Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/zGB34ATojv-PE7d0DfJU2eSN1XQ.mft
File: zGB34ATojv-PE7d0DfJU2eSN1XQ.mft (raw, json)
Hash identifier: wdBO2AVQ+nxgjd1ssmxPdkIO9T8Q8Oeg2T2+HoVVrUU=
Subject key identifier: 4D:B2:D7:1C:51:AA:20:4C:A2:11:E0:A8:F8:FC:BA:A5:29:52:D4:AB
Authority key identifier: CC:60:77:E0:04:E8:8E:FF:8F:13:B7:74:0D:F2:54:D9:E4:8D:D5:74
Certificate issuer: /CN=cc6077e004e88eff8f13b7740df254d9e48dd574
Certificate serial: 019A53080421A112270138D1B09B1D37BD58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zGB34ATojv-PE7d0DfJU2eSN1XQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/zGB34ATojv-PE7d0DfJU2eSN1XQ.mft
Manifest number: 1713
Signing time: Wed 05 Nov 2025 08:00:25 +0000
Manifest this update: Wed 05 Nov 2025 08:00:25 +0000
Manifest next update: Thu 06 Nov 2025 08:00:25 +0000
Files and hashes: 1: VeyJDEEty7IaphGW3rZRjoHUojg.roa (hash: nlnkQXVcXOy604OjeWWR6cJfH3A2u1gS0XEnkUUPxgU=)
2: ZJT0zr7m2y5wt4gW9bKEzmGI1ow.roa (hash: G77N1gA2nJ38QCQzMuuTUjtsbNVh+2EuSfRtrFna6jE=)
3: grKIm7Lo2eZE2vteQMGt4oHjtOE.roa (hash: 2kq2MqRQm4HSGsYIQVdRn5p0QWWgpGXBFjPu/GSW7ak=)
4: zGB34ATojv-PE7d0DfJU2eSN1XQ.crl (hash: b6dWmzg8t5wqvqOt/KuNi9RKW3Da0kgqUpyP66GTbUY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/zGB34ATojv-PE7d0DfJU2eSN1XQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/zGB34ATojv-PE7d0DfJU2eSN1XQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/zGB34ATojv-PE7d0DfJU2eSN1XQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:08:04:21:a1:12:27:01:38:d1:b0:9b:1d:37:bd:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc6077e004e88eff8f13b7740df254d9e48dd574
Validity
Not Before: Nov 5 08:00:25 2025 GMT
Not After : Nov 6 08:00:25 2025 GMT
Subject: CN=4db2d71c51aa204ca211e0a8f8fcbaa52952d4ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:72:44:eb:28:1e:b9:90:86:01:08:3f:7b:37:
12:f5:a3:23:b9:a9:e1:13:f1:b1:28:29:fb:7d:e7:
05:51:08:ca:a3:45:ee:74:18:2d:81:56:dc:ad:32:
c7:e6:ef:b4:3f:39:fc:7f:28:c7:27:f6:78:2f:6e:
e0:55:1b:ee:d8:32:35:6a:56:27:c9:e6:dc:26:b9:
7f:84:b3:d4:c9:9a:5d:f9:8c:7d:27:16:3e:a5:89:
c3:3b:c9:2b:f4:b4:c1:fd:7d:9c:cd:62:7f:67:11:
53:73:bf:33:d7:68:0a:bb:3c:76:2b:79:fd:9b:06:
5d:3b:14:3b:88:f9:b1:31:ad:5d:57:e4:09:89:fc:
56:40:04:ae:d1:65:41:a2:eb:92:eb:7c:01:05:e1:
5c:f7:74:d3:aa:0b:38:64:16:59:35:cc:07:8a:3f:
c3:26:55:2f:74:05:90:75:84:f7:2f:c6:6f:0d:da:
04:47:18:e7:a5:da:e8:93:75:6f:2b:1d:43:cf:06:
40:61:93:eb:b6:47:66:75:18:19:e9:6d:e4:a1:6b:
f1:9f:10:9f:e2:6b:bc:76:bf:f1:08:c2:ae:fb:d4:
38:52:ba:59:d5:24:03:a9:de:a5:2d:02:56:a2:12:
48:8e:2c:87:e4:41:7a:8a:ea:25:ed:97:43:c7:ca:
bb:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:B2:D7:1C:51:AA:20:4C:A2:11:E0:A8:F8:FC:BA:A5:29:52:D4:AB
X509v3 Authority Key Identifier:
keyid:CC:60:77:E0:04:E8:8E:FF:8F:13:B7:74:0D:F2:54:D9:E4:8D:D5:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zGB34ATojv-PE7d0DfJU2eSN1XQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/zGB34ATojv-PE7d0DfJU2eSN1XQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/zGB34ATojv-PE7d0DfJU2eSN1XQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:60:81:de:c0:f5:06:7f:b3:6a:97:53:6b:fe:6f:3f:9e:ed:
ff:d9:7b:75:b6:d0:19:5a:ca:31:9b:3f:93:84:1e:a8:b3:b4:
a9:af:b1:3f:19:a8:55:76:3b:57:ba:d9:ac:f1:e0:b5:d9:2d:
b4:9a:f9:1c:92:a3:4c:a1:83:0e:60:49:22:d8:1c:e4:63:71:
ee:84:db:d5:d9:c9:92:d0:fe:1b:cd:31:a4:85:95:df:b8:7e:
16:c4:74:6f:69:f0:2d:78:c8:ce:80:a3:e2:c1:e6:c9:7f:e3:
15:75:c9:4a:07:db:64:43:6a:91:d2:40:57:5b:8f:41:ee:4b:
6d:26:ce:93:63:f5:75:47:51:0e:e7:25:f3:3c:69:56:bd:d7:
f6:f2:02:6f:b0:b3:29:b5:c0:1a:98:9f:7d:20:19:36:b2:61:
07:02:df:26:81:50:4c:d7:5a:1a:ad:d1:3b:20:17:19:b4:91:
bf:10:2a:7f:ee:b5:5f:cb:14:ef:5e:50:d2:14:4a:f7:3c:a3:
da:1c:f6:ce:2e:01:a4:77:6f:25:a3:fa:c7:f8:a1:e5:6b:9c:
df:0b:a4:5b:6c:63:8d:e5:e6:70:a2:62:15:2a:23:0e:ee:f9:
39:72:17:a7:1f:3a:61:95:2b:41:28:ba:3f:6a:05:03:0d:5b:
9f:fa:14:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:33:46 2025 by rpki-client