Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.mft
File: zAGDPH7l80P_CTtsTmFR0ONkV2g.mft (raw, json)
Hash identifier: npimSRp1TAWCWz2n1zbY12fKbQkCZmh/ne2L3oqOrrg=
Subject key identifier: 27:2E:4C:5B:5F:FC:38:BF:18:49:82:43:7F:81:26:15:31:7C:43:8E
Authority key identifier: CC:01:83:3C:7E:E5:F3:43:FF:09:3B:6C:4E:61:51:D0:E3:64:57:68
Certificate issuer: /CN=cc01833c7ee5f343ff093b6c4e6151d0e3645768
Certificate serial: 019A2930152A90F98ED70A101DD7C2215AB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zAGDPH7l80P_CTtsTmFR0ONkV2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.mft
Manifest number: 1702
Signing time: Tue 28 Oct 2025 05:00:08 +0000
Manifest this update: Tue 28 Oct 2025 05:00:08 +0000
Manifest next update: Wed 29 Oct 2025 05:00:08 +0000
Files and hashes: 1: 8B-49SRrYWj3BFm1FIacELaGu3s.roa (hash: laIZJXxS1vtVLt93zJEWrt+cjjvvJapngvXurJPqS7Y=)
2: a3gHziW8P1fHttGC9Ex68BgcGK4.roa (hash: 5EwUldHPQ4hQYwe5t3ER6qcsrkPeWX9lX5322mclP1s=)
3: zAGDPH7l80P_CTtsTmFR0ONkV2g.crl (hash: QSqeCDIDoIdkZPAtKv/Gl1FpGpv1dtIGDmWqaggANjI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/zAGDPH7l80P_CTtsTmFR0ONkV2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 05:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:29:30:15:2a:90:f9:8e:d7:0a:10:1d:d7:c2:21:5a:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc01833c7ee5f343ff093b6c4e6151d0e3645768
Validity
Not Before: Oct 28 05:00:08 2025 GMT
Not After : Oct 29 05:00:08 2025 GMT
Subject: CN=272e4c5b5ffc38bf184982437f812615317c438e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:97:2d:ec:e1:3a:3f:76:df:bf:61:d1:9a:5d:
de:c7:e5:2b:8b:88:64:cc:7e:62:b1:42:e9:f9:ff:
59:8a:0c:2e:70:d5:7c:a6:16:8e:a4:3f:f2:66:52:
69:d6:e2:a4:4a:be:80:70:9f:c0:e1:96:00:2b:8c:
34:48:fd:43:45:e5:db:88:0d:f8:26:48:a9:95:40:
61:1a:d4:23:63:c9:2f:82:7b:05:75:d9:dd:72:79:
0d:b2:7e:c8:61:0d:97:c9:31:aa:07:5a:d8:c7:4e:
cb:49:aa:b6:28:c6:9d:ca:89:4b:49:20:6c:60:6e:
92:66:3c:33:3a:b8:54:a4:3a:38:c2:16:eb:03:c0:
e8:1e:d5:60:ab:f9:bd:24:b4:0b:c6:cf:0a:2b:eb:
60:c5:bd:64:b7:20:71:5f:7a:38:69:71:07:90:a6:
2c:94:9a:03:31:a0:d3:ac:db:da:a7:3d:bc:fb:b4:
d9:ef:f2:1b:0b:46:45:c2:fa:b0:fe:49:b5:1e:40:
57:3d:61:0f:17:93:49:d9:67:8f:bb:96:c4:b3:0b:
14:11:f7:51:83:d7:14:92:8a:09:56:d4:9c:5f:26:
b7:a9:d4:e6:61:b9:89:fd:76:02:83:5c:4f:58:51:
4b:23:b7:e8:f7:24:c3:8e:12:9a:1e:61:e4:a4:a8:
c8:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:2E:4C:5B:5F:FC:38:BF:18:49:82:43:7F:81:26:15:31:7C:43:8E
X509v3 Authority Key Identifier:
keyid:CC:01:83:3C:7E:E5:F3:43:FF:09:3B:6C:4E:61:51:D0:E3:64:57:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zAGDPH7l80P_CTtsTmFR0ONkV2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:e8:96:13:14:a4:0d:a3:79:12:38:b1:d7:e8:6e:8f:cd:61:
56:05:e6:22:3a:5e:67:d1:65:fd:88:67:78:2e:0f:f9:43:9f:
e4:37:01:5e:ca:02:72:ac:ea:d3:3d:65:01:6e:8f:0d:4d:f1:
96:34:aa:02:2a:1d:d2:ab:b9:ca:ab:f2:6f:59:79:dc:46:02:
2f:95:58:5c:d6:93:82:57:1a:0a:1b:0f:f3:53:67:31:a3:93:
0c:13:11:f0:f4:13:d4:56:1f:2f:2e:f6:d0:5c:44:b1:e2:40:
47:88:91:7a:4f:c3:f7:8e:94:2f:08:01:c9:a5:87:58:f6:df:
14:0d:07:85:f7:9f:da:79:8a:25:14:1d:3e:3b:dd:ed:da:2d:
43:2a:04:da:51:b9:28:90:a9:9d:a0:69:c9:bb:d0:50:1a:42:
26:55:53:19:c6:d4:a8:bb:22:e8:98:5a:d7:be:82:aa:b8:51:
7a:fd:8e:b9:65:10:70:a3:36:4f:5a:f5:4d:2e:77:9f:16:cd:
95:8e:e5:74:b4:f7:33:57:47:41:87:ff:e3:c0:3b:cf:00:e9:
d8:1f:96:05:c6:95:d9:4e:ab:63:d4:13:49:c2:02:e3:dc:14:
04:e0:af:2c:9a:28:af:b8:c4:7f:c3:58:1d:36:0a:be:89:fb:
c3:10:03:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 12:31:59 2025 by rpki-client