Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/761b48-69ea-40e4-8d7c-64cd194f7f4f/1/z2hDzhUimoAj2X-iejflkniyv9c.mft
File: z2hDzhUimoAj2X-iejflkniyv9c.mft (raw, json)
Hash identifier: bOA770AVsT42zcHL61I2Oc8tBxlmBMjcsLG83pLd/EA=
Subject key identifier: EF:A1:E8:62:FF:70:55:36:69:0C:AF:08:F8:1F:81:24:4A:6F:77:82
Authority key identifier: CF:68:43:CE:15:22:9A:80:23:D9:7F:A2:7A:37:E5:92:78:B2:BF:D7
Certificate issuer: /CN=cf6843ce15229a8023d97fa27a37e59278b2bfd7
Certificate serial: 019A7149B0E38C7276C39F9FA99E8F23E44E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z2hDzhUimoAj2X-iejflkniyv9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/761b48-69ea-40e4-8d7c-64cd194f7f4f/1/z2hDzhUimoAj2X-iejflkniyv9c.mft
Manifest number: 0D0C
Signing time: Tue 11 Nov 2025 05:00:46 +0000
Manifest this update: Tue 11 Nov 2025 05:00:46 +0000
Manifest next update: Wed 12 Nov 2025 05:00:46 +0000
Files and hashes: 1: pZ2-rl1wvNOlZXWq6r9tiMcpCLE.roa (hash: UTgRZg+3/3Y1WSaSgU/Ax1MIkqu5a18zaZd2IsaahgY=)
2: z2hDzhUimoAj2X-iejflkniyv9c.crl (hash: EgLRVQulOZPQhj5jq69FpdOKhk3EdiMEVqFL3KIdByA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/761b48-69ea-40e4-8d7c-64cd194f7f4f/1/z2hDzhUimoAj2X-iejflkniyv9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/761b48-69ea-40e4-8d7c-64cd194f7f4f/1/z2hDzhUimoAj2X-iejflkniyv9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/z2hDzhUimoAj2X-iejflkniyv9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:b0:e3:8c:72:76:c3:9f:9f:a9:9e:8f:23:e4:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf6843ce15229a8023d97fa27a37e59278b2bfd7
Validity
Not Before: Nov 11 05:00:46 2025 GMT
Not After : Nov 12 05:00:46 2025 GMT
Subject: CN=efa1e862ff705536690caf08f81f81244a6f7782
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:2e:35:61:3b:74:1f:2e:f9:26:dd:dc:ed:fe:
f3:24:57:e6:a4:ee:65:d7:8a:91:9a:4c:65:b7:c7:
ea:6c:39:9a:c6:a8:fe:62:ac:a3:d5:66:e6:7e:2c:
00:c8:10:27:b7:06:ad:83:2b:db:76:66:ec:cc:a1:
ed:ac:25:ba:12:82:de:c4:00:a4:b7:a1:d4:ef:66:
d3:82:c5:0b:a2:34:17:59:1d:5a:4b:fa:4f:84:2d:
b7:d9:cf:f3:b5:6a:6f:da:65:1b:59:ac:2e:ee:5e:
a7:07:6c:57:aa:f2:a0:4e:f4:e5:d9:73:3b:5f:2c:
9c:1e:1d:63:f1:e4:7c:1b:18:1f:48:54:44:c0:1a:
ff:53:7d:bb:1d:98:4d:cf:fe:e5:84:f0:3b:47:43:
43:53:68:0c:fc:1b:79:f3:75:a4:6c:69:63:17:00:
83:3d:e0:39:6e:fe:e8:3f:22:41:86:55:08:50:00:
be:3f:f7:dc:ab:bd:a1:d5:3f:b8:96:52:67:40:62:
a8:74:8a:93:d2:5c:8d:8a:da:db:3f:bb:c1:ba:20:
47:02:b4:cc:03:0b:bc:ed:75:06:89:98:0e:ac:3c:
e4:02:17:c8:e6:f7:40:5b:77:d7:83:27:fb:18:ac:
9a:dc:a3:ef:64:77:28:69:cb:73:6a:23:4e:1d:b1:
d0:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:A1:E8:62:FF:70:55:36:69:0C:AF:08:F8:1F:81:24:4A:6F:77:82
X509v3 Authority Key Identifier:
keyid:CF:68:43:CE:15:22:9A:80:23:D9:7F:A2:7A:37:E5:92:78:B2:BF:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z2hDzhUimoAj2X-iejflkniyv9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/761b48-69ea-40e4-8d7c-64cd194f7f4f/1/z2hDzhUimoAj2X-iejflkniyv9c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/761b48-69ea-40e4-8d7c-64cd194f7f4f/1/z2hDzhUimoAj2X-iejflkniyv9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:3d:30:5a:1f:0a:02:29:e8:9b:27:d8:28:29:ed:b5:64:02:
b1:c9:4c:fc:b4:17:24:20:4c:52:e6:70:96:37:34:23:08:1b:
0b:1b:b9:fe:b3:51:ed:2f:d0:21:d3:c5:45:ac:98:cc:98:f6:
5b:a1:3f:2f:74:6e:08:47:67:76:93:b0:f5:e3:7b:fa:ab:dc:
84:f8:14:5e:24:49:e9:63:61:3d:94:cf:a1:de:81:6f:dd:1e:
49:35:d3:98:7e:fe:94:4b:e2:f5:b9:49:d7:c6:43:88:14:9e:
4b:85:e4:8a:b6:d5:b8:75:3a:33:94:ea:bd:b0:36:73:b8:1d:
c5:3e:d4:27:ab:e4:0d:cd:fc:7b:ec:d2:66:8b:d3:7d:ed:6b:
10:12:03:53:2c:92:36:9a:79:93:ba:8e:54:97:a8:b6:fd:21:
f4:56:80:e6:fa:8a:41:0b:31:ed:92:0c:5f:ab:f0:f8:a4:93:
85:5d:28:3d:a7:19:f6:7e:8b:20:8b:fa:c0:b7:ef:e6:b2:e0:
a2:10:bf:fe:58:b2:58:88:76:fe:75:84:f9:7c:64:a6:6d:b5:
66:0e:9c:19:56:a6:59:9f:74:2b:13:2b:22:d0:70:f8:a7:c9:
6b:b2:ca:81:2e:81:db:8d:68:5e:82:00:2d:ae:3f:0f:7a:2f:
04:26:81:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:02:33 2025 by rpki-client