Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.mft
File: zVpTWTWkvHhsHddbfxCH8T8-CHQ.mft (raw, json)
Hash identifier: fPXUu4OJQXGEe6bljJuIwDQKikK+YATPisMP/1659SM=
Subject key identifier: BA:7F:78:2E:57:0B:03:60:6D:4D:BF:9B:2A:82:62:A2:53:80:66:ED
Authority key identifier: CD:5A:53:59:35:A4:BC:78:6C:1D:D7:5B:7F:10:87:F1:3F:3E:08:74
Certificate issuer: /CN=cd5a535935a4bc786c1dd75b7f1087f13f3e0874
Certificate serial: 019A70A595414589F8D33E58CDC8134308AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zVpTWTWkvHhsHddbfxCH8T8-CHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.mft
Manifest number: 11D4
Signing time: Tue 11 Nov 2025 02:01:31 +0000
Manifest this update: Tue 11 Nov 2025 02:01:31 +0000
Manifest next update: Wed 12 Nov 2025 02:01:31 +0000
Files and hashes: 1: sQGDlHpoLDO9MGkxSeBWC8uppqs.roa (hash: 6KgDIkevhFyVfhdKRkIXWLxH6LsOjOgpwNrZ+fmFguE=)
2: zVpTWTWkvHhsHddbfxCH8T8-CHQ.crl (hash: 7ErvFPJ+mQw/pwtKRklg6XRheW/hL2jM42KB+JSfKQ8=)
3: ziOY-6fncsLuQQzVu0Sf6c2Hbmk.roa (hash: AVAQzd3M8IxybV2CUgMzwoAYpnE92DpPd7dWpe04sBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/zVpTWTWkvHhsHddbfxCH8T8-CHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:95:41:45:89:f8:d3:3e:58:cd:c8:13:43:08:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5a535935a4bc786c1dd75b7f1087f13f3e0874
Validity
Not Before: Nov 11 02:01:31 2025 GMT
Not After : Nov 12 02:01:31 2025 GMT
Subject: CN=ba7f782e570b03606d4dbf9b2a8262a2538066ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a8:f9:34:33:0a:b9:8b:65:02:47:1a:73:32:
c3:72:77:8c:c6:e9:8e:76:a3:a7:58:a1:a1:9a:18:
ca:e7:3f:9a:49:b8:17:45:93:35:3d:09:31:a1:87:
21:59:45:52:8e:88:58:f0:cd:a7:17:45:c3:18:c4:
b1:51:03:f8:5d:3e:7b:cd:70:27:04:42:34:35:48:
cd:a9:30:a9:43:b1:af:98:05:34:a1:29:95:60:80:
6e:fd:ce:18:6b:f8:a0:11:dc:b7:0f:5f:2e:cd:97:
27:c2:c8:61:29:af:66:ed:16:9e:a0:f6:4e:72:fd:
97:56:89:11:4d:2f:3e:1f:ad:74:4c:8a:0d:58:71:
ab:57:33:6d:f5:f2:8b:5c:84:da:9c:39:ca:ff:44:
29:cd:44:92:39:0f:fd:4c:f3:42:72:42:0a:77:32:
ed:66:e0:56:ac:0e:78:41:e4:c2:f0:50:c4:b0:e8:
3e:20:2a:66:71:aa:3d:fa:af:e1:f3:28:46:5d:4d:
e7:cc:c6:29:de:0c:29:28:d8:f7:d0:29:6e:fc:3f:
77:6e:47:b3:34:d9:5f:20:a7:87:f1:11:01:3b:07:
8e:cc:3b:9b:1a:72:46:45:c8:d4:49:28:97:90:b3:
04:64:9c:89:53:60:3f:a6:d6:98:55:3f:18:c0:0f:
c5:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:7F:78:2E:57:0B:03:60:6D:4D:BF:9B:2A:82:62:A2:53:80:66:ED
X509v3 Authority Key Identifier:
keyid:CD:5A:53:59:35:A4:BC:78:6C:1D:D7:5B:7F:10:87:F1:3F:3E:08:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zVpTWTWkvHhsHddbfxCH8T8-CHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:45:72:89:83:ba:c0:89:5b:ac:fb:fd:fd:d8:f5:1b:68:e1:
a5:cd:09:d1:1d:10:2e:87:c9:59:e4:c2:9b:10:1f:43:ee:18:
55:9e:e0:9b:97:30:fe:a3:c6:65:0c:c2:08:d0:25:01:4e:06:
8d:00:dc:69:24:12:13:b4:72:91:79:dc:36:92:73:9a:9c:71:
49:96:18:bb:44:01:01:5d:69:15:2e:12:93:cb:e2:c2:8c:5a:
c0:ed:1f:d2:12:10:7a:88:b3:ac:f7:e7:89:67:62:86:46:65:
59:cd:19:72:df:b4:b5:99:d7:76:39:f9:2d:e4:4e:b2:54:37:
c4:73:9e:aa:eb:ee:35:78:85:27:3e:e8:4e:41:2a:34:09:a6:
91:a6:eb:dd:1e:71:60:af:8d:9f:63:aa:ad:e3:41:b8:c0:b9:
46:35:18:7a:3d:4a:41:77:80:77:6e:e3:e4:9e:c2:86:a9:17:
01:42:fe:31:90:4c:8d:33:27:2a:be:35:3d:2b:77:68:cd:f0:
8f:d8:2a:3a:c4:af:7a:9b:c0:07:55:c3:de:f3:6e:5f:6d:66:
a3:a8:fd:5f:6e:f8:01:95:3e:2b:19:24:c0:c6:30:7b:2c:75:
71:a2:e3:de:c3:e1:a6:6c:e9:21:35:ba:0a:98:96:59:b4:84:
62:89:d9:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:38:20 2025 by rpki-client