Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/a7851c-bb78-4f29-a1d9-7b991824bd83/1/zyddD-Y5mOobfTnlGPsyn3a-0WY.mft
File: zyddD-Y5mOobfTnlGPsyn3a-0WY.mft (raw, json)
Hash identifier: xmMLf318bf4lpEjCpTwMW8Jn1AF7tGjAru24pDIW3h0=
Subject key identifier: F2:54:D2:96:BB:07:71:C5:6A:BF:A4:3B:37:7B:F1:40:7A:42:2A:BC
Authority key identifier: CF:27:5D:0F:E6:39:98:EA:1B:7D:39:E5:18:FB:32:9F:76:BE:D1:66
Certificate issuer: /CN=cf275d0fe63998ea1b7d39e518fb329f76bed166
Certificate serial: 019A71EEAE565F7D59D8484C381DFEEC8D90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zyddD-Y5mOobfTnlGPsyn3a-0WY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/a7851c-bb78-4f29-a1d9-7b991824bd83/1/zyddD-Y5mOobfTnlGPsyn3a-0WY.mft
Manifest number: 050D
Signing time: Tue 11 Nov 2025 08:00:58 +0000
Manifest this update: Tue 11 Nov 2025 08:00:58 +0000
Manifest next update: Wed 12 Nov 2025 08:00:58 +0000
Files and hashes: 1: vk0CZ3RFiVMIPV6fJBbYIndo60g.roa (hash: nhR9r0G3s61c+Tu68ZLIyGOtCmlcHBQEXfCV7pOI8N4=)
2: zyddD-Y5mOobfTnlGPsyn3a-0WY.crl (hash: +b48/50jrMKFodp0GPmpaOrDYTOI0QVUdNWf6vK5qLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/a7851c-bb78-4f29-a1d9-7b991824bd83/1/zyddD-Y5mOobfTnlGPsyn3a-0WY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/a7851c-bb78-4f29-a1d9-7b991824bd83/1/zyddD-Y5mOobfTnlGPsyn3a-0WY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zyddD-Y5mOobfTnlGPsyn3a-0WY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:ae:56:5f:7d:59:d8:48:4c:38:1d:fe:ec:8d:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf275d0fe63998ea1b7d39e518fb329f76bed166
Validity
Not Before: Nov 11 08:00:58 2025 GMT
Not After : Nov 12 08:00:58 2025 GMT
Subject: CN=f254d296bb0771c56abfa43b377bf1407a422abc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8e:81:51:77:79:3a:58:68:bd:61:c4:98:c5:
4e:00:14:5c:c5:32:3e:83:9a:b8:d7:99:9a:f9:fc:
cf:e8:52:34:22:bd:93:0d:27:8c:2e:42:06:5b:48:
51:2c:73:5e:da:af:b2:24:10:3e:ec:b6:12:d0:3a:
31:cf:ef:19:1e:a4:58:ae:a8:42:94:78:c5:4e:73:
f2:d4:ae:b2:95:d5:92:cd:4e:17:fd:75:d8:70:02:
dc:d9:0a:d0:25:eb:14:69:15:07:ae:85:c1:b8:42:
bd:b8:4f:4b:de:f1:0c:35:cf:e9:59:fa:50:4b:bc:
f3:7d:b9:7d:4e:88:76:51:ae:ea:23:d2:72:50:58:
31:fa:8a:88:38:ac:17:66:33:af:c5:86:2d:42:45:
df:37:a3:76:c9:6b:26:7c:26:f3:a6:65:e5:7f:b2:
db:b6:72:62:97:2e:f5:a0:de:80:e4:13:f6:f4:de:
6d:23:e8:36:cb:bf:79:78:66:7f:33:5a:ae:fa:a6:
e0:1c:43:e6:4f:8f:b7:74:c6:f8:3b:93:76:c1:63:
1a:96:c2:89:a2:f7:98:8c:8c:a8:6c:b2:94:99:93:
ec:d2:93:98:90:3a:2c:92:2b:94:d5:b8:f1:3a:7a:
9f:d7:a2:7f:a4:c2:e4:a5:49:5b:43:a4:33:aa:e7:
c6:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:54:D2:96:BB:07:71:C5:6A:BF:A4:3B:37:7B:F1:40:7A:42:2A:BC
X509v3 Authority Key Identifier:
keyid:CF:27:5D:0F:E6:39:98:EA:1B:7D:39:E5:18:FB:32:9F:76:BE:D1:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zyddD-Y5mOobfTnlGPsyn3a-0WY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a7851c-bb78-4f29-a1d9-7b991824bd83/1/zyddD-Y5mOobfTnlGPsyn3a-0WY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a7851c-bb78-4f29-a1d9-7b991824bd83/1/zyddD-Y5mOobfTnlGPsyn3a-0WY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:60:71:fd:bc:6d:c8:7f:dd:85:c7:7a:1d:2b:ee:3e:2d:1f:
d2:a4:4a:22:cc:4e:d5:82:53:36:45:cf:cb:32:8d:37:ff:4b:
16:10:3c:6b:53:15:49:16:af:93:c7:2c:1e:fb:19:08:0d:b7:
5b:f2:87:f7:f1:55:a7:be:25:3a:b2:e2:c5:4e:b2:23:b8:c2:
ec:66:83:04:0f:d2:22:dd:ed:27:7d:8c:4e:1c:b5:f0:f6:34:
d3:71:39:db:1f:7d:61:87:7d:17:bb:e5:e4:5d:b3:27:6f:ec:
34:ac:fd:2d:3a:7a:84:34:ce:a2:f2:3c:51:39:95:f9:04:03:
f7:50:6b:c0:e8:a2:02:63:02:c3:92:ab:d1:89:19:6d:9a:76:
8e:56:ba:d8:a7:29:50:70:ca:b7:52:92:74:0c:98:10:fc:ff:
68:a7:5c:a4:1b:14:5c:98:92:76:e2:6d:ca:06:6a:53:87:4a:
a6:73:de:ff:b4:50:73:c7:ac:96:2d:13:f8:6a:67:1f:fb:cd:
b5:fd:e9:c6:93:7a:5a:26:df:c7:6c:93:fb:04:34:2b:5c:bf:
54:81:a3:4c:df:e7:00:a0:ee:8c:97:e0:bb:37:b7:6b:11:1f:
6c:40:9a:0f:bc:74:2c:6b:2e:e8:1b:b8:9b:17:99:20:8b:37:
e8:3e:4b:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:16:06 2025 by rpki-client