Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.mft
File: znGAxLrTz0JaUGcuHLep0qx44gw.mft (raw, json)
Hash identifier: 8lx8iado/P1rNGPUjAHatCAkT+354vSqeDc1X97hpoE=
Subject key identifier: 11:5A:C8:9F:55:FE:DE:2A:76:79:DD:B5:74:2D:34:5A:10:4C:B0:1A
Authority key identifier: CE:71:80:C4:BA:D3:CF:42:5A:50:67:2E:1C:B7:A9:D2:AC:78:E2:0C
Certificate issuer: /CN=ce7180c4bad3cf425a50672e1cb7a9d2ac78e20c
Certificate serial: 019A194F990D17D0D0232BA3894CEC2C33F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/znGAxLrTz0JaUGcuHLep0qx44gw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.mft
Manifest number: 1398
Signing time: Sat 25 Oct 2025 03:00:38 +0000
Manifest this update: Sat 25 Oct 2025 03:00:38 +0000
Manifest next update: Sun 26 Oct 2025 03:00:38 +0000
Files and hashes: 1: GeqUCcFpQ21Ke1I_WIJvk2jePiQ.roa (hash: 26yR+VCk/Hf4BfoJU9xGk7UFdbLVpFDxyv4u/gu5wGA=)
2: wbMPRaPeBCBjr_X1gpDO7WwYRg0.roa (hash: GEEk7uH2XTiN16zpAji2ekHgUSjOP6/rQg31rkY0wKE=)
3: xG8mhMV87H4zrHIWKqzuRUqeQPg.roa (hash: urIMILztFQN60p/ZQRBKUgWXG4HvMI/s4ku0GaXCltA=)
4: znGAxLrTz0JaUGcuHLep0qx44gw.crl (hash: hWAINFRZ45ZQtfElxccj84sDe3RAXP9X0mfUtbLv5QI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.mft
rsync://rpki.ripe.net/repository/DEFAULT/znGAxLrTz0JaUGcuHLep0qx44gw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:19:4f:99:0d:17:d0:d0:23:2b:a3:89:4c:ec:2c:33:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce7180c4bad3cf425a50672e1cb7a9d2ac78e20c
Validity
Not Before: Oct 25 03:00:38 2025 GMT
Not After : Oct 26 03:00:38 2025 GMT
Subject: CN=115ac89f55fede2a7679ddb5742d345a104cb01a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5d:89:c7:94:7e:16:ee:e1:e3:19:84:68:bf:
5d:57:16:2b:31:8a:d8:43:3a:6e:b2:d3:d4:e4:4e:
be:f4:85:86:7f:33:64:77:6e:dc:b0:1e:bd:3b:88:
78:32:ef:c7:96:9b:49:79:58:e2:b6:51:cc:16:ba:
4c:c8:f9:85:62:3e:b7:cd:84:12:fe:aa:80:89:9c:
b5:32:13:20:e0:81:f8:ef:6d:99:25:3f:b7:83:f1:
9e:16:ff:75:17:98:21:9b:be:67:14:dd:7b:5c:3e:
8d:fd:db:db:0c:f4:cc:5b:8d:f5:18:ad:4e:a8:0c:
8c:10:68:d3:56:45:3b:f2:52:a7:37:5c:3c:0a:bc:
47:82:95:81:3c:6b:db:e1:59:78:f3:7f:73:a3:1d:
4a:59:71:7c:a8:29:e9:b9:6a:27:b7:7b:78:5a:9b:
c2:08:a7:09:66:d3:f8:af:06:8e:4e:3f:b5:22:21:
77:7c:29:40:6c:8a:a1:49:b9:17:4d:44:70:12:9a:
04:1c:7f:1a:1f:48:41:88:61:0c:7f:7f:02:4c:eb:
a1:85:ee:62:df:6f:25:dc:a7:3f:cb:8d:b0:19:88:
fd:98:19:57:dd:4a:a6:25:de:01:d3:e5:af:ee:93:
c8:3c:1e:34:37:63:4d:52:d2:c0:26:31:ac:3e:29:
6f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:5A:C8:9F:55:FE:DE:2A:76:79:DD:B5:74:2D:34:5A:10:4C:B0:1A
X509v3 Authority Key Identifier:
keyid:CE:71:80:C4:BA:D3:CF:42:5A:50:67:2E:1C:B7:A9:D2:AC:78:E2:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/znGAxLrTz0JaUGcuHLep0qx44gw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:6a:36:84:4b:55:07:8c:4a:9f:c2:dd:44:e3:1d:dd:59:7f:
ac:6b:4b:cb:cd:b2:95:09:37:10:5e:53:25:45:89:2d:a3:bc:
d5:05:29:dd:1c:75:40:3a:79:91:37:0a:36:ea:46:5d:a5:29:
f9:21:29:12:2b:ce:a3:0a:9a:72:d9:8e:29:c9:6e:b1:04:56:
52:1d:b6:da:c5:1e:ab:5e:95:e9:df:c3:f2:4e:9e:fb:ce:f8:
f2:50:c6:48:6b:78:fc:60:06:e9:44:24:fa:6e:7f:21:a2:f8:
5b:49:72:69:a1:a6:94:31:55:12:f6:66:1f:e5:e7:c0:df:e1:
7c:c6:28:d8:80:e6:42:65:8c:4e:98:96:7d:fe:d9:9a:7c:03:
ab:c5:fb:ec:82:03:c5:39:f2:4d:10:c3:10:0b:37:6c:aa:b4:
92:bf:d9:44:6e:d7:3b:17:96:5d:3a:80:02:88:b0:7d:9c:08:
20:9f:21:aa:0c:16:04:4a:4f:48:83:b8:22:04:1e:c8:4f:bb:
87:61:3c:59:a5:57:68:43:da:1c:6b:15:03:c4:40:3b:94:ab:
f7:80:87:1b:11:11:3e:ec:0c:3c:06:95:f0:f6:5a:7a:79:9e:
c9:1f:56:1d:4b:51:ec:ab:08:24:6b:e6:04:0a:8d:2d:ee:47:
96:03:13:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 09:00:11 2025 by rpki-client