Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/3e3483-1845-442d-a59a-dd72550d78ac/1/zQHNoDArgT6xRVea2B9e19KcAgk.mft
File: zQHNoDArgT6xRVea2B9e19KcAgk.mft (raw, json)
Hash identifier: CFoxWMylTTtk7IY8eqI3SvijsenIg3MHstofkXgZcXI=
Subject key identifier: CA:9D:4A:99:A9:63:93:AA:A0:11:60:39:8E:6F:60:F8:FA:1E:AF:F1
Authority key identifier: CD:01:CD:A0:30:2B:81:3E:B1:45:57:9A:D8:1F:5E:D7:D2:9C:02:09
Certificate issuer: /CN=cd01cda0302b813eb145579ad81f5ed7d29c0209
Certificate serial: 019A71B7FEDB7A5A75F29D8443904467C6F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zQHNoDArgT6xRVea2B9e19KcAgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/3e3483-1845-442d-a59a-dd72550d78ac/1/zQHNoDArgT6xRVea2B9e19KcAgk.mft
Manifest number: 0C6E
Signing time: Tue 11 Nov 2025 07:01:14 +0000
Manifest this update: Tue 11 Nov 2025 07:01:14 +0000
Manifest next update: Wed 12 Nov 2025 07:01:14 +0000
Files and hashes: 1: 0CX7t2odLe1-aKNEQm4nhIdzG64.roa (hash: uGt7n5BK6nTit2QXoLjymR88j/L4jwCXMbpw123vP/Q=)
2: zQHNoDArgT6xRVea2B9e19KcAgk.crl (hash: YhYliZVRlYzUCF3QTy6kuPjlPDDnNvWQkViGNaaJPNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/3e3483-1845-442d-a59a-dd72550d78ac/1/zQHNoDArgT6xRVea2B9e19KcAgk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/3e3483-1845-442d-a59a-dd72550d78ac/1/zQHNoDArgT6xRVea2B9e19KcAgk.mft
rsync://rpki.ripe.net/repository/DEFAULT/zQHNoDArgT6xRVea2B9e19KcAgk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:fe:db:7a:5a:75:f2:9d:84:43:90:44:67:c6:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd01cda0302b813eb145579ad81f5ed7d29c0209
Validity
Not Before: Nov 11 07:01:14 2025 GMT
Not After : Nov 12 07:01:14 2025 GMT
Subject: CN=ca9d4a99a96393aaa01160398e6f60f8fa1eaff1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:ad:de:f4:8b:02:2b:92:80:ed:d5:f1:21:c5:
20:04:05:d3:a7:33:22:d8:41:ca:19:a1:31:c4:5c:
4a:18:61:f1:2d:68:91:8f:92:41:5a:66:78:09:b3:
f9:58:63:72:05:c1:1f:96:26:f8:1f:9e:a0:8f:8e:
f3:b2:a4:14:fe:5f:56:16:92:af:38:73:ff:35:7c:
67:dc:98:3d:c7:1f:18:ea:d0:fc:a0:0d:b5:e6:43:
5e:c2:b2:b6:26:b7:0d:fc:70:3f:65:bb:73:c2:15:
da:27:e8:b2:42:2f:e5:82:32:12:d8:59:7a:15:b0:
d9:80:f1:08:7b:c4:78:ff:37:fd:f7:5b:07:41:0a:
58:93:61:2f:65:2d:0d:24:25:b5:c3:f7:09:d4:18:
98:49:92:6c:91:37:55:4f:47:b1:33:60:a7:d3:33:
51:d6:6c:25:88:a5:58:95:c1:aa:fc:ce:10:46:48:
3f:7d:75:bf:37:e3:e8:9d:81:76:7d:47:fd:39:2c:
0e:59:9e:c3:97:38:b7:e4:27:55:d0:a5:0d:f0:20:
04:19:99:fb:e0:b4:a1:f2:65:a6:d3:92:a2:45:6d:
5e:5f:c8:26:fd:4a:bb:a4:6e:da:50:7f:a6:52:86:
74:94:e1:c2:d7:69:be:07:e1:01:a6:46:43:51:41:
67:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:9D:4A:99:A9:63:93:AA:A0:11:60:39:8E:6F:60:F8:FA:1E:AF:F1
X509v3 Authority Key Identifier:
keyid:CD:01:CD:A0:30:2B:81:3E:B1:45:57:9A:D8:1F:5E:D7:D2:9C:02:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQHNoDArgT6xRVea2B9e19KcAgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/3e3483-1845-442d-a59a-dd72550d78ac/1/zQHNoDArgT6xRVea2B9e19KcAgk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/3e3483-1845-442d-a59a-dd72550d78ac/1/zQHNoDArgT6xRVea2B9e19KcAgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:2c:47:d4:61:74:3e:b7:3a:da:fb:98:a1:f7:bd:00:93:03:
bd:a0:16:1a:d2:3a:3c:b1:45:1e:53:5f:65:0f:45:ce:44:cc:
57:74:23:c4:b5:3e:45:29:3d:2a:4b:3a:2d:8f:3c:5b:e8:e4:
84:56:75:bf:b9:cc:71:3c:75:c0:5d:6a:63:9b:83:88:e8:74:
b3:f1:dc:8f:70:25:19:58:c7:79:95:09:a3:da:1d:3e:db:b1:
27:f2:f2:ce:77:6f:cd:19:86:30:c9:5a:0f:82:fc:6d:6f:fd:
d8:da:3b:65:60:49:58:33:70:c8:19:d4:56:74:fd:a0:30:f3:
cd:98:35:21:9e:be:e2:27:63:23:0d:45:f4:cc:5e:50:4b:b3:
ff:96:64:2a:fd:34:05:45:23:2e:9d:16:46:68:7b:54:c3:7c:
37:42:e3:96:7a:74:15:9d:c6:43:95:77:7d:58:af:8f:8e:18:
e8:f5:d2:a3:9c:ed:4b:94:99:2d:8e:5e:ff:b7:15:42:27:c4:
a1:0e:1a:66:78:53:1d:5f:94:99:c4:60:ce:dd:4f:5f:76:73:
4f:7c:8f:fa:d8:18:30:e4:73:4f:b2:87:10:9d:20:38:a2:5e:
9e:8c:5a:69:47:a8:1d:d2:09:3c:cb:c7:65:fd:a0:c6:5f:00:
10:05:97:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:09:46 2025 by rpki-client