Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.mft
File: zVdth24X5nqjsfHBDas52yk14is.mft (raw, json)
Hash identifier: XlIuDbN57Su9Pzp05UWKBrT8yBwuybZFgDm/QWmAMVY=
Subject key identifier: 80:4D:C0:9A:1B:27:D7:ED:F3:D7:EB:9E:DC:29:D6:02:95:37:85:7E
Authority key identifier: CD:57:6D:87:6E:17:E6:7A:A3:B1:F1:C1:0D:AB:39:DB:29:35:E2:2B
Certificate issuer: /CN=cd576d876e17e67aa3b1f1c10dab39db2935e22b
Certificate serial: 019A31FDF2DA592D6A6C3A51DD37243F4B04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zVdth24X5nqjsfHBDas52yk14is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.mft
Manifest number: 10FD
Signing time: Wed 29 Oct 2025 22:01:57 +0000
Manifest this update: Wed 29 Oct 2025 22:01:57 +0000
Manifest next update: Thu 30 Oct 2025 22:01:57 +0000
Files and hashes: 1: R-2EUht1MZT2vSRQIg2K5xtL6XA.roa (hash: MfRYL6Yg+Lw0VNLBgt+qTUomESKAUsKuRF6e7JHJD14=)
2: VPlTFU2v9_-5Ue2KnHe2hWSrbvU.roa (hash: xjvDPgjYTpNfIICBZo+KKv8oMM12S2D874qBPcDZFuw=)
3: YhHxsxNH4RP_FfePdq8SlQdgZyg.roa (hash: K3fGfKE/dBh+cdQFHO8biNnAdH/Glpbr/rysigKy5PI=)
4: jFc_wlQoiHbPyXbisyroWRENeu0.roa (hash: ITqThjHQNWEDIzaupfeF4coOz5rZPmtce8EoNUCuRBY=)
5: lCJmZzkmjXSr7FEoBdA3ylq1U04.roa (hash: STzWF0AEDLQ8FI+DmmWhhzxn4hvpubeIokmYgyoJVoQ=)
6: zVdth24X5nqjsfHBDas52yk14is.crl (hash: lJmwPwG8AcwoiROKZGjsZ7Qgg4fdZUmyYTJ/jR9YsPI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.mft
rsync://rpki.ripe.net/repository/DEFAULT/zVdth24X5nqjsfHBDas52yk14is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Oct 2025 22:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:31:fd:f2:da:59:2d:6a:6c:3a:51:dd:37:24:3f:4b:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd576d876e17e67aa3b1f1c10dab39db2935e22b
Validity
Not Before: Oct 29 22:01:57 2025 GMT
Not After : Oct 30 22:01:57 2025 GMT
Subject: CN=804dc09a1b27d7edf3d7eb9edc29d6029537857e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3b:d5:99:25:28:96:cb:81:c1:1e:ca:38:e1:
8f:bb:8b:d8:39:e5:94:83:e8:d5:3b:f9:eb:da:38:
98:41:d9:b4:84:d0:d7:c3:b8:5f:0d:ec:f3:b6:e8:
cc:e1:a8:88:55:b7:92:e6:ca:1b:19:98:ad:79:15:
65:55:42:b7:fd:b7:ec:e4:01:af:7f:cd:df:47:90:
9b:5c:22:77:68:8f:d4:ce:3d:39:e8:96:b3:0d:e7:
4f:ce:fd:67:33:90:21:37:f3:1b:f6:4b:36:a3:38:
81:89:32:29:66:d4:1d:bc:14:af:de:b6:a9:46:a7:
0e:2f:9c:73:56:e5:0f:fe:2b:e4:6c:2f:6c:2c:f2:
8f:bc:0e:55:bf:c9:b8:5a:bd:40:27:1f:0b:b0:4d:
6d:8b:80:8c:9a:16:56:ee:f7:73:f5:42:06:44:1a:
a8:39:0c:70:64:44:15:a8:20:6b:2e:f9:ca:ab:36:
e6:3a:8b:79:df:df:ab:f3:02:25:8e:01:04:a7:a5:
ca:20:21:06:c7:f9:68:17:8d:c6:61:21:81:ea:43:
44:96:4f:72:cb:24:c1:b1:c6:22:dc:05:6b:1e:7f:
a0:d9:c2:ec:a3:ad:3e:14:b7:a3:a0:6c:4f:69:3a:
32:f6:ef:c9:04:a6:90:37:44:d6:16:70:22:72:92:
1f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:4D:C0:9A:1B:27:D7:ED:F3:D7:EB:9E:DC:29:D6:02:95:37:85:7E
X509v3 Authority Key Identifier:
keyid:CD:57:6D:87:6E:17:E6:7A:A3:B1:F1:C1:0D:AB:39:DB:29:35:E2:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zVdth24X5nqjsfHBDas52yk14is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:3b:01:bd:39:4c:4d:a1:eb:35:cd:96:80:38:38:2c:1a:32:
61:12:f8:19:58:a5:8f:f4:5c:1d:b6:a2:07:f9:bc:68:d3:de:
d8:24:1b:8e:1c:4c:68:d7:b4:ef:bd:3e:5f:ab:a0:bd:9d:e1:
b4:e8:40:a3:bf:d5:67:4b:dd:e5:dc:5c:c2:c0:74:e0:c9:5b:
f9:ca:ac:fb:00:f8:bb:0d:b6:60:b2:d6:fb:0a:f9:d0:74:c3:
a8:70:87:77:6b:ff:56:e4:b5:9d:31:bb:6a:09:85:4a:d6:bb:
90:28:0b:37:df:fe:bc:75:ac:79:11:c2:16:da:52:89:32:d1:
5f:bc:32:c8:f4:78:07:67:ac:d3:03:a3:c5:be:37:a8:2a:1f:
2f:23:1b:0d:ef:52:a9:ed:23:37:b7:4a:0f:f6:a2:b5:bc:ce:
c2:e0:f3:7e:fb:a5:d0:42:5b:a7:93:04:25:b7:76:a8:86:f9:
ca:fe:3e:12:2f:08:e1:06:17:7d:bf:ca:c8:9e:76:d9:33:0c:
33:e8:59:23:b0:77:16:90:e1:19:d7:45:52:54:a5:7b:42:97:
3b:ce:01:d7:43:2b:78:92:bc:5f:76:d2:e8:29:0a:d2:0a:a8:
37:3f:7c:2f:8a:5d:75:1a:25:eb:a5:b1:29:97:f9:aa:14:1a:
78:49:5e:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 30 05:02:40 2025 by rpki-client