Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/1d7583-d10c-47db-aee1-58d664210669/1/Rzd55qd8flghMZh2TOKsDmvuYjY.mft
File: Rzd55qd8flghMZh2TOKsDmvuYjY.mft (raw, json)
Hash identifier: 3xXIbTQBLA3zIL814KHirijkdJROAGWjDPJo1pL9HXs=
Subject key identifier: 38:82:43:A0:46:79:95:72:78:C9:B4:2A:5F:9D:6B:84:5C:FF:AF:EB
Authority key identifier: 47:37:79:E6:A7:7C:7E:58:21:31:98:76:4C:E2:AC:0E:6B:EE:62:36
Certificate issuer: /CN=473779e6a77c7e58213198764ce2ac0e6bee6236
Certificate serial: 019A7149F2D46AB20B5073963B4D5D5FF54E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rzd55qd8flghMZh2TOKsDmvuYjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/1d7583-d10c-47db-aee1-58d664210669/1/Rzd55qd8flghMZh2TOKsDmvuYjY.mft
Manifest number: 01FC
Signing time: Tue 11 Nov 2025 05:01:02 +0000
Manifest this update: Tue 11 Nov 2025 05:01:02 +0000
Manifest next update: Wed 12 Nov 2025 05:01:02 +0000
Files and hashes: 1: 9MjXTd2Lr1yJdEmK8CTeSoInorE.roa (hash: YWK7+nRLe8UfaY8PNHmd6MYAPs7Oj1F/tL2OOejEg1M=)
2: Rzd55qd8flghMZh2TOKsDmvuYjY.crl (hash: ygXug02K0leWHAsGt/1ql/F6PDNxliaWDSvIWgkfZ6w=)
3: hGPKpUabfTwURA6WsciuOkTPGQI.roa (hash: KEkDVhj8xqmITURn5vzg3xzmIbncL3eYEldek/45XYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/1d7583-d10c-47db-aee1-58d664210669/1/Rzd55qd8flghMZh2TOKsDmvuYjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/1d7583-d10c-47db-aee1-58d664210669/1/Rzd55qd8flghMZh2TOKsDmvuYjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rzd55qd8flghMZh2TOKsDmvuYjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:f2:d4:6a:b2:0b:50:73:96:3b:4d:5d:5f:f5:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473779e6a77c7e58213198764ce2ac0e6bee6236
Validity
Not Before: Nov 11 05:01:02 2025 GMT
Not After : Nov 12 05:01:02 2025 GMT
Subject: CN=388243a04679957278c9b42a5f9d6b845cffafeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:4b:a1:ca:63:77:f1:0c:a6:d2:f7:2a:ac:25:
88:79:45:1c:77:b7:5e:45:10:fc:b7:bb:2e:68:35:
a5:5d:33:a8:af:9f:ef:47:b7:2d:24:a9:10:e8:4e:
ab:72:c1:33:f6:2e:df:92:f9:4f:a7:dc:19:7a:85:
81:b1:d4:95:af:60:f9:88:c6:82:6f:f5:f3:e8:3d:
61:77:d0:50:e3:18:bf:e1:4e:54:ae:b0:94:04:47:
d0:ed:78:35:e9:5b:e0:02:c1:e5:18:fb:15:50:c5:
1a:2a:36:ab:ec:7f:8e:91:15:23:fe:fb:8f:fd:89:
88:93:e0:f2:9f:7f:04:91:39:b6:ea:37:90:ce:d0:
28:6b:04:b2:d8:e3:36:42:3c:53:ce:b6:21:1a:53:
f2:c6:55:50:70:a1:1b:ce:9f:5e:d1:56:18:17:3e:
04:36:4a:49:89:e6:0a:c7:0c:38:f5:d3:b3:90:7c:
7b:8e:58:79:26:a0:ab:99:80:4c:82:30:2c:53:bc:
7d:29:1a:57:ad:d2:ca:ca:fd:7d:14:0c:95:26:55:
f2:7f:1a:13:e8:6c:cd:d3:a0:6e:00:f1:ac:a6:53:
1b:f2:ab:26:a6:dd:b6:96:09:ad:b9:41:5b:ae:94:
9e:a0:34:61:08:13:ca:d7:16:8a:63:8b:a7:b6:36:
ff:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:82:43:A0:46:79:95:72:78:C9:B4:2A:5F:9D:6B:84:5C:FF:AF:EB
X509v3 Authority Key Identifier:
keyid:47:37:79:E6:A7:7C:7E:58:21:31:98:76:4C:E2:AC:0E:6B:EE:62:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rzd55qd8flghMZh2TOKsDmvuYjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1d7583-d10c-47db-aee1-58d664210669/1/Rzd55qd8flghMZh2TOKsDmvuYjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1d7583-d10c-47db-aee1-58d664210669/1/Rzd55qd8flghMZh2TOKsDmvuYjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:c9:08:07:ee:cf:11:92:33:e0:94:80:cf:18:b9:69:fa:59:
03:f5:11:02:82:d8:7f:b9:24:06:8b:3b:94:77:9d:7a:97:f3:
73:7d:0b:f2:7a:f6:d8:56:88:69:e8:d2:18:40:ed:b2:ab:36:
cf:c8:a6:cb:e0:63:40:b8:e8:1e:ec:f0:4e:89:65:95:98:90:
40:2b:3b:c8:02:8f:27:b9:ca:98:33:a5:db:c5:e1:c3:7d:c3:
4d:ff:4e:6c:60:de:84:a7:5b:e8:db:60:59:6f:77:4b:6b:52:
d2:e5:5b:62:9f:10:57:6f:91:eb:c1:bc:0a:e3:0e:ff:1d:6d:
68:29:2a:16:57:47:da:1f:ab:ed:bc:3e:0e:c2:37:22:20:e6:
42:82:9e:9f:62:9d:df:04:c6:9c:37:3a:44:a5:84:2a:85:4f:
32:6f:25:81:cb:57:a5:80:02:36:a8:f6:4c:8f:cb:20:62:ee:
c9:9a:04:28:b6:13:3a:3d:45:94:fa:51:da:ac:67:4c:f7:ed:
ef:f1:50:eb:5f:89:1e:25:69:28:6b:c7:84:cc:e7:22:7c:b8:
3d:26:5c:11:9a:74:eb:22:37:d8:16:af:47:36:cc:90:05:38:
18:4b:c4:83:4d:54:99:0f:cc:28:c8:d1:3c:8e:5d:4b:bf:bb:
18:f6:fb:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:23:56 2025 by rpki-client