Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft
File: RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft (raw, json)
Hash identifier: JI7gDv5s33n5tRHl9azFliQEx93UsCAABRoD129qyFA=
Subject key identifier: 76:77:52:6B:59:F5:85:82:27:CB:D6:B6:E1:16:84:F6:65:16:3D:B1
Authority key identifier: 47:34:69:A9:66:F4:DF:3C:F2:81:71:D8:7C:74:78:0F:C4:72:F9:79
Certificate issuer: /CN=473469a966f4df3cf28171d87c74780fc472f979
Certificate serial: 019A26D48DFFDBB9CCB6E52809F903B5F788
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RzRpqWb03zzygXHYfHR4D8Ry-Xk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft
Manifest number: 0A00
Signing time: Mon 27 Oct 2025 18:00:55 +0000
Manifest this update: Mon 27 Oct 2025 18:00:55 +0000
Manifest next update: Tue 28 Oct 2025 18:00:55 +0000
Files and hashes: 1: RzRpqWb03zzygXHYfHR4D8Ry-Xk.crl (hash: XI76ow3nRvIiGUDyAA9JFPyHSAN4vCiaY5J//IdwHRg=)
2: sPYhG40WeNs4D0fdLBoDQKTV_Eo.roa (hash: bDpPm+4aHa819Yue2u9g5oa22BJIhkWyJ4aj3sH99kM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft
rsync://rpki.ripe.net/repository/DEFAULT/RzRpqWb03zzygXHYfHR4D8Ry-Xk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 15:57:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:26:d4:8d:ff:db:b9:cc:b6:e5:28:09:f9:03:b5:f7:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473469a966f4df3cf28171d87c74780fc472f979
Validity
Not Before: Oct 27 18:00:55 2025 GMT
Not After : Oct 28 18:00:55 2025 GMT
Subject: CN=7677526b59f5858227cbd6b6e11684f665163db1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:42:c4:93:a6:9a:24:a0:5d:37:ad:46:f4:ea:
33:d7:ec:58:3e:fa:51:87:b8:00:93:cd:ba:78:a1:
7a:27:9c:f9:78:fe:dc:a6:01:d1:2f:dc:2a:48:ce:
5c:8a:bf:71:f5:6f:ca:5f:80:df:64:d3:37:2c:de:
31:a0:50:f3:a7:cd:af:85:c9:c1:6a:db:a0:e6:12:
0e:37:c6:06:ae:ca:f0:c7:d1:f7:a1:54:af:52:06:
6f:27:95:54:54:ec:a5:28:1f:59:6c:d9:70:ae:9c:
6e:80:11:84:6b:1b:ea:37:63:81:9b:0a:de:e6:6b:
ca:40:d7:df:59:5f:26:f2:eb:fc:04:cc:ab:f5:c7:
dc:bd:d4:88:80:12:4c:1c:0e:33:9c:6b:64:ec:3e:
86:f7:9f:6c:73:fa:a5:a9:d8:ec:fd:93:f3:35:68:
ba:54:a8:6f:3f:8b:1a:dd:70:90:47:60:ea:d4:4d:
11:86:ff:14:11:a5:e7:3a:c1:92:21:5d:34:b1:36:
9c:e5:8b:43:ee:7a:5f:7b:d2:f1:6b:19:9b:4b:e3:
15:0d:4b:fc:f3:6d:dc:56:6c:20:88:cf:f7:70:04:
81:71:51:34:f1:41:e6:d9:e6:70:a9:19:b4:da:75:
da:03:4f:8a:a9:08:c5:c0:f3:6e:1e:f9:fe:d1:0e:
fa:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:77:52:6B:59:F5:85:82:27:CB:D6:B6:E1:16:84:F6:65:16:3D:B1
X509v3 Authority Key Identifier:
keyid:47:34:69:A9:66:F4:DF:3C:F2:81:71:D8:7C:74:78:0F:C4:72:F9:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzRpqWb03zzygXHYfHR4D8Ry-Xk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:c3:af:32:60:af:2c:d5:f1:de:26:b1:e8:c2:17:5d:71:2c:
49:87:ad:11:e2:44:c1:ce:45:47:56:d2:a1:48:a2:61:21:7f:
21:76:a5:34:eb:47:53:cb:c2:cc:bc:1f:97:b6:1b:eb:74:46:
fb:ec:08:e0:37:a8:6e:44:95:bd:46:08:4b:78:cc:51:c7:00:
65:23:c2:be:a3:7c:a9:57:e6:e1:1f:44:23:77:67:a9:11:80:
09:68:af:ac:5d:d0:13:40:be:4c:ee:04:32:4e:d3:bb:9c:3f:
75:81:12:9c:83:16:f6:32:07:26:82:e7:72:51:c2:e2:06:05:
d4:7c:d9:8c:98:5e:8d:6c:7c:de:78:fa:ff:55:31:12:46:3c:
65:b3:7e:5b:21:3d:07:2a:d1:03:02:ff:a4:4d:e0:3e:d8:46:
07:cb:84:c9:f2:17:a0:34:0d:9a:bf:d5:8a:02:e4:78:05:c1:
c1:55:40:d1:e2:f1:4d:c8:c9:3a:fd:0e:9f:e1:4d:7c:2a:85:
30:4c:3d:de:55:e0:fe:65:2b:7e:ee:1d:4a:ea:6e:c4:da:5c:
c7:41:30:60:46:62:24:97:22:09:c0:39:5c:24:af:56:4f:4f:
92:12:57:6e:cf:ba:63:e1:ac:d2:a7:d3:3d:17:03:29:ac:74:
bb:90:6e:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 00:54:28 2025 by rpki-client