Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/272986-88a9-477c-a277-a55b580b0ea3/1/zfUae0xbJFgCkrjEqmqpwyVmVIA.mft
File: zfUae0xbJFgCkrjEqmqpwyVmVIA.mft (raw, json)
Hash identifier: Vo4jHfLRTnec+byvRmniawEqCVNTNSpInF12vFBfeKM=
Subject key identifier: 26:97:2C:F1:D6:6A:14:4C:95:B6:E6:63:E8:E0:7B:C2:48:3D:76:29
Authority key identifier: CD:F5:1A:7B:4C:5B:24:58:02:92:B8:C4:AA:6A:A9:C3:25:66:54:80
Certificate issuer: /CN=cdf51a7b4c5b24580292b8c4aa6aa9c325665480
Certificate serial: 019A7149FEB6029AF4DFD2978841E1302BA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zfUae0xbJFgCkrjEqmqpwyVmVIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/272986-88a9-477c-a277-a55b580b0ea3/1/zfUae0xbJFgCkrjEqmqpwyVmVIA.mft
Manifest number: 0C14
Signing time: Tue 11 Nov 2025 05:01:05 +0000
Manifest this update: Tue 11 Nov 2025 05:01:05 +0000
Manifest next update: Wed 12 Nov 2025 05:01:05 +0000
Files and hashes: 1: VEgZIBYWjoldzkGuakwy0OuiD_g.roa (hash: /UHAw/sksRIzZ9d6cBH90oCHv9WV9PgycAVZrQjs45g=)
2: zfUae0xbJFgCkrjEqmqpwyVmVIA.crl (hash: W0Bgcd5HrLxkhHo4bwBdl5hSWxW0JOi9R4GdKYoOXyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/272986-88a9-477c-a277-a55b580b0ea3/1/zfUae0xbJFgCkrjEqmqpwyVmVIA.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/272986-88a9-477c-a277-a55b580b0ea3/1/zfUae0xbJFgCkrjEqmqpwyVmVIA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zfUae0xbJFgCkrjEqmqpwyVmVIA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:fe:b6:02:9a:f4:df:d2:97:88:41:e1:30:2b:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdf51a7b4c5b24580292b8c4aa6aa9c325665480
Validity
Not Before: Nov 11 05:01:05 2025 GMT
Not After : Nov 12 05:01:05 2025 GMT
Subject: CN=26972cf1d66a144c95b6e663e8e07bc2483d7629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:6f:77:3d:d9:05:78:4a:c4:53:24:89:7b:d5:
9e:0d:fa:3a:66:87:d7:99:99:81:d1:51:1d:51:3e:
52:73:2f:f1:d2:cd:d4:9b:5f:ab:78:67:db:ee:59:
fb:be:3d:61:9f:c0:f6:b8:86:17:1f:32:54:92:be:
a1:9c:18:2c:b7:79:77:97:be:43:71:d7:ec:04:50:
79:af:33:7c:4b:c6:fe:f1:db:0a:55:d1:07:31:3f:
1a:10:f5:71:31:4f:2c:ad:15:32:f6:40:ca:3c:0f:
b6:e2:a2:d7:bd:06:53:41:9a:fa:8c:05:0a:0a:64:
1a:f3:59:49:76:c9:01:76:1e:61:03:3b:1a:3e:cb:
f1:15:3a:32:33:a3:00:77:5e:66:ec:6b:23:6a:cc:
cb:64:be:70:ac:da:65:16:c1:02:0b:3b:75:54:a2:
f1:8e:fe:bb:72:78:98:f3:4f:1e:5a:49:23:19:7e:
92:02:c6:ab:84:ed:a6:c5:37:85:e5:49:99:d7:ef:
51:63:a6:21:17:15:58:26:22:1f:0a:ca:10:2e:b9:
30:9a:02:02:85:b9:7f:85:e1:21:ad:ba:eb:78:4e:
59:be:eb:2d:c6:59:b4:9b:6f:e5:29:41:7c:f6:a2:
6b:1a:a5:5e:ae:a4:94:1f:5f:38:d7:c7:42:a9:6e:
68:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:97:2C:F1:D6:6A:14:4C:95:B6:E6:63:E8:E0:7B:C2:48:3D:76:29
X509v3 Authority Key Identifier:
keyid:CD:F5:1A:7B:4C:5B:24:58:02:92:B8:C4:AA:6A:A9:C3:25:66:54:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zfUae0xbJFgCkrjEqmqpwyVmVIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/272986-88a9-477c-a277-a55b580b0ea3/1/zfUae0xbJFgCkrjEqmqpwyVmVIA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/272986-88a9-477c-a277-a55b580b0ea3/1/zfUae0xbJFgCkrjEqmqpwyVmVIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:9c:82:08:d3:a2:1e:40:f9:7d:e8:fa:c8:65:0a:af:c3:cd:
4c:bc:05:f5:e8:20:79:49:2d:22:72:5f:fa:0d:b7:75:a0:12:
f7:03:12:64:f9:8e:c4:75:8d:ff:a9:e6:40:20:f4:d2:4b:07:
de:46:c5:68:9d:03:78:ab:19:38:c5:cf:58:12:bc:20:40:92:
a1:b0:d3:ef:be:99:f1:19:ed:12:13:4b:27:71:ad:26:0b:30:
ec:27:9b:83:63:17:d7:9f:11:8f:da:df:18:a4:25:09:21:4e:
5d:bf:f7:66:03:13:51:6a:0a:c4:99:4e:5a:77:75:c3:d4:f9:
01:73:0a:19:62:3a:64:31:31:f3:84:23:42:0f:45:de:df:59:
d1:c4:13:a1:1b:2a:07:af:20:16:42:85:b1:b2:d9:ee:8e:d8:
75:05:84:86:2a:e7:18:b0:d7:c5:62:4c:7b:7c:89:66:c1:91:
2a:65:33:17:be:8e:0c:df:c7:07:74:92:bf:a5:3d:51:ca:15:
b2:61:32:fe:c9:8d:eb:99:a3:01:3d:c8:26:43:3a:36:b3:e8:
21:6a:96:44:6d:60:e0:2d:54:c1:8a:89:c2:37:e4:66:65:ae:
03:30:b1:11:b0:08:3b:16:25:50:5f:14:83:7b:6b:24:79:ff:
e8:01:6a:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:14:21 2025 by rpki-client