Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/0716df-341b-4a08-a451-596225031ee3/1/zyJMhK66hZuQyJNsumFn7kxE7Oc.mft
File: zyJMhK66hZuQyJNsumFn7kxE7Oc.mft (raw, json)
Hash identifier: Yeezxb9DkQlBZx8yw2stpIodu0iE52+GR4CTP5fxvZM=
Subject key identifier: AC:E2:74:C8:C1:4A:A4:B4:C2:E1:88:1A:9E:92:A2:D4:A4:8B:DE:7A
Authority key identifier: CF:22:4C:84:AE:BA:85:9B:90:C8:93:6C:BA:61:67:EE:4C:44:EC:E7
Certificate issuer: /CN=cf224c84aeba859b90c8936cba6167ee4c44ece7
Certificate serial: 019A72CA74515F1E9580C84E91B1A47A2CDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zyJMhK66hZuQyJNsumFn7kxE7Oc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/0716df-341b-4a08-a451-596225031ee3/1/zyJMhK66hZuQyJNsumFn7kxE7Oc.mft
Manifest number: 0793
Signing time: Tue 11 Nov 2025 12:01:01 +0000
Manifest this update: Tue 11 Nov 2025 12:01:01 +0000
Manifest next update: Wed 12 Nov 2025 12:01:01 +0000
Files and hashes: 1: n3lj8Imlf54KOqF_Kqk-h0qcwVk.roa (hash: 2POYPsdH+jKImtpOmPpWEy8yit+ATY6Eb8geD/u6vK4=)
2: zyJMhK66hZuQyJNsumFn7kxE7Oc.crl (hash: +iL6vMsEFM1jFmIUtX0mR5ZkyFSs3Maa1kuji83YDpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/0716df-341b-4a08-a451-596225031ee3/1/zyJMhK66hZuQyJNsumFn7kxE7Oc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/0716df-341b-4a08-a451-596225031ee3/1/zyJMhK66hZuQyJNsumFn7kxE7Oc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zyJMhK66hZuQyJNsumFn7kxE7Oc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:74:51:5f:1e:95:80:c8:4e:91:b1:a4:7a:2c:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf224c84aeba859b90c8936cba6167ee4c44ece7
Validity
Not Before: Nov 11 12:01:01 2025 GMT
Not After : Nov 12 12:01:01 2025 GMT
Subject: CN=ace274c8c14aa4b4c2e1881a9e92a2d4a48bde7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:9f:ea:91:05:eb:98:71:ff:aa:ba:78:de:86:
02:08:98:b4:13:86:e0:0e:69:b3:52:65:9d:e4:29:
9d:45:fa:78:b6:6c:d3:19:5d:21:fb:d6:f5:09:c5:
41:49:1c:71:30:0d:f3:5e:ab:26:c5:f8:70:c5:6c:
3b:63:a8:94:39:70:e5:82:bb:89:a5:19:7b:34:c1:
8f:f4:0e:d9:04:92:a0:60:f6:79:b7:0d:ea:f1:b7:
16:bd:68:de:a5:38:d6:3e:fe:6b:81:5b:84:a4:42:
72:90:9b:15:1d:b9:14:89:d9:d2:32:c1:52:51:4f:
61:e1:e2:bb:16:ed:9c:f3:96:9f:3c:47:41:4b:b6:
56:da:40:b1:4c:f1:79:ac:50:62:48:3e:4f:ca:2e:
fd:36:1a:d8:7c:fb:b8:05:87:3e:0d:81:8e:1a:ab:
17:8f:fb:45:e8:2c:e1:66:73:7f:57:eb:42:90:f6:
59:cd:10:2f:e6:a4:b1:ea:2c:63:85:a9:b8:ff:77:
26:21:6d:fb:15:73:8f:1e:a4:59:1b:b2:ba:b8:8d:
7e:e8:e5:52:a5:2a:ab:a0:1f:97:ed:e3:2d:61:b6:
73:8e:c7:0a:64:22:01:64:9c:76:fb:9e:a1:4f:5f:
2a:06:61:fc:15:55:ad:c3:00:30:3b:6b:e1:e8:0c:
76:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:E2:74:C8:C1:4A:A4:B4:C2:E1:88:1A:9E:92:A2:D4:A4:8B:DE:7A
X509v3 Authority Key Identifier:
keyid:CF:22:4C:84:AE:BA:85:9B:90:C8:93:6C:BA:61:67:EE:4C:44:EC:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zyJMhK66hZuQyJNsumFn7kxE7Oc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0716df-341b-4a08-a451-596225031ee3/1/zyJMhK66hZuQyJNsumFn7kxE7Oc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0716df-341b-4a08-a451-596225031ee3/1/zyJMhK66hZuQyJNsumFn7kxE7Oc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:02:e6:db:ba:37:d5:36:15:f7:c3:52:0c:0e:3d:84:85:30:
36:6b:ac:85:a8:0e:1b:7f:ff:42:19:9b:92:b4:ca:90:e7:84:
94:83:ec:89:28:67:75:37:12:9c:44:d0:6c:91:96:27:89:d7:
50:f5:bc:95:f0:28:33:13:42:73:df:da:18:54:54:ed:05:fd:
7a:2d:92:bb:60:ad:82:3b:01:4b:b1:25:93:5d:4a:00:1d:9f:
e9:76:85:6d:79:11:b9:0b:60:fa:18:a1:77:d2:f1:03:4a:40:
4a:74:cd:c8:54:14:ed:3f:13:46:b7:17:df:d3:aa:f6:1e:2d:
6f:25:e4:e4:4f:6a:8d:b4:d2:3d:81:69:0d:16:0c:86:53:49:
83:ce:61:a8:a9:3b:9c:0f:fe:9a:0c:d8:ee:3e:ba:e8:c0:ae:
7d:ce:52:d7:d5:67:a4:03:77:c9:f3:ec:43:44:30:ee:de:0b:
92:9b:32:12:04:6b:74:98:88:19:f1:e7:1b:88:f3:c6:76:94:
7f:f5:88:81:c4:65:4b:b6:c2:95:25:10:73:ed:fb:4d:90:fb:
9a:5d:85:a3:23:c0:ec:7f:1a:ea:45:ff:43:c3:b2:44:55:12:
a8:32:bd:ca:0f:c3:ed:7e:60:30:a9:0a:15:95:6a:d3:fc:84:
1e:8e:b4:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:59:41 2025 by rpki-client