Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/34acf4-747f-45fe-8129-402f1fb848cf/1/zOV9yCNN9fWdZ_3GhWuyYucZP1I.mft
File: zOV9yCNN9fWdZ_3GhWuyYucZP1I.mft (raw, json)
Hash identifier: zI0XY5Hdam2nv9kTACa3i5dO1FyP1cZziPtDuTRPHfw=
Subject key identifier: 5A:F8:0D:49:74:22:69:61:04:66:23:1B:0F:5C:BC:28:80:C2:7E:A1
Authority key identifier: CC:E5:7D:C8:23:4D:F5:F5:9D:67:FD:C6:85:6B:B2:62:E7:19:3F:52
Certificate issuer: /CN=cce57dc8234df5f59d67fdc6856bb262e7193f52
Certificate serial: 019A70A4F5930716CF1E601D0F45D7D746EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zOV9yCNN9fWdZ_3GhWuyYucZP1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/34acf4-747f-45fe-8129-402f1fb848cf/1/zOV9yCNN9fWdZ_3GhWuyYucZP1I.mft
Manifest number: 0EEA
Signing time: Tue 11 Nov 2025 02:00:50 +0000
Manifest this update: Tue 11 Nov 2025 02:00:50 +0000
Manifest next update: Wed 12 Nov 2025 02:00:50 +0000
Files and hashes: 1: F8CkVi3Azk4IP8l0xbj9A7utWT4.roa (hash: E5Iv0quJqPnudHATWcToHknlwXYMpaxnHvHdqASmVUA=)
2: zOV9yCNN9fWdZ_3GhWuyYucZP1I.crl (hash: 6htHWMqFXRs/njUg2R+OGTBCgQarYQNKyk//U9AXRj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/34acf4-747f-45fe-8129-402f1fb848cf/1/zOV9yCNN9fWdZ_3GhWuyYucZP1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/34acf4-747f-45fe-8129-402f1fb848cf/1/zOV9yCNN9fWdZ_3GhWuyYucZP1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/zOV9yCNN9fWdZ_3GhWuyYucZP1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a4:f5:93:07:16:cf:1e:60:1d:0f:45:d7:d7:46:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cce57dc8234df5f59d67fdc6856bb262e7193f52
Validity
Not Before: Nov 11 02:00:50 2025 GMT
Not After : Nov 12 02:00:50 2025 GMT
Subject: CN=5af80d49742269610466231b0f5cbc2880c27ea1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ec:74:41:13:49:76:7a:a2:ad:73:31:86:4f:
ed:02:00:ff:12:d0:f8:ad:47:df:5d:ab:fc:cd:3e:
6b:c0:93:94:46:8f:22:f5:91:da:d4:df:7d:ca:7c:
d9:e6:a5:a5:9d:69:bc:ea:b3:2b:7a:9f:8c:8f:9d:
6a:68:00:f8:93:ef:68:c5:aa:a4:1b:a4:05:43:31:
2a:b9:5d:2b:28:48:4e:ce:4b:4b:c9:bd:b8:66:40:
b1:6e:99:ac:4b:10:9a:08:7b:46:76:e1:1b:b2:ea:
e8:b7:60:f2:11:0b:94:ca:66:0f:fc:a4:37:bc:7e:
77:75:11:a2:79:9d:2a:a2:34:b0:c1:56:6c:08:f3:
fd:54:c3:92:03:5f:ec:52:16:0e:b7:f7:f5:20:5f:
21:b6:89:79:66:d0:00:ea:c3:9a:d3:77:9e:b2:67:
39:47:40:45:2a:eb:61:f9:82:87:3e:55:fb:69:40:
35:58:42:ab:94:2a:1d:09:d3:06:a2:a3:b5:bf:72:
eb:d9:f7:b2:0d:59:11:9e:2a:11:1d:d0:e2:51:66:
0b:3c:90:f7:30:7c:3e:b8:25:c7:4f:ab:39:b6:87:
8a:ba:2c:bf:06:d5:c5:69:3c:bb:7a:c0:92:ea:51:
3a:63:0a:35:21:17:6e:54:7a:7a:40:80:12:d7:bf:
73:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:F8:0D:49:74:22:69:61:04:66:23:1B:0F:5C:BC:28:80:C2:7E:A1
X509v3 Authority Key Identifier:
keyid:CC:E5:7D:C8:23:4D:F5:F5:9D:67:FD:C6:85:6B:B2:62:E7:19:3F:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zOV9yCNN9fWdZ_3GhWuyYucZP1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/34acf4-747f-45fe-8129-402f1fb848cf/1/zOV9yCNN9fWdZ_3GhWuyYucZP1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/34acf4-747f-45fe-8129-402f1fb848cf/1/zOV9yCNN9fWdZ_3GhWuyYucZP1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:35:74:27:93:ea:93:6e:ff:60:62:1c:0a:77:aa:78:df:c9:
26:ca:30:0a:6b:3c:06:43:b8:ae:79:b6:ee:1f:29:ec:3f:94:
11:cc:ff:51:8d:c5:32:5d:b4:92:19:ed:a7:75:60:ae:ff:13:
bc:20:f2:21:ad:d6:e0:6a:bc:be:71:70:80:47:ca:cb:ce:46:
a8:c6:6f:ca:45:64:6c:d3:97:f4:73:0b:61:78:11:ca:45:54:
df:46:95:be:68:b8:15:fd:8f:fa:b7:5c:99:49:80:cc:15:9f:
e0:69:0d:80:c8:34:ea:41:df:ca:15:f6:7a:20:95:2d:d6:af:
6e:ce:98:dc:eb:01:ee:65:1d:56:6e:ff:50:b3:76:70:ec:18:
d4:00:82:d2:81:e0:d7:12:ff:3f:32:fa:79:cb:c9:49:f6:f5:
3d:c2:a1:98:3a:e4:d2:8e:82:b9:67:6c:eb:69:e8:bc:31:aa:
b0:a6:cb:f1:d8:86:91:8b:89:07:18:3e:e0:5c:04:e6:99:a7:
f3:7d:7a:c4:6b:7b:08:8b:a0:a8:30:ca:b4:27:3b:93:0e:71:
b9:cf:31:e7:b4:9d:42:ca:9d:b1:19:60:bb:3d:a9:a8:18:2f:
aa:b4:a0:fb:fe:72:14:91:b7:2d:27:f4:1b:e6:53:e6:4a:16:
61:46:e8:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:54 2025 by rpki-client