Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.mft
File: ZmA0ymoWu9AUSr31zyRY-WixWJw.mft (raw, json)
Hash identifier: QlGEi+jTi14i65CqiME4CFwr6gkLHbxVemdPeHiTBkM=
Subject key identifier: 5A:A4:0D:AA:B5:71:84:FA:A6:F8:FE:45:CF:AE:66:B7:ED:C0:95:32
Authority key identifier: 66:60:34:CA:6A:16:BB:D0:14:4A:BD:F5:CF:24:58:F9:68:B1:58:9C
Certificate issuer: /CN=666034ca6a16bbd0144abdf5cf2458f968b1589c
Certificate serial: 019A2DB1C1BE3DA085E9705DFB7576D0EC84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZmA0ymoWu9AUSr31zyRY-WixWJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.mft
Manifest number: 0BB6
Signing time: Wed 29 Oct 2025 02:00:15 +0000
Manifest this update: Wed 29 Oct 2025 02:00:15 +0000
Manifest next update: Thu 30 Oct 2025 02:00:15 +0000
Files and hashes: 1: 5bucpm77LtnXjK7o-jpiDW291Yw.roa (hash: S2CYvpEr7FdqvUdlAxqrDbEjDQNF8pYqq1mftWv1ZPE=)
2: 81yN31-IxQXIZI5PlY-trqqNIno.roa (hash: v9l8y9I+7ljSUfpIaDADoFiNw5hBtJQ72MRZ64GdbyQ=)
3: ZmA0ymoWu9AUSr31zyRY-WixWJw.crl (hash: 0zN7qO9O0ymSMUlPjm78QLcXFamnS7zbksYZ3xs8Pos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZmA0ymoWu9AUSr31zyRY-WixWJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Oct 2025 02:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2d:b1:c1:be:3d:a0:85:e9:70:5d:fb:75:76:d0:ec:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=666034ca6a16bbd0144abdf5cf2458f968b1589c
Validity
Not Before: Oct 29 02:00:15 2025 GMT
Not After : Oct 30 02:00:15 2025 GMT
Subject: CN=5aa40daab57184faa6f8fe45cfae66b7edc09532
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a1:5b:f7:ca:91:17:7b:98:8e:cf:86:ec:b5:
e8:12:a9:a0:32:87:5b:57:63:d6:81:c8:97:82:0d:
1a:18:a8:ba:6e:b4:2f:99:ab:13:a6:02:3b:0c:02:
d8:6f:04:c0:91:9c:82:d8:5d:1e:2a:3d:dd:d7:a4:
81:15:22:00:1a:ff:e7:ed:bd:f5:6d:d0:e5:83:48:
ea:51:44:3d:8f:98:1a:a7:e2:75:30:d0:a1:3b:e1:
6e:e7:28:6f:06:63:d7:80:85:2d:06:2c:a0:59:52:
23:8f:f0:ab:c5:58:a3:f2:f5:ad:fd:88:d5:de:a7:
fc:ec:4e:76:52:58:ad:83:a9:cb:28:24:c3:cc:d0:
41:8a:4f:da:0f:9b:c4:2c:8b:8e:81:d9:ac:5d:3a:
a1:7a:2d:2c:72:4e:80:72:e8:bd:55:77:8f:7d:72:
e9:0c:95:9a:d7:db:05:05:b6:de:da:ca:cf:64:e1:
6b:ea:c4:e3:21:fd:fa:28:cd:de:b5:2f:7f:97:20:
59:fd:ed:ed:dc:e8:c8:87:5d:73:dd:9b:67:99:5d:
c5:56:60:5b:36:77:3b:cd:a0:3c:f3:c5:88:5c:61:
af:bd:a9:53:f8:b9:0a:44:0a:5b:83:65:7b:07:e4:
3f:48:cf:86:a6:96:fc:4c:b8:8b:4e:71:79:62:75:
07:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:A4:0D:AA:B5:71:84:FA:A6:F8:FE:45:CF:AE:66:B7:ED:C0:95:32
X509v3 Authority Key Identifier:
keyid:66:60:34:CA:6A:16:BB:D0:14:4A:BD:F5:CF:24:58:F9:68:B1:58:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmA0ymoWu9AUSr31zyRY-WixWJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:3b:03:1b:86:5b:f1:75:b6:7c:bc:ea:0c:53:f8:a0:a6:ca:
57:19:89:c2:89:6c:75:d4:d6:12:96:dc:e0:60:3c:5a:ec:d6:
68:26:e8:cc:ed:9b:58:c2:2c:f5:fe:17:2d:92:01:77:56:6a:
e2:80:bb:5f:31:c9:20:97:e0:76:d7:94:c8:05:2f:66:a0:c6:
48:43:79:69:32:08:ab:d4:0e:ab:8d:32:9d:ba:3d:e1:96:87:
b7:9d:ab:e1:51:8d:65:c9:a9:fe:39:6b:9f:b0:bd:1c:3a:e4:
13:fd:d1:c9:b9:c1:26:5b:13:c5:8b:b8:bf:86:2b:3a:bd:17:
4b:c5:9d:22:27:e0:c0:b9:bd:bb:78:e7:c1:8e:bc:00:e2:5a:
3a:a0:99:95:48:a8:0d:fa:7f:25:7c:80:ea:c7:a1:63:ee:cb:
b2:02:10:fa:5c:c1:8f:1c:f0:5e:6f:44:32:b4:ad:41:05:40:
52:31:a0:ba:40:63:5e:1e:74:ff:03:4a:a0:12:c2:dc:76:76:
34:f4:6b:5a:4a:41:b2:2d:2e:47:27:cb:3a:24:54:66:96:5f:
17:f9:7f:53:86:95:62:7f:2e:3f:e9:cc:5f:45:55:a0:fb:80:
74:45:ac:cf:5a:8b:82:a9:4a:99:d8:2e:91:b1:54:5c:cb:5d:
63:d5:58:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 11:05:37 2025 by rpki-client