Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/b28a1d-f471-4eb7-a8de-c0c74809439e/1/Zq8cIk2ymlEEphqsMvYJVgJfrUM.mft
File: Zq8cIk2ymlEEphqsMvYJVgJfrUM.mft (raw, json)
Hash identifier: pBptKoQgLdIXACpnt5+JGMyR05LJTQKR3A3MV/DQmko=
Subject key identifier: CC:05:74:7D:81:13:7F:95:BF:EC:9D:F2:F9:A0:19:B7:E1:C2:95:A9
Authority key identifier: 66:AF:1C:22:4D:B2:9A:51:04:A6:1A:AC:32:F6:09:56:02:5F:AD:43
Certificate issuer: /CN=66af1c224db29a5104a61aac32f60956025fad43
Certificate serial: 019A725CB2979C3112540CBFC9DBEB0E9192
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zq8cIk2ymlEEphqsMvYJVgJfrUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/b28a1d-f471-4eb7-a8de-c0c74809439e/1/Zq8cIk2ymlEEphqsMvYJVgJfrUM.mft
Manifest number: 036D
Signing time: Tue 11 Nov 2025 10:01:08 +0000
Manifest this update: Tue 11 Nov 2025 10:01:08 +0000
Manifest next update: Wed 12 Nov 2025 10:01:08 +0000
Files and hashes: 1: 2f3iJSIm_gwsjLqHKwwPCgVXmU4.roa (hash: N9m+XB9yu5/umOhHO4AH3n4GJdoAiP1f7gS+JghQR/w=)
2: Zq8cIk2ymlEEphqsMvYJVgJfrUM.crl (hash: XGZ5yV9+qdJHy6aQwnZckmhTCWx8e4YMrnUqaBTG2Ao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/b28a1d-f471-4eb7-a8de-c0c74809439e/1/Zq8cIk2ymlEEphqsMvYJVgJfrUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/b28a1d-f471-4eb7-a8de-c0c74809439e/1/Zq8cIk2ymlEEphqsMvYJVgJfrUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zq8cIk2ymlEEphqsMvYJVgJfrUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:b2:97:9c:31:12:54:0c:bf:c9:db:eb:0e:91:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66af1c224db29a5104a61aac32f60956025fad43
Validity
Not Before: Nov 11 10:01:08 2025 GMT
Not After : Nov 12 10:01:08 2025 GMT
Subject: CN=cc05747d81137f95bfec9df2f9a019b7e1c295a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:47:33:4c:dc:82:31:3f:d6:2f:e5:98:13:5b:
fd:09:51:c6:21:e1:0a:ff:29:99:6c:41:29:b5:f7:
09:51:a0:a1:c8:c3:1d:b6:36:8b:4e:db:0f:99:8a:
6c:78:2d:b2:d5:4c:92:af:df:08:25:d4:49:64:c7:
95:20:2c:81:08:83:07:c8:a1:5e:10:2a:f0:46:03:
ce:83:0a:0e:e6:e9:a4:6c:4a:cb:dc:c1:8b:a0:ea:
9d:17:c1:b3:5b:d4:39:3a:36:f9:44:48:c5:48:15:
75:2a:52:80:c0:e3:b5:8e:55:22:1e:48:65:f4:0d:
b9:10:83:e6:d8:16:7e:17:3e:5a:b4:b7:65:4b:15:
67:38:12:81:35:d5:67:1c:e5:9a:15:7b:0e:b0:7a:
db:9a:15:0d:46:ce:2d:24:ca:2f:e0:e5:08:1a:70:
f7:d2:af:22:84:27:5a:3e:90:9a:d0:ce:77:45:3e:
0a:6e:4c:5e:e1:1e:af:2d:1c:35:9a:3a:dd:f0:03:
bd:e8:43:50:31:9e:c8:80:6d:55:84:f9:fc:fe:26:
7d:c2:c7:a4:fc:80:28:e1:da:f3:30:f9:a2:e1:8c:
1b:21:80:9b:0a:2c:53:9b:d0:d5:3e:75:dc:57:71:
91:a9:e8:4d:6b:d5:d9:13:36:16:96:3a:dc:fb:32:
3c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:05:74:7D:81:13:7F:95:BF:EC:9D:F2:F9:A0:19:B7:E1:C2:95:A9
X509v3 Authority Key Identifier:
keyid:66:AF:1C:22:4D:B2:9A:51:04:A6:1A:AC:32:F6:09:56:02:5F:AD:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zq8cIk2ymlEEphqsMvYJVgJfrUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b28a1d-f471-4eb7-a8de-c0c74809439e/1/Zq8cIk2ymlEEphqsMvYJVgJfrUM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b28a1d-f471-4eb7-a8de-c0c74809439e/1/Zq8cIk2ymlEEphqsMvYJVgJfrUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:65:69:69:8a:87:e9:75:88:36:ff:8d:ea:cc:b8:eb:ea:c4:
5f:29:00:c5:e6:40:58:85:46:2d:03:55:4b:59:ea:04:68:34:
b5:82:05:48:2f:68:09:d9:35:9f:7a:f0:af:e9:37:de:ff:67:
14:a9:b6:5a:ae:e4:eb:33:21:53:ab:0d:2a:d1:39:79:62:54:
b3:d5:51:c9:ad:f8:6f:46:3b:eb:0a:59:7a:c1:cb:cf:eb:a4:
a6:03:46:31:b7:29:48:4c:ac:f7:7b:9f:df:a8:d5:4f:4a:10:
62:b5:a7:3b:86:1b:59:6d:54:0a:ff:30:92:0b:1e:e4:5d:47:
08:70:9b:5d:9c:da:f5:02:1b:ea:46:bc:b1:51:65:c6:78:da:
0a:a9:e7:e4:3f:ba:5a:64:62:a1:6a:4f:ca:f3:5e:b2:b0:ce:
23:13:bc:76:e4:9d:0c:39:8a:45:87:bb:4d:ad:f0:f1:d0:bc:
c1:16:84:61:ef:c0:76:ee:ad:08:0b:38:cb:e1:73:e4:c5:61:
39:e0:f5:e0:4f:10:1a:91:d1:5b:63:5d:20:b7:39:91:ce:9f:
ed:56:3f:19:4e:cd:a7:ac:f8:88:12:ad:6d:f7:21:e5:c8:9e:
fa:ca:20:b7:68:de:28:1d:0e:f8:e7:72:13:6f:91:af:9a:c1:
23:6c:35:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:13:00 2025 by rpki-client