Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.mft
File: zUBlln3sCStfyQFS5KlTObodIok.mft (raw, json)
Hash identifier: n62ob0XBBdJVesZWYdxJmdhrSFg1au6SozOUXOV/zfQ=
Subject key identifier: 5A:2C:E9:82:44:F9:59:C6:15:F4:29:38:F7:FA:BC:DF:3D:FC:F7:0C
Authority key identifier: CD:40:65:96:7D:EC:09:2B:5F:C9:01:52:E4:A9:53:39:BA:1D:22:89
Certificate issuer: /CN=cd4065967dec092b5fc90152e4a95339ba1d2289
Certificate serial: 0199C6B369E898B9F35AFCC3B4932EB57799
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zUBlln3sCStfyQFS5KlTObodIok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.mft
Manifest number: 0D1C
Signing time: Thu 09 Oct 2025 02:01:10 +0000
Manifest this update: Thu 09 Oct 2025 02:01:10 +0000
Manifest next update: Fri 10 Oct 2025 02:01:10 +0000
Files and hashes: 1: O_Eyba2hWiJ1G1yko5jMVf-Hi74.roa (hash: 6Ep9rh8riGcgqLK1eN8d8mtWbuCz5+WFjzg4sxJvKMw=)
2: zUBlln3sCStfyQFS5KlTObodIok.crl (hash: RBmK0oqkkEpgIxol8Kl+NybFTCXPvdbFDGhj27GzH6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.mft
rsync://rpki.ripe.net/repository/DEFAULT/zUBlln3sCStfyQFS5KlTObodIok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 22:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c6:b3:69:e8:98:b9:f3:5a:fc:c3:b4:93:2e:b5:77:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd4065967dec092b5fc90152e4a95339ba1d2289
Validity
Not Before: Oct 9 02:01:10 2025 GMT
Not After : Oct 10 02:01:10 2025 GMT
Subject: CN=5a2ce98244f959c615f42938f7fabcdf3dfcf70c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:df:da:c5:44:77:43:1b:10:7a:2a:5b:8f:13:
1f:24:1a:d7:a5:ed:f1:7e:41:5a:b6:c8:2c:42:e6:
7e:23:b6:a5:01:c5:8d:68:87:6d:e9:e4:81:f5:1b:
17:7a:c3:0a:6c:85:35:96:00:16:1d:bf:c2:94:d0:
d5:54:e3:20:84:17:b4:e7:88:15:ca:c2:34:34:6a:
72:91:a4:f8:58:ae:ab:6b:2e:eb:01:c0:7b:52:a9:
7c:74:1a:82:6f:6a:24:aa:91:90:9b:f3:8f:d1:b6:
8e:24:4e:fe:8b:2d:e4:f9:64:6f:4b:ff:f8:4f:92:
cb:7e:7b:43:ba:7f:2c:60:3d:be:1f:5b:b7:09:ab:
9d:c2:e2:a9:48:9b:3c:a2:38:0e:56:d7:9c:f5:22:
43:b5:b3:da:51:18:77:72:b3:9f:3b:d9:b1:cc:d0:
54:47:74:92:6a:95:19:3e:1b:7b:2f:36:21:ec:bc:
6b:45:1e:fa:6e:45:0c:6c:4f:f3:10:0b:42:31:bc:
00:6b:4b:e3:53:aa:d7:77:e3:dd:04:ac:cc:33:c3:
12:ee:e1:a9:b4:60:34:42:56:0c:f0:1f:8f:fd:60:
79:57:6e:ed:a3:cc:f4:1d:1a:fd:23:b0:21:d2:cc:
1b:f8:13:32:31:02:21:e5:f2:72:95:a2:bd:d5:34:
1b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:2C:E9:82:44:F9:59:C6:15:F4:29:38:F7:FA:BC:DF:3D:FC:F7:0C
X509v3 Authority Key Identifier:
keyid:CD:40:65:96:7D:EC:09:2B:5F:C9:01:52:E4:A9:53:39:BA:1D:22:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zUBlln3sCStfyQFS5KlTObodIok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:36:6e:da:41:5a:71:2b:97:70:c8:26:5a:54:e3:85:23:c4:
ff:a3:f7:77:a6:8a:56:6b:7f:c0:b2:75:a5:50:a3:1b:38:38:
48:23:21:96:b9:d7:8d:69:d3:69:d1:7c:f5:dc:fe:bc:68:b6:
db:27:8d:25:72:f6:1b:af:7a:20:59:d8:fc:35:a2:7f:c6:a1:
92:50:4d:18:e3:73:af:44:0d:96:fd:d5:d0:44:87:23:09:5b:
e4:59:73:82:33:38:e8:32:bc:a1:81:c2:2d:da:a4:00:02:34:
2b:32:e5:11:f8:6f:12:d5:82:66:aa:33:e5:1d:4d:7c:b9:34:
9e:e5:e7:a6:e9:24:c3:09:12:cf:f0:f5:ef:cc:68:b3:95:15:
82:57:6b:2a:5c:97:26:56:ee:24:c7:cd:3e:b5:3a:a6:98:3e:
3e:62:a8:80:4d:f6:d1:3f:f8:e2:18:c9:f9:18:1f:f4:c5:82:
b0:90:e2:f6:e0:3f:11:e0:fc:67:eb:78:63:88:2a:1e:86:9c:
60:05:47:2a:14:b6:26:a7:b6:10:d1:ac:5c:e4:b4:62:b9:7b:
2e:65:2e:2c:7a:f4:f7:ad:03:32:b0:c1:20:60:69:ea:3c:a8:
bd:cb:be:ad:c2:53:3d:c3:68:6f:4e:5c:2a:cc:b8:7a:2a:ed:
eb:97:92:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 06:15:50 2025 by rpki-client