Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/1168fa-fbf6-4e07-9ec7-919eefba48b5/1/z0AYX1Us2XUnbANGT1DHpdNRVkw.mft
File: z0AYX1Us2XUnbANGT1DHpdNRVkw.mft (raw, json)
Hash identifier: E2O23vJJ4quTzgJjotuGyYLwB9ceQR0+Jxb+pglZ2Qo=
Subject key identifier: BF:80:D6:93:D2:B9:DF:E2:28:AB:61:D7:AD:4C:E5:13:4A:AA:32:53
Authority key identifier: CF:40:18:5F:55:2C:D9:75:27:6C:03:46:4F:50:C7:A5:D3:51:56:4C
Certificate issuer: /CN=cf40185f552cd975276c03464f50c7a5d351564c
Certificate serial: 019A71EEAADBD1508CF960DE0483C3A83CC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z0AYX1Us2XUnbANGT1DHpdNRVkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/1168fa-fbf6-4e07-9ec7-919eefba48b5/1/z0AYX1Us2XUnbANGT1DHpdNRVkw.mft
Manifest number: 37
Signing time: Tue 11 Nov 2025 08:00:57 +0000
Manifest this update: Tue 11 Nov 2025 08:00:57 +0000
Manifest next update: Wed 12 Nov 2025 08:00:57 +0000
Files and hashes: 1: QMCQYM6KLwMrhUyf5iYVPa2Vy4o.roa (hash: SzWr8zdcPAyWkLaDiuc219DsXOdQP+mExV/Svz/jWNo=)
2: Ty-iZb_Ec_nznm2_0cwyztJTc4w.roa (hash: gnzJFaxmd6CjC4tK9Lw/KvBHZRZ66fs4fKxH+FjxMvY=)
3: t4Me7o46EPXuuYLWaaf0tlmnDwo.roa (hash: opkJ9tQSl8kaOwV5x6n9qLElK+q3Eq2xK8X4ODbWPhY=)
4: z0AYX1Us2XUnbANGT1DHpdNRVkw.crl (hash: M1HJjFwvRJk+WQSC7K6vFKbz5OVcL72k3sXeK6xYsJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/1168fa-fbf6-4e07-9ec7-919eefba48b5/1/z0AYX1Us2XUnbANGT1DHpdNRVkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/1168fa-fbf6-4e07-9ec7-919eefba48b5/1/z0AYX1Us2XUnbANGT1DHpdNRVkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/z0AYX1Us2XUnbANGT1DHpdNRVkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:aa:db:d1:50:8c:f9:60:de:04:83:c3:a8:3c:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf40185f552cd975276c03464f50c7a5d351564c
Validity
Not Before: Nov 11 08:00:57 2025 GMT
Not After : Nov 12 08:00:57 2025 GMT
Subject: CN=bf80d693d2b9dfe228ab61d7ad4ce5134aaa3253
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ae:69:27:fb:bd:07:f3:9f:be:5e:6a:5f:79:
f3:d1:4b:53:4c:21:ff:16:ae:9d:21:cb:a1:0c:3d:
f6:64:2e:66:92:a5:39:55:ce:10:91:59:f6:c3:8d:
f6:f7:b7:33:38:33:c3:91:8d:d1:f2:05:1e:59:fc:
6c:4e:8c:af:83:66:0b:fa:c2:80:15:76:40:00:e1:
65:d4:9b:5b:ca:c1:fc:73:19:0f:71:43:f0:e0:ef:
05:1c:d3:1b:63:70:62:34:43:a3:56:d4:92:ae:9b:
24:e2:8a:35:f5:3d:35:11:4b:eb:74:b3:e9:42:dd:
fa:af:5f:7c:db:78:34:60:ec:a9:91:eb:ee:15:66:
1e:9f:eb:09:b9:81:7c:ac:78:e4:8b:53:59:47:e3:
82:68:f0:e8:d1:19:26:44:28:be:f7:00:59:fe:4a:
69:40:63:f5:47:cc:76:a4:00:5d:e1:86:f3:33:ab:
b7:24:64:cd:c5:18:15:b5:ea:5d:25:b2:fb:41:09:
af:43:1f:bb:4c:a4:d8:b8:04:2c:d2:cd:40:00:2c:
5d:46:ab:40:05:45:ac:f2:00:71:22:b0:a3:c1:23:
31:70:52:1b:cd:8b:a7:9b:37:5d:8d:d4:c2:3d:9a:
b4:b7:e1:a5:89:00:07:6b:6b:e6:f9:8c:ac:f7:2f:
ed:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:80:D6:93:D2:B9:DF:E2:28:AB:61:D7:AD:4C:E5:13:4A:AA:32:53
X509v3 Authority Key Identifier:
keyid:CF:40:18:5F:55:2C:D9:75:27:6C:03:46:4F:50:C7:A5:D3:51:56:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z0AYX1Us2XUnbANGT1DHpdNRVkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/1168fa-fbf6-4e07-9ec7-919eefba48b5/1/z0AYX1Us2XUnbANGT1DHpdNRVkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/1168fa-fbf6-4e07-9ec7-919eefba48b5/1/z0AYX1Us2XUnbANGT1DHpdNRVkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:d9:52:ed:21:7a:65:ae:2e:12:0e:2c:d9:4a:44:97:13:f6:
66:ae:78:0b:d2:19:70:bc:0b:70:ba:e7:f9:f8:b8:96:57:45:
f2:ce:8f:f0:48:22:e4:f8:2c:7b:25:96:3a:e6:9d:2a:ca:15:
2c:e9:46:c7:04:46:e7:d1:85:d7:54:a6:31:eb:e7:9a:c5:8c:
cc:b2:65:09:c3:d4:c5:9a:a7:99:dc:f0:7f:24:ed:8b:f5:0c:
d7:15:ff:32:40:c2:f9:60:97:0b:20:ac:0e:1f:b4:5f:78:da:
c8:05:9a:a5:24:69:3a:89:b0:21:7b:ce:1f:c5:e3:df:1c:9c:
96:04:7d:69:24:26:de:49:b2:b0:b5:65:ac:7f:86:2d:75:9a:
d9:ff:ca:d8:00:87:e7:d8:53:6c:5e:29:05:7c:eb:69:ae:09:
a5:15:8c:26:31:dc:b2:a7:2b:f8:a9:bc:c3:c8:fd:a1:eb:d8:
d2:2d:ff:8f:67:30:9c:33:64:3b:b9:f1:8d:38:1f:4b:43:42:
7c:2b:bb:98:69:9b:0c:02:15:84:4a:70:07:d7:3e:09:1e:de:
0e:39:5c:bd:97:0a:2d:2c:63:6e:7a:40:0c:5b:03:fe:57:4b:
ce:fb:b9:e0:b1:f8:f4:7f:6b:8a:88:3e:98:80:f5:90:b2:2f:
37:48:e2:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:37:39 2025 by rpki-client