Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/f17a27-4599-45b5-a66e-70123f495110/1/dZ0nzgcsozbTr6q4h5-U7GNFVmk.mft
File: dZ0nzgcsozbTr6q4h5-U7GNFVmk.mft (raw, json)
Hash identifier: 4W90cG0ZE8ydjowCIIH9vMBmGPuuQAZ2RURQkZAg3Qo=
Subject key identifier: B1:CF:67:C2:D2:E7:A0:83:B6:B2:B8:F6:AB:B9:9C:91:45:1F:E1:44
Authority key identifier: 75:9D:27:CE:07:2C:A3:36:D3:AF:AA:B8:87:9F:94:EC:63:45:56:69
Certificate issuer: /CN=759d27ce072ca336d3afaab8879f94ec63455669
Certificate serial: 019A71B8A4DB22881AAC194627EAE7C7DF8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dZ0nzgcsozbTr6q4h5-U7GNFVmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/f17a27-4599-45b5-a66e-70123f495110/1/dZ0nzgcsozbTr6q4h5-U7GNFVmk.mft
Manifest number: 07E0
Signing time: Tue 11 Nov 2025 07:01:57 +0000
Manifest this update: Tue 11 Nov 2025 07:01:57 +0000
Manifest next update: Wed 12 Nov 2025 07:01:57 +0000
Files and hashes: 1: dZ0nzgcsozbTr6q4h5-U7GNFVmk.crl (hash: nvMaM6JQmx5CFM7AGEwJA69HYDjFN2qyu+lfbaZrAG4=)
2: mbPOWtU-NBbIGZZNzzLtOWcmxj8.roa (hash: qn4MOETPNEkOlTCM8W+7rEv5tZsC1gxAMBahRUzoOCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/f17a27-4599-45b5-a66e-70123f495110/1/dZ0nzgcsozbTr6q4h5-U7GNFVmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/f17a27-4599-45b5-a66e-70123f495110/1/dZ0nzgcsozbTr6q4h5-U7GNFVmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dZ0nzgcsozbTr6q4h5-U7GNFVmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:a4:db:22:88:1a:ac:19:46:27:ea:e7:c7:df:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=759d27ce072ca336d3afaab8879f94ec63455669
Validity
Not Before: Nov 11 07:01:57 2025 GMT
Not After : Nov 12 07:01:57 2025 GMT
Subject: CN=b1cf67c2d2e7a083b6b2b8f6abb99c91451fe144
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c7:9c:3b:99:ac:6b:cc:2d:a6:f5:ee:a9:6c:
1c:f3:3b:1b:68:b1:f9:79:03:cc:a1:e8:fb:a6:0d:
ce:04:38:6a:be:16:66:60:6c:53:3a:cb:0c:11:d2:
a0:82:1c:84:e4:90:a8:18:fd:d4:68:7c:97:7e:90:
dd:75:e0:7f:05:a0:57:43:72:5e:32:c1:93:fc:fe:
d8:24:fe:4d:29:b5:13:2d:d5:92:62:f4:31:e0:d1:
42:9a:39:9e:fc:81:c1:53:4b:63:8e:03:1b:db:2d:
3f:40:10:56:a3:c3:5e:8e:c2:80:5e:86:d9:3d:33:
90:f2:8c:3f:79:d4:42:a5:bf:46:8c:d0:df:97:61:
89:85:e4:58:1a:fc:b2:42:ad:9d:2e:73:9b:eb:53:
b5:32:09:df:31:97:64:3d:bb:ed:31:90:61:ef:f5:
99:44:e4:b4:9e:bb:e7:8d:69:ec:45:5f:86:97:ed:
83:56:c0:27:46:6b:a7:5a:d9:58:b9:74:fd:6a:5b:
95:18:35:c6:b5:11:26:20:38:2b:e3:f4:9e:8d:5d:
49:86:49:c8:05:38:13:f9:45:3b:98:68:e0:f6:a9:
29:29:06:1b:f8:7f:b3:75:75:3b:5a:f4:5a:98:1b:
17:7e:44:c1:24:91:3d:0b:98:7f:12:5e:f2:3d:62:
29:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:CF:67:C2:D2:E7:A0:83:B6:B2:B8:F6:AB:B9:9C:91:45:1F:E1:44
X509v3 Authority Key Identifier:
keyid:75:9D:27:CE:07:2C:A3:36:D3:AF:AA:B8:87:9F:94:EC:63:45:56:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dZ0nzgcsozbTr6q4h5-U7GNFVmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f17a27-4599-45b5-a66e-70123f495110/1/dZ0nzgcsozbTr6q4h5-U7GNFVmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f17a27-4599-45b5-a66e-70123f495110/1/dZ0nzgcsozbTr6q4h5-U7GNFVmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:47:63:f7:c6:7a:f5:72:8d:62:f9:de:8e:f1:3b:11:4d:9f:
13:30:31:06:45:6e:59:15:53:61:40:7e:07:f6:91:24:dd:b1:
45:74:b0:ef:1a:3c:70:cb:24:99:55:b3:17:f9:6c:f8:8c:08:
5e:23:56:fe:65:09:85:ff:71:38:2d:13:6f:0e:f2:cf:ba:61:
48:41:77:d9:34:51:ef:09:b0:60:86:22:38:b1:af:30:0b:bf:
36:a2:b3:91:8e:3b:81:5c:08:05:89:1c:41:69:86:78:22:11:
2f:2b:aa:47:4c:32:01:35:18:0c:e0:ee:84:46:13:d2:33:ec:
be:72:8f:7a:48:ce:55:27:51:6c:7e:ba:ea:78:df:cd:8e:29:
98:e8:6c:07:23:10:fc:13:43:49:19:e6:0a:07:f9:42:2e:2e:
0e:c5:0e:93:40:56:e5:63:93:90:b6:8a:23:48:c5:ba:b9:95:
19:33:e4:de:62:c1:9f:6a:8d:0b:1b:90:92:66:c6:c5:4b:e5:
16:71:fc:fa:bd:a0:12:87:a7:30:1c:8b:40:8c:26:d9:fb:22:
cb:e3:7a:97:c7:42:6a:fb:5a:d1:6c:64:3a:d5:59:30:e0:12:
89:3c:88:25:44:e0:8c:10:6c:3f:89:4f:b4:22:3b:eb:9e:ea:
aa:11:23:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:56:48 2025 by rpki-client