca:e7:92:c3:1c:
d3:46:54:94:e0:94:22:bc:09:9d:30:c2:ea:ef:9f:8c:3f:3d:
a1:5b:52:91:6f:b6:97:c9:88:23:f4:0a:7b:e0:a4:a1:f4:39:
80:07:e8:55:bf:5d:87:93:9c:8b:03:9c:c7:8c:a2:3e:74:65:
53:f6:1e:01:be:b0:26:8e:86:30:9a:bd:96:97:a0:b2:29:91:
be:a8:aa:b7:4f:48:b1:45:37:0d:c6:2a:07:eb:58:20:ab:e1:
fd:b2:e5:bb:4a:c1:ab:74:ed:7b:28:ce:af:29:22:dd:57:0b:
12:08:1c:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:47:27 2025 by rpki-client