Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/6b1ea5-3f79-49ca-b985-57a5f3289992/1/ze5dkAYfoqckw2dCWGxinUceek0.mft
File: ze5dkAYfoqckw2dCWGxinUceek0.mft (raw, json)
Hash identifier: x9Wr0sCgJUEogLD0QDY8yvdCxKGIjPkSvHTjMHZeO0I=
Subject key identifier: FA:8E:3A:05:FC:FF:86:C5:ED:28:9E:8D:43:5F:95:BB:F5:68:85:59
Authority key identifier: CD:EE:5D:90:06:1F:A2:A7:24:C3:67:42:58:6C:62:9D:47:1E:7A:4D
Certificate issuer: /CN=cdee5d90061fa2a724c36742586c629d471e7a4d
Certificate serial: 019A71B80E52E66BC786455DC6479C9E6873
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ze5dkAYfoqckw2dCWGxinUceek0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/6b1ea5-3f79-49ca-b985-57a5f3289992/1/ze5dkAYfoqckw2dCWGxinUceek0.mft
Manifest number: 0C26
Signing time: Tue 11 Nov 2025 07:01:18 +0000
Manifest this update: Tue 11 Nov 2025 07:01:18 +0000
Manifest next update: Wed 12 Nov 2025 07:01:18 +0000
Files and hashes: 1: j_xflR4S2WvglBWH8M3t9MideIU.roa (hash: Cyel9g1MztQmxzP3oBvWVirfHDPFN3Z5801vcO4qaLk=)
2: ze5dkAYfoqckw2dCWGxinUceek0.crl (hash: kIcA94z+8MHLr1Q38ENmpoN8a55bIQKQ0jK+PRB2Vvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/6b1ea5-3f79-49ca-b985-57a5f3289992/1/ze5dkAYfoqckw2dCWGxinUceek0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/6b1ea5-3f79-49ca-b985-57a5f3289992/1/ze5dkAYfoqckw2dCWGxinUceek0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ze5dkAYfoqckw2dCWGxinUceek0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:0e:52:e6:6b:c7:86:45:5d:c6:47:9c:9e:68:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdee5d90061fa2a724c36742586c629d471e7a4d
Validity
Not Before: Nov 11 07:01:18 2025 GMT
Not After : Nov 12 07:01:18 2025 GMT
Subject: CN=fa8e3a05fcff86c5ed289e8d435f95bbf5688559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9f:cc:d8:f3:1f:e9:d0:08:79:97:1e:d9:5c:
5a:53:c8:82:bc:ba:0c:f8:b2:ea:37:7c:42:28:f5:
d2:01:9e:b2:81:a2:28:5f:96:c8:98:e2:1a:5b:03:
14:fb:e4:ea:56:ae:aa:d3:1c:a4:91:38:d9:2a:34:
db:b6:d8:ad:79:c3:e5:29:6f:b3:be:ee:81:e7:c9:
6f:31:33:ad:d4:2a:dd:38:e0:d3:3f:b6:f6:4c:dc:
8b:0e:61:7a:56:fd:dc:a0:23:cc:39:ef:26:96:08:
f6:f4:e7:ec:d8:1c:5e:67:db:91:52:33:18:69:da:
99:15:22:c2:7f:56:98:05:c4:f2:11:b8:23:67:01:
ef:92:da:bb:f6:46:c4:0a:58:fa:b2:b0:31:5b:ba:
bb:1d:a9:97:97:60:37:0b:b3:a2:94:e4:a7:aa:09:
af:63:93:c9:6e:f2:4a:03:b9:fd:bc:ce:50:a4:92:
50:f6:02:ee:1b:1f:62:25:03:d1:28:bf:fa:37:bc:
b3:6c:cf:74:fc:f1:50:dc:c9:02:65:95:82:6b:86:
0c:6b:4e:da:d2:2f:51:a1:c0:c6:ee:28:21:67:77:
8e:2b:7c:42:db:7a:5c:01:41:50:4b:38:2b:58:a2:
12:c0:ea:e8:aa:cf:4a:19:2b:70:32:cd:b7:3e:d6:
61:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:8E:3A:05:FC:FF:86:C5:ED:28:9E:8D:43:5F:95:BB:F5:68:85:59
X509v3 Authority Key Identifier:
keyid:CD:EE:5D:90:06:1F:A2:A7:24:C3:67:42:58:6C:62:9D:47:1E:7A:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ze5dkAYfoqckw2dCWGxinUceek0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/6b1ea5-3f79-49ca-b985-57a5f3289992/1/ze5dkAYfoqckw2dCWGxinUceek0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/6b1ea5-3f79-49ca-b985-57a5f3289992/1/ze5dkAYfoqckw2dCWGxinUceek0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:1d:bd:b9:a9:9b:c5:1e:0f:20:36:a9:bb:7e:e2:31:65:3c:
0f:d7:e2:70:34:a9:13:30:f6:fc:af:f2:ca:f9:58:7d:36:42:
45:6e:a2:1e:d4:00:95:00:ee:dc:e8:94:2b:c6:b0:3b:a4:11:
98:62:4c:a9:10:46:95:2f:bd:62:5b:fa:ee:62:9d:16:d9:83:
ae:1c:66:4f:7c:e2:11:71:3d:00:83:a3:9b:25:b3:b2:ec:73:
11:38:f2:2f:fc:77:86:48:61:79:af:05:c2:a9:4e:e5:12:67:
1e:41:c5:0d:94:38:af:67:e6:32:97:ca:00:76:2c:f5:12:17:
8c:17:34:fe:75:a7:34:1d:82:f5:db:a9:c7:b6:51:e5:59:fb:
b6:25:4a:8f:11:dc:39:76:18:7a:1f:8a:b5:4c:7f:92:c5:d3:
54:29:9e:68:e9:ad:a5:dd:29:bb:3d:f5:66:99:d9:cf:af:59:
01:88:ab:ff:5d:c7:5e:f4:c0:c6:6c:48:06:06:86:af:ab:a1:
9b:68:50:47:d9:28:0a:c3:18:96:cc:48:b1:6a:ca:eb:ef:91:
8a:df:97:e8:fd:e9:f0:72:71:f2:af:82:52:21:6e:5f:de:19:
9d:45:ce:2d:27:2c:24:01:63:03:0f:bb:af:47:8f:b3:9c:11:
dd:bf:ef:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:35:28 2025 by rpki-client