Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/1d19ad-73f6-450b-b97c-2be25f9d5ed2/1/zSaUgromG4gAVgjsULe5CdPz_U4.mft
File: zSaUgromG4gAVgjsULe5CdPz_U4.mft (raw, json)
Hash identifier: 52/BA9AbsRSfcfj3iP8F3x1uvw9QnIn3W9fq7mfA/T0=
Subject key identifier: 5B:65:DF:19:D4:10:02:E2:44:EF:DB:0D:B5:DD:D2:70:A0:0E:6E:5F
Authority key identifier: CD:26:94:82:BA:26:1B:88:00:56:08:EC:50:B7:B9:09:D3:F3:FD:4E
Certificate issuer: /CN=cd269482ba261b88005608ec50b7b909d3f3fd4e
Certificate serial: 019A71135DC119F2EBFB8A9D01149CF95E95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zSaUgromG4gAVgjsULe5CdPz_U4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/1d19ad-73f6-450b-b97c-2be25f9d5ed2/1/zSaUgromG4gAVgjsULe5CdPz_U4.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 04:01:25 +0000
Manifest this update: Tue 11 Nov 2025 04:01:25 +0000
Manifest next update: Wed 12 Nov 2025 04:01:25 +0000
Files and hashes: 1: 4bVZoUiCbJaTBG7aA0p9xBgeM94.roa (hash: MzCfFVB6xbhIQC2ta/MEsIETvDrpIdsUhLGtVjRSeig=)
2: zSaUgromG4gAVgjsULe5CdPz_U4.crl (hash: 9PzmnUWkPg4/9YI4P+RxMI5WhrZxpZLWWCFr8DTJGOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/1d19ad-73f6-450b-b97c-2be25f9d5ed2/1/zSaUgromG4gAVgjsULe5CdPz_U4.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/1d19ad-73f6-450b-b97c-2be25f9d5ed2/1/zSaUgromG4gAVgjsULe5CdPz_U4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zSaUgromG4gAVgjsULe5CdPz_U4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:5d:c1:19:f2:eb:fb:8a:9d:01:14:9c:f9:5e:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd269482ba261b88005608ec50b7b909d3f3fd4e
Validity
Not Before: Nov 11 04:01:25 2025 GMT
Not After : Nov 12 04:01:25 2025 GMT
Subject: CN=5b65df19d41002e244efdb0db5ddd270a00e6e5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:bf:56:c0:87:b8:e9:c8:28:95:7e:32:54:16:
2c:26:f5:87:0a:ca:aa:bc:f5:04:da:b1:70:0c:96:
dc:63:3e:c0:06:ed:b4:da:17:f8:c4:5e:7c:97:bf:
fd:17:f4:75:66:70:cf:47:f1:ef:a5:34:30:8c:79:
fb:6c:73:a0:ef:b9:5a:ee:3e:df:de:ea:6e:df:f7:
8b:33:b4:d1:cb:b4:6a:45:db:2d:5a:fb:ee:da:b1:
de:d4:c8:14:07:a8:92:c5:82:ad:3b:1d:55:d8:f9:
76:16:6c:23:55:be:5c:e6:fe:ab:83:1c:74:08:27:
39:76:e2:ea:51:23:47:0d:09:ec:52:a7:05:6a:3b:
b7:3d:d5:b1:8c:a5:8f:c5:03:da:66:99:11:f6:26:
c3:99:c4:b1:59:e9:77:da:83:87:ff:cc:26:c0:dd:
4e:5a:4f:4b:53:2c:d1:1c:6f:ee:35:a6:07:09:5c:
ac:b4:b4:a3:e2:25:bf:a2:45:77:11:07:87:b8:7c:
40:2e:46:9a:5e:0a:5a:59:cf:c1:26:ed:b5:03:4d:
38:84:58:40:35:9a:48:b1:ee:58:7b:c4:e4:9f:fa:
6b:b4:1c:12:fa:f9:8a:5e:12:b0:a1:0d:ed:bd:32:
4b:8a:db:23:c8:f4:a4:55:12:c3:04:d3:42:d4:2c:
b0:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:65:DF:19:D4:10:02:E2:44:EF:DB:0D:B5:DD:D2:70:A0:0E:6E:5F
X509v3 Authority Key Identifier:
keyid:CD:26:94:82:BA:26:1B:88:00:56:08:EC:50:B7:B9:09:D3:F3:FD:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zSaUgromG4gAVgjsULe5CdPz_U4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1d19ad-73f6-450b-b97c-2be25f9d5ed2/1/zSaUgromG4gAVgjsULe5CdPz_U4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1d19ad-73f6-450b-b97c-2be25f9d5ed2/1/zSaUgromG4gAVgjsULe5CdPz_U4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:77:2f:7b:75:e2:ff:21:d4:3e:8f:be:aa:48:6e:1d:90:44:
20:03:55:a2:06:69:70:a7:55:7c:2c:f9:6b:42:b2:83:6c:d0:
50:0c:6b:07:05:e6:8d:4a:3d:29:c2:2b:10:01:b8:51:f5:f8:
e7:5b:ef:02:50:10:0f:56:9a:3f:b4:ab:c2:46:36:64:f9:21:
20:64:3e:0d:a3:b4:f5:75:c5:ad:da:68:2a:90:3b:c9:b5:65:
ca:b3:5a:a6:6d:86:48:ee:81:03:99:26:71:f1:78:da:d7:c3:
50:2f:c8:0a:bd:69:5e:a8:c1:ad:a6:46:ee:ba:aa:be:ab:3c:
28:7a:d8:08:94:72:4c:35:b4:b4:3d:bc:77:7e:7a:ae:7e:d0:
91:67:21:d8:3c:b6:5a:d5:cf:d7:6d:5d:4e:1d:89:04:85:ea:
48:a0:e7:45:6c:f5:21:d0:60:96:84:54:77:f6:11:2b:64:5d:
f0:09:e9:bb:cb:f4:10:93:d8:26:a5:4e:97:cc:ad:66:3b:07:
1f:3f:64:e6:64:b8:02:da:30:5d:ad:84:72:29:bb:0a:d6:30:
48:c1:92:39:df:c0:46:dc:eb:7f:f0:aa:08:18:f7:20:09:4e:
79:34:4e:a3:e1:a0:21:3f:ea:36:db:d0:ea:c9:18:08:05:77:
cf:23:3d:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:39:01 2025 by rpki-client