Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.mft
File: z59vv-AKCFkre7Dt_cIAK_xytXg.mft (raw, json)
Hash identifier: 1OwtCDiC7figvZ2HkmGd/2E8Nen8D0Cq9hWzhOMyMZI=
Subject key identifier: EE:5D:32:60:EA:7E:84:6C:BE:59:48:F4:9B:5E:30:F9:30:3A:E8:BB
Authority key identifier: CF:9F:6F:BF:E0:0A:08:59:2B:7B:B0:ED:FD:C2:00:2B:FC:72:B5:78
Certificate issuer: /CN=cf9f6fbfe00a08592b7bb0edfdc2002bfc72b578
Certificate serial: 019A725C63A406A74AF8FC3D701D191C00C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z59vv-AKCFkre7Dt_cIAK_xytXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.mft
Manifest number: 02FC
Signing time: Tue 11 Nov 2025 10:00:48 +0000
Manifest this update: Tue 11 Nov 2025 10:00:48 +0000
Manifest next update: Wed 12 Nov 2025 10:00:48 +0000
Files and hashes: 1: 8UP-HnXT6ZiBdaOYlDB66hT_Z2k.roa (hash: cDjhHlc7QRM8+yZv2BHSK6rJJPG1sbZBDn/UhAV5syE=)
2: z59vv-AKCFkre7Dt_cIAK_xytXg.crl (hash: Tq5agHgmuH0qXOkZIbNhKz0SNOwQ0aSmvkXc+xbwgsA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/z59vv-AKCFkre7Dt_cIAK_xytXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:63:a4:06:a7:4a:f8:fc:3d:70:1d:19:1c:00:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf9f6fbfe00a08592b7bb0edfdc2002bfc72b578
Validity
Not Before: Nov 11 10:00:48 2025 GMT
Not After : Nov 12 10:00:48 2025 GMT
Subject: CN=ee5d3260ea7e846cbe5948f49b5e30f9303ae8bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:05:22:9f:b1:89:78:df:7c:b1:45:5d:26:dc:
0d:cc:c1:03:d3:a7:ec:fe:74:58:a6:b6:c1:9a:7a:
c2:69:d7:61:ca:d6:58:d8:74:05:41:be:1d:5c:b6:
39:b0:54:95:70:1a:8d:32:8c:de:78:b7:fa:4e:bf:
08:04:98:48:12:9a:3e:ec:89:86:9a:ca:92:a2:72:
30:c4:9c:11:1b:f8:cc:7c:2a:79:2b:b0:86:86:fc:
e1:ba:5c:8f:d0:9d:8e:53:dc:d2:4b:65:a4:8c:74:
16:12:3c:f9:83:cf:45:71:5a:6c:98:3e:85:f6:76:
4f:18:8e:94:e5:a5:86:de:4f:6b:51:4c:94:53:d3:
2e:97:ab:bf:61:40:f7:e2:6f:dd:1e:da:47:ae:9e:
96:16:b5:d1:bc:1a:16:8c:e6:2b:b1:29:53:70:0b:
a6:73:5e:16:d6:a0:11:33:07:29:11:bd:7b:c9:32:
a2:33:25:80:a3:4a:46:68:4c:3a:2a:5e:d6:d7:3a:
6a:1f:a8:3b:0d:b7:4f:01:ec:9e:94:b8:a1:35:37:
18:9c:f4:78:66:02:84:1a:c9:54:08:3a:68:45:04:
9d:ab:21:cb:5f:fb:ed:fa:76:b5:08:f3:ef:c0:be:
4a:52:ff:e2:ae:ce:2a:ed:4d:f4:d0:2b:75:27:68:
b5:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:5D:32:60:EA:7E:84:6C:BE:59:48:F4:9B:5E:30:F9:30:3A:E8:BB
X509v3 Authority Key Identifier:
keyid:CF:9F:6F:BF:E0:0A:08:59:2B:7B:B0:ED:FD:C2:00:2B:FC:72:B5:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z59vv-AKCFkre7Dt_cIAK_xytXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:d6:e8:e2:73:1d:5a:f4:ad:24:41:8e:8d:ee:25:23:0c:d4:
57:3c:83:37:fc:3e:e6:fc:55:96:86:af:4d:55:63:e8:4a:5d:
66:d6:df:f4:d7:ab:5d:0d:dc:1e:72:90:bb:b6:4d:ca:af:b9:
eb:a8:01:02:e3:ee:7d:f4:45:a2:f9:a3:ed:ae:29:a8:c5:e8:
03:2d:a8:64:f9:37:3f:b0:3a:7e:4d:ff:e8:a4:67:7a:ec:6b:
6c:78:b8:21:56:0d:dc:76:88:8e:d7:f6:37:da:32:94:1d:f7:
cc:1d:b2:04:6f:50:41:88:e4:90:ea:12:e4:ec:61:e8:50:a9:
23:0c:1b:80:2f:e0:78:be:bf:2e:b9:b9:99:9b:bc:f9:54:f3:
70:f3:9f:6e:11:fc:78:5e:ea:fd:3c:2d:16:84:75:aa:bb:09:
6d:8f:cf:9a:c2:56:17:dd:e4:e4:d9:af:a8:68:12:3c:61:d7:
3f:02:d0:e2:c9:7f:54:99:12:9b:0f:d5:ae:a2:91:39:cd:87:
8a:4a:ca:4c:c0:c4:5b:b7:f4:9d:2a:59:bd:68:26:e8:cb:58:
fd:8d:10:b9:e8:9b:e6:6b:92:ba:e7:38:c7:b6:37:bd:8e:db:
07:37:d7:35:82:f0:d2:4e:51:9d:37:b9:41:37:70:97:1f:33:
cf:73:b5:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:31:18 2025 by rpki-client