Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/299fe7-9ab7-473a-b62a-ab063938f1ce/1/zQzH_YiYsPffS53wuZMZvLKewkM.mft
File: zQzH_YiYsPffS53wuZMZvLKewkM.mft (raw, json)
Hash identifier: tv7xbvDduwYTtaYWqrDrV9DbkIwq9EKh61jB1CU3U5I=
Subject key identifier: 2A:6E:3D:A2:D9:2B:B3:02:C0:F7:68:87:7B:92:30:97:43:03:9B:40
Authority key identifier: CD:0C:C7:FD:88:98:B0:F7:DF:4B:9D:F0:B9:93:19:BC:B2:9E:C2:43
Certificate issuer: /CN=cd0cc7fd8898b0f7df4b9df0b99319bcb29ec243
Certificate serial: 019A70DC04F49DB2D010201D86D319706B07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zQzH_YiYsPffS53wuZMZvLKewkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/299fe7-9ab7-473a-b62a-ab063938f1ce/1/zQzH_YiYsPffS53wuZMZvLKewkM.mft
Manifest number: 1722
Signing time: Tue 11 Nov 2025 03:00:58 +0000
Manifest this update: Tue 11 Nov 2025 03:00:58 +0000
Manifest next update: Wed 12 Nov 2025 03:00:58 +0000
Files and hashes: 1: Wkz81xMUDLClFehnNcO08jklh9k.roa (hash: BKlpXBQEP/op0lp2TcMqqMdmqdUhy61w00wNP+uB+Zw=)
2: zQzH_YiYsPffS53wuZMZvLKewkM.crl (hash: SC7ELKRVlfVAGBWH0A8J6rSt3OV9sQgliTCw5uPaSqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/299fe7-9ab7-473a-b62a-ab063938f1ce/1/zQzH_YiYsPffS53wuZMZvLKewkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/299fe7-9ab7-473a-b62a-ab063938f1ce/1/zQzH_YiYsPffS53wuZMZvLKewkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/zQzH_YiYsPffS53wuZMZvLKewkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:04:f4:9d:b2:d0:10:20:1d:86:d3:19:70:6b:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd0cc7fd8898b0f7df4b9df0b99319bcb29ec243
Validity
Not Before: Nov 11 03:00:58 2025 GMT
Not After : Nov 12 03:00:58 2025 GMT
Subject: CN=2a6e3da2d92bb302c0f768877b92309743039b40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:27:d7:89:fc:2b:cc:56:ad:f7:ed:79:2e:37:
3a:24:b2:1f:20:86:88:30:95:ad:6f:d3:94:33:a6:
2c:b9:62:82:42:33:34:4a:5a:03:66:5d:0d:27:4d:
e3:93:11:6d:04:95:fb:f9:38:aa:a7:e0:02:3a:47:
55:d5:0e:31:65:29:2e:1f:46:52:1e:fd:49:04:fb:
6d:f9:da:3e:2a:3e:1b:7b:eb:3e:e6:81:da:de:57:
17:15:e8:98:4a:f1:00:2c:4b:06:1c:a4:22:1d:97:
d1:7e:89:43:c9:19:dc:af:91:e9:cb:be:26:b3:74:
02:4e:f1:e2:10:4c:cd:f7:d0:07:69:6b:c3:d1:b5:
f5:a7:df:b3:65:53:00:4b:42:09:71:17:c0:15:a7:
f6:33:e3:98:7c:5e:06:39:a3:95:47:f7:36:00:d5:
08:ed:2c:4d:70:18:54:4e:97:c7:e6:04:30:e2:54:
1d:0a:49:24:62:44:67:c4:8b:84:83:f6:85:ad:fb:
13:15:76:50:10:7e:f2:eb:58:f3:fe:48:e5:83:a7:
68:23:9b:f1:74:28:1d:a7:58:18:6c:eb:5e:e6:f3:
91:9e:26:33:05:20:85:f0:43:71:22:f3:49:35:c6:
4c:de:d1:e8:e7:58:e3:25:97:77:a7:3e:e8:7e:ca:
da:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:6E:3D:A2:D9:2B:B3:02:C0:F7:68:87:7B:92:30:97:43:03:9B:40
X509v3 Authority Key Identifier:
keyid:CD:0C:C7:FD:88:98:B0:F7:DF:4B:9D:F0:B9:93:19:BC:B2:9E:C2:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQzH_YiYsPffS53wuZMZvLKewkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/299fe7-9ab7-473a-b62a-ab063938f1ce/1/zQzH_YiYsPffS53wuZMZvLKewkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/299fe7-9ab7-473a-b62a-ab063938f1ce/1/zQzH_YiYsPffS53wuZMZvLKewkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:b2:71:b5:29:91:98:af:d5:94:21:6d:4a:56:e1:12:dd:bf:
a2:f3:ad:f1:3c:30:27:bb:d3:26:59:78:96:13:94:da:99:fc:
68:c6:07:fe:99:ab:19:03:24:5e:71:02:8b:28:64:cb:44:48:
e6:38:a5:b1:08:bf:9d:aa:b1:83:81:c0:96:ac:cc:cb:af:f2:
85:f8:47:07:1b:8a:58:0f:52:59:c1:e8:81:44:e0:3c:ad:a0:
22:28:51:d1:4f:31:30:95:53:e4:34:6a:f4:8d:73:50:54:63:
87:9c:e4:48:c6:2f:33:6a:20:be:9f:86:b8:14:be:d0:91:be:
50:b5:c9:1e:79:27:02:7b:10:fa:7b:2e:00:ba:e0:bb:91:65:
8b:53:d8:d7:e1:06:ba:93:15:24:60:d3:36:eb:f8:a9:5a:d7:
24:b3:38:db:7a:91:ed:19:d3:ca:4e:c2:13:6f:2e:db:a5:57:
38:1a:dd:12:d0:4f:18:26:37:a3:a2:44:83:20:38:9d:99:82:
37:3a:19:51:b6:98:3c:63:66:02:eb:96:86:79:40:39:d0:a8:
ee:34:3f:dd:50:17:ff:3d:5c:35:bb:4a:36:21:1b:a3:f2:e1:
9c:73:9a:c6:c4:01:a9:b4:74:ce:7e:02:ee:9e:5b:04:6d:b3:
32:72:7f:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:47:07 2025 by rpki-client