Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.mft
File: zr9l4AadvMdre1VujB1wWInfJ-k.mft (raw, json)
Hash identifier: miR/H8u6mBLWuBNeV6F3ngWGW5vYTCo2GNIEo+CCy0g=
Subject key identifier: 68:A7:D6:CC:AB:57:3E:D3:EA:EC:95:F5:1C:68:82:02:8A:07:D1:DF
Authority key identifier: CE:BF:65:E0:06:9D:BC:C7:6B:7B:55:6E:8C:1D:70:58:89:DF:27:E9
Certificate issuer: /CN=cebf65e0069dbcc76b7b556e8c1d705889df27e9
Certificate serial: 019A21AD7E953F8D53C194A2FAE546872A6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zr9l4AadvMdre1VujB1wWInfJ-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.mft
Manifest number: 1703
Signing time: Sun 26 Oct 2025 18:00:09 +0000
Manifest this update: Sun 26 Oct 2025 18:00:09 +0000
Manifest next update: Mon 27 Oct 2025 18:00:09 +0000
Files and hashes: 1: kNClGUwsPzE1RbZ5kG_8xETA5bQ.roa (hash: roFZQPowyRc/yMP0/ECMaCg3rilRHfIteyaYIvj0RIc=)
2: zr9l4AadvMdre1VujB1wWInfJ-k.crl (hash: HxqsUv/DvEkxozOSwQYfWDT6B/q0z+WLb+QrGFd+TLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/zr9l4AadvMdre1VujB1wWInfJ-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 18:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:ad:7e:95:3f:8d:53:c1:94:a2:fa:e5:46:87:2a:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cebf65e0069dbcc76b7b556e8c1d705889df27e9
Validity
Not Before: Oct 26 18:00:09 2025 GMT
Not After : Oct 27 18:00:09 2025 GMT
Subject: CN=68a7d6ccab573ed3eaec95f51c6882028a07d1df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fa:02:0b:49:6f:9a:c9:92:08:e9:65:6c:20:
2d:c1:74:7e:04:c8:62:b0:ef:3d:a8:84:e8:0e:a0:
52:a0:53:53:eb:80:fb:7d:66:a0:f1:a7:79:33:18:
13:50:00:a4:78:40:0e:4e:fb:6e:dd:30:0c:0f:6c:
00:01:5e:72:ca:c9:2f:44:87:f6:8e:48:f0:a1:44:
10:16:1e:39:f6:8a:92:93:0e:32:eb:ed:41:1b:ca:
77:6f:0a:68:ed:3c:fa:5a:92:83:08:05:2c:d8:97:
77:d1:42:4d:2e:e7:cd:cc:bb:b8:c1:fc:e4:e5:f8:
2a:41:5c:b6:b5:47:d3:b3:54:54:8d:41:16:fe:ab:
d1:ca:da:8a:c2:a8:cf:6a:97:95:66:8b:d6:d7:2b:
43:43:d5:4e:d8:56:38:f3:0a:f5:44:8a:89:26:38:
0c:9a:e0:5e:20:53:4a:b7:87:0e:bd:1a:f0:bf:65:
34:72:a5:b3:3f:e1:e0:bf:fd:48:4d:50:fa:a0:03:
bf:02:5e:22:c8:8e:af:21:06:82:bc:ec:a4:31:e2:
2c:0d:79:63:96:42:04:53:05:13:50:2c:d3:c3:86:
d9:0d:f9:db:79:7f:ce:3d:f0:7b:d1:94:fa:a9:c8:
cb:6d:c1:50:ff:e9:f6:74:a1:f5:50:56:f8:17:fb:
a9:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:A7:D6:CC:AB:57:3E:D3:EA:EC:95:F5:1C:68:82:02:8A:07:D1:DF
X509v3 Authority Key Identifier:
keyid:CE:BF:65:E0:06:9D:BC:C7:6B:7B:55:6E:8C:1D:70:58:89:DF:27:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zr9l4AadvMdre1VujB1wWInfJ-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:aa:a4:06:ab:e4:02:7b:2d:6a:32:0c:19:9f:a6:e4:f1:78:
ff:22:7e:63:96:02:ec:98:3a:d6:09:8e:d9:64:31:de:51:98:
c8:47:63:07:7e:fb:05:81:c4:ff:e6:b6:be:2d:2d:61:4c:31:
23:35:e4:1e:13:91:a9:4d:5a:86:fa:ef:25:03:51:8f:bd:45:
d7:89:5d:60:58:d9:2e:fb:2c:13:cb:6d:a7:5d:5a:4e:26:d7:
b1:d1:df:0d:37:07:aa:cb:bb:65:71:b9:df:9d:a4:e4:f0:b5:
e0:6a:10:de:73:83:6e:22:e8:07:9f:25:ae:80:65:20:4b:56:
36:f6:84:b0:0a:7b:da:4f:2f:03:54:83:98:a6:a4:b0:50:12:
0d:7e:57:91:8b:29:93:96:a8:c5:58:59:77:d3:86:1a:eb:6e:
b3:a8:71:77:93:43:b1:16:a1:fd:7c:68:00:ef:dd:88:20:1c:
2d:5a:6c:f5:c4:9a:1e:94:fa:62:90:51:35:79:52:ac:46:90:
7d:d0:56:cb:d9:dc:29:94:8d:1d:5d:ac:be:88:4b:29:ae:d1:
93:9f:ae:83:68:4d:aa:da:e5:71:f2:ff:2e:1f:4a:68:aa:85:
ec:14:57:90:67:9a:1b:7a:3c:3f:20:6b:bd:ae:c1:7b:3a:23:
71:e5:8f:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 01:49:49 2025 by rpki-client