Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/7a1274-03ac-494d-ba8e-cfcffa3c0665/1/zT5kktRzFSDB7tvNopZ5UArAg6s.mft
File: zT5kktRzFSDB7tvNopZ5UArAg6s.mft (raw, json)
Hash identifier: v7CDMI/dzz090S5PJbsqaH3zLuxGzYGhTlPdOxeVcvU=
Subject key identifier: F2:EC:D4:E5:A6:9D:F4:49:DA:94:C0:FF:6B:25:C1:8E:2C:73:F7:86
Authority key identifier: CD:3E:64:92:D4:73:15:20:C1:EE:DB:CD:A2:96:79:50:0A:C0:83:AB
Certificate issuer: /CN=cd3e6492d4731520c1eedbcda29679500ac083ab
Certificate serial: 019A70DBED169F40679DE1523CC4F159AECC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zT5kktRzFSDB7tvNopZ5UArAg6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/7a1274-03ac-494d-ba8e-cfcffa3c0665/1/zT5kktRzFSDB7tvNopZ5UArAg6s.mft
Manifest number: 05EC
Signing time: Tue 11 Nov 2025 03:00:52 +0000
Manifest this update: Tue 11 Nov 2025 03:00:52 +0000
Manifest next update: Wed 12 Nov 2025 03:00:52 +0000
Files and hashes: 1: COOSirhVHTLVRSIt4NAQH8L8vr4.roa (hash: tu1lQ0uqkhi4vcEmV6leM3hmh+odZkH5lyLz+npAcNE=)
2: zT5kktRzFSDB7tvNopZ5UArAg6s.crl (hash: YrfYwL8k5kZ/gFzAZYvLHUxjbR+dRdzbZEWd059oNMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/7a1274-03ac-494d-ba8e-cfcffa3c0665/1/zT5kktRzFSDB7tvNopZ5UArAg6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/7a1274-03ac-494d-ba8e-cfcffa3c0665/1/zT5kktRzFSDB7tvNopZ5UArAg6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/zT5kktRzFSDB7tvNopZ5UArAg6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:db:ed:16:9f:40:67:9d:e1:52:3c:c4:f1:59:ae:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd3e6492d4731520c1eedbcda29679500ac083ab
Validity
Not Before: Nov 11 03:00:52 2025 GMT
Not After : Nov 12 03:00:52 2025 GMT
Subject: CN=f2ecd4e5a69df449da94c0ff6b25c18e2c73f786
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ea:ef:d9:84:8b:a5:78:86:67:a3:1a:11:31:
80:a0:0e:b1:c8:8f:2d:66:f0:98:25:bf:c6:b7:71:
ff:40:b6:f0:fb:1e:e7:aa:fa:8a:af:c8:48:8f:e8:
b1:7e:cd:04:21:b1:5e:1a:b9:6b:de:86:75:95:d4:
92:9f:70:f9:e3:3d:52:34:02:db:ad:ff:4d:e6:dc:
bb:de:29:e4:dd:37:b6:64:f6:01:7d:ef:4a:bd:43:
42:82:7c:eb:1c:69:5a:c0:96:9d:61:de:49:75:fc:
0f:2f:9e:96:68:b1:c9:bb:fc:7c:f4:4c:54:a0:9c:
35:62:57:17:d2:60:de:31:01:fe:05:69:20:a6:9e:
90:ea:77:3d:40:a0:62:ec:0b:19:73:d1:5d:08:f4:
90:bc:98:95:48:e7:c6:ee:68:89:c1:3e:01:70:7d:
bd:63:a7:9f:e2:d0:89:32:2b:ac:80:b5:e5:f0:c2:
d6:44:0e:8c:29:74:52:7b:67:db:a1:06:5b:54:d6:
0a:49:6e:64:c2:90:8f:ac:8d:05:09:61:7b:28:7a:
01:88:7d:09:ca:89:22:5a:07:b8:c2:fb:91:36:e0:
0e:5a:d9:f3:41:a9:91:9b:9a:8a:48:4f:42:50:b9:
94:51:63:15:56:ed:d3:47:f2:f2:4e:15:37:86:e2:
8d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:EC:D4:E5:A6:9D:F4:49:DA:94:C0:FF:6B:25:C1:8E:2C:73:F7:86
X509v3 Authority Key Identifier:
keyid:CD:3E:64:92:D4:73:15:20:C1:EE:DB:CD:A2:96:79:50:0A:C0:83:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zT5kktRzFSDB7tvNopZ5UArAg6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7a1274-03ac-494d-ba8e-cfcffa3c0665/1/zT5kktRzFSDB7tvNopZ5UArAg6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7a1274-03ac-494d-ba8e-cfcffa3c0665/1/zT5kktRzFSDB7tvNopZ5UArAg6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:42:b9:cd:35:1d:88:a7:03:dd:19:00:c8:12:89:82:5a:82:
78:ca:03:b4:7d:c3:66:ce:6b:5c:0d:ea:11:43:bf:df:a2:58:
06:87:61:8d:3c:49:0b:92:85:05:08:29:62:98:55:33:ac:d4:
3a:6c:58:96:9c:18:5c:b8:15:21:1d:2f:c2:04:ec:fd:d6:66:
66:af:e7:7f:bf:7b:ea:84:d8:53:6b:63:17:64:50:88:23:3f:
30:91:dc:c6:b6:1a:c8:0f:c7:e2:62:84:50:32:17:19:c1:fa:
e9:ac:3a:4c:4e:8d:af:bb:1b:5e:08:b0:1e:24:44:24:f7:64:
ed:80:46:ab:af:14:ad:63:6f:c6:8c:97:8a:e8:75:e2:f0:6f:
b4:f6:57:cd:02:1c:08:ec:99:11:3b:9d:13:c6:b3:51:83:08:
f2:dc:2c:be:1e:52:c1:40:53:cf:20:c1:ef:37:23:f2:8a:56:
d3:22:fd:b8:67:1c:0d:4a:67:a6:d8:48:f7:37:95:d8:36:ad:
42:95:d5:4a:d9:49:24:0a:bb:73:99:e5:38:7e:ef:2e:f6:ca:
55:af:c2:d0:22:fe:ce:35:ac:bd:a3:a5:eb:41:f8:25:24:79:
4f:df:17:9b:2e:b2:b2:e6:1d:e6:5b:12:fc:cb:32:82:c4:04:
9f:00:da:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:34:46 2025 by rpki-client