Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.mft
File: z7dRkZeIZvH8l_Ujx92kCoj353c.mft (raw, json)
Hash identifier: /uMwQGprJs6ro/i8OxAKJXNMFPlOzJyVZdnBR/8gEzE=
Subject key identifier: 32:33:CE:F4:F8:84:CB:0E:BA:93:FD:01:9D:2B:C0:F9:A7:F1:B5:75
Authority key identifier: CF:B7:51:91:97:88:66:F1:FC:97:F5:23:C7:DD:A4:0A:88:F7:E7:77
Certificate issuer: /CN=cfb75191978866f1fc97f523c7dda40a88f7e777
Certificate serial: 019A7180813EFC0D6A6760A3FACDB3B989DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z7dRkZeIZvH8l_Ujx92kCoj353c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.mft
Manifest number: 0F8C
Signing time: Tue 11 Nov 2025 06:00:38 +0000
Manifest this update: Tue 11 Nov 2025 06:00:38 +0000
Manifest next update: Wed 12 Nov 2025 06:00:38 +0000
Files and hashes: 1: BpijmXBHNZyuSg9wgCdNyaC49_E.roa (hash: NjGfIhKIyk2MRtkcF9KYx6j67HWP6W3AQ3lYFEgEUd8=)
2: z7dRkZeIZvH8l_Ujx92kCoj353c.crl (hash: nsB0TnefEhe684xA6GLfKDhV5c7496Orehn93hIjlLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.mft
rsync://rpki.ripe.net/repository/DEFAULT/z7dRkZeIZvH8l_Ujx92kCoj353c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 06:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:80:81:3e:fc:0d:6a:67:60:a3:fa:cd:b3:b9:89:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfb75191978866f1fc97f523c7dda40a88f7e777
Validity
Not Before: Nov 11 06:00:38 2025 GMT
Not After : Nov 12 06:00:38 2025 GMT
Subject: CN=3233cef4f884cb0eba93fd019d2bc0f9a7f1b575
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:b9:3d:4c:a5:d4:3c:1a:27:1f:09:ef:5f:a1:
39:3e:e1:99:1b:83:5e:10:c0:a3:4a:2a:96:ed:39:
8a:6c:ce:e8:60:38:ee:d6:2c:58:71:0a:2b:20:9f:
a5:ff:a2:60:67:00:62:21:23:c2:aa:62:a0:77:6a:
60:7f:94:d8:47:8d:8e:e6:6d:3f:6e:36:56:7c:79:
a1:e4:e9:84:2f:cb:a8:6a:df:bd:3e:21:72:f4:b5:
22:d8:02:d4:77:f0:5a:bf:77:84:74:fa:af:dd:a8:
7b:e6:1f:a3:db:65:b6:aa:ca:35:3d:7e:d2:53:f4:
58:51:e5:73:2f:1f:1b:93:0d:f8:05:48:a1:d1:a7:
fe:83:b2:24:79:0c:a9:a0:82:56:34:b3:d7:ce:6c:
0a:8c:d6:1a:ad:4d:ff:da:91:2c:a7:b7:06:a4:3b:
2a:19:5d:01:90:1e:b1:2a:7e:92:8c:56:4d:9e:8d:
de:51:06:0c:5f:41:11:98:da:e3:8c:b6:ae:74:3a:
db:be:ad:d7:c6:87:a0:71:79:4c:7e:d6:80:e7:e2:
f0:2c:4d:4c:1f:c8:e4:3d:23:3d:ca:bf:1a:20:c8:
1c:01:7b:cc:a6:99:43:df:8a:d0:3e:68:ff:5f:c7:
95:77:99:3f:cd:78:9b:a0:fb:90:7d:6a:7a:af:38:
af:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:33:CE:F4:F8:84:CB:0E:BA:93:FD:01:9D:2B:C0:F9:A7:F1:B5:75
X509v3 Authority Key Identifier:
keyid:CF:B7:51:91:97:88:66:F1:FC:97:F5:23:C7:DD:A4:0A:88:F7:E7:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z7dRkZeIZvH8l_Ujx92kCoj353c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:1c:f9:6e:dd:02:5d:3d:8e:79:f9:14:a5:0d:63:1a:ae:54:
da:ee:ae:b4:4a:73:76:98:61:e9:a5:57:16:ac:cf:5c:2d:f5:
e6:c3:25:f6:8e:bb:3e:f8:ab:6a:0a:37:ca:5c:9a:eb:f9:c8:
ec:91:1d:19:cf:49:75:0e:bc:59:d5:34:03:8c:57:e6:02:0b:
e3:68:63:e2:14:a6:6a:b2:fa:eb:d0:1e:48:77:09:2e:7a:c9:
75:3b:7b:7e:6f:42:78:79:fd:b9:a6:95:52:2b:b2:e8:76:d3:
89:a3:8f:7b:7e:e8:fa:cb:66:1b:5e:80:4a:e1:8e:88:8a:28:
d0:d0:38:fc:d9:23:d3:0f:64:86:d3:bb:a4:1e:37:f2:38:90:
3f:16:c0:32:f5:e9:a3:6d:aa:e8:c0:27:0c:95:5a:9f:f0:bf:
17:fb:6e:e7:b9:a7:db:11:d4:72:12:3d:1d:97:4b:23:37:08:
20:63:b4:d0:37:98:5e:02:00:b3:cf:0b:69:12:90:71:2e:48:
32:12:20:89:7d:fc:16:49:33:bc:ca:5a:23:1d:56:8c:d1:df:
1d:1b:df:6e:03:30:2d:db:4f:36:df:45:3f:96:1f:1e:1e:a1:
84:80:1f:f3:f9:2e:fa:52:df:6c:58:5e:24:0c:25:96:ce:54:
2d:67:08:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:07 2025 by rpki-client