Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/faf1e3-3bbd-4788-bdf4-1c86e7d0f784/1/zaiOm3q14yGxs_lXqboZdt1CW8M.mft
File: zaiOm3q14yGxs_lXqboZdt1CW8M.mft (raw, json)
Hash identifier: pfy4djhrpcrvAqtFox99jm9Jjap3AmABUXPcgyIvOsg=
Subject key identifier: 08:81:BA:E3:A9:14:D1:38:30:34:90:2E:67:26:0F:0E:68:F0:11:2D
Authority key identifier: CD:A8:8E:9B:7A:B5:E3:21:B1:B3:F9:57:A9:BA:19:76:DD:42:5B:C3
Certificate issuer: /CN=cda88e9b7ab5e321b1b3f957a9ba1976dd425bc3
Certificate serial: 019A730107270AECF2E21F6279247BB5A27E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaiOm3q14yGxs_lXqboZdt1CW8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/faf1e3-3bbd-4788-bdf4-1c86e7d0f784/1/zaiOm3q14yGxs_lXqboZdt1CW8M.mft
Manifest number: 048B
Signing time: Tue 11 Nov 2025 13:00:38 +0000
Manifest this update: Tue 11 Nov 2025 13:00:38 +0000
Manifest next update: Wed 12 Nov 2025 13:00:38 +0000
Files and hashes: 1: fgM561fL_3Rx-_1J5CJxxdceK50.roa (hash: nwniELmnb3/CT2nQQZ1hAp6RF9PN9bCFIt9tpx0KqDk=)
2: zaiOm3q14yGxs_lXqboZdt1CW8M.crl (hash: RSxHghf6TYttBgCeKdHoWGzucT/4UwGXbHwqVT9OIZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/faf1e3-3bbd-4788-bdf4-1c86e7d0f784/1/zaiOm3q14yGxs_lXqboZdt1CW8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/faf1e3-3bbd-4788-bdf4-1c86e7d0f784/1/zaiOm3q14yGxs_lXqboZdt1CW8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/zaiOm3q14yGxs_lXqboZdt1CW8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:07:27:0a:ec:f2:e2:1f:62:79:24:7b:b5:a2:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cda88e9b7ab5e321b1b3f957a9ba1976dd425bc3
Validity
Not Before: Nov 11 13:00:38 2025 GMT
Not After : Nov 12 13:00:38 2025 GMT
Subject: CN=0881bae3a914d1383034902e67260f0e68f0112d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:49:86:65:c2:0d:69:81:da:37:18:44:a3:6a:
57:e5:4b:e7:7c:6e:c6:67:58:0f:50:2c:02:a7:38:
9b:9a:b6:5b:3e:47:46:ec:a6:d5:f5:71:fb:40:39:
58:93:4f:d1:8f:50:d8:db:4c:54:fd:94:30:03:b4:
18:78:3d:58:75:3c:36:4d:0b:17:2f:c4:7e:f4:f9:
8f:10:19:c3:3b:d9:06:10:30:5d:95:b3:23:55:0b:
0f:d8:1b:77:d7:0d:e8:1b:e9:bd:8b:fb:45:35:44:
1d:87:35:13:d9:d2:4b:63:f7:22:fe:b7:79:01:3a:
dd:86:97:5d:41:20:ea:80:33:0c:01:bc:f9:92:0b:
c6:41:81:41:1c:9d:29:83:d9:1d:41:29:84:a9:44:
26:14:d6:e8:95:8b:14:20:19:7d:10:cd:e0:e1:00:
8d:6c:fb:d9:1d:54:94:31:6f:c6:79:70:34:81:1e:
3a:86:34:1a:aa:23:2c:16:97:89:e6:15:ca:80:db:
4d:a4:76:65:ef:6f:18:05:c5:68:e7:43:64:13:77:
0d:9a:02:1a:88:bb:ec:34:39:10:3c:e2:53:0c:da:
16:48:ab:28:3b:dd:7d:0f:58:d2:74:34:c3:9b:25:
8a:a1:8a:52:12:bd:76:36:d8:c2:f1:a8:ab:92:d4:
8f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:81:BA:E3:A9:14:D1:38:30:34:90:2E:67:26:0F:0E:68:F0:11:2D
X509v3 Authority Key Identifier:
keyid:CD:A8:8E:9B:7A:B5:E3:21:B1:B3:F9:57:A9:BA:19:76:DD:42:5B:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaiOm3q14yGxs_lXqboZdt1CW8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/faf1e3-3bbd-4788-bdf4-1c86e7d0f784/1/zaiOm3q14yGxs_lXqboZdt1CW8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/faf1e3-3bbd-4788-bdf4-1c86e7d0f784/1/zaiOm3q14yGxs_lXqboZdt1CW8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:05:64:ef:ce:2f:6c:29:4b:dc:39:55:33:dd:94:e6:1c:4b:
73:c7:33:d0:25:40:ca:c9:4b:2c:96:37:ee:a7:04:90:3c:98:
de:9d:b6:51:11:18:f7:1f:e0:70:c6:e0:76:5f:c4:58:43:ec:
4b:ba:7f:ec:60:2d:ec:02:50:d8:7e:a9:c0:74:8e:0d:ab:d7:
d4:c6:69:7c:4f:93:69:0b:b9:df:47:c3:83:14:de:2c:4c:3d:
29:9a:32:99:55:63:58:5f:56:05:64:c1:25:ac:cd:30:ec:96:
71:fa:82:35:b1:4f:43:eb:62:85:72:cd:de:3a:7c:f9:34:7e:
00:c6:2b:82:51:fb:6b:6c:14:aa:a1:ce:11:43:51:c3:d7:16:
5c:fa:5c:23:3f:c0:db:15:be:27:50:63:ce:2d:8e:ee:e4:cc:
48:69:af:55:6b:bd:fb:2d:27:ef:3c:e2:c5:f2:e9:4a:53:80:
0c:57:ae:84:40:52:39:6a:c3:63:32:eb:31:da:82:48:74:2b:
6c:9a:c8:27:0b:7a:6c:12:4e:c9:2f:67:23:10:be:8c:6e:ba:
31:44:a4:ce:0b:1c:ad:2f:95:79:ff:04:bb:fa:6d:af:b5:96:
aa:1e:81:75:13:a1:62:11:f8:5c:52:0f:b3:49:1b:06:a3:61:
bb:82:9d:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:19:40 2025 by rpki-client