Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/a1449e-2adb-4b1a-b23c-bd6d8badcdc0/1/zWmPVbQJWbF4987Lwgw16cE3k0Q.mft
File: zWmPVbQJWbF4987Lwgw16cE3k0Q.mft (raw, json)
Hash identifier: saN0qSH3tbyoQki3/yyhB7HP3HKnFIo7uF2gNkA7a1M=
Subject key identifier: FD:EA:CF:67:92:3C:50:41:04:36:54:F7:ED:96:6D:40:9C:D7:6B:FD
Authority key identifier: CD:69:8F:55:B4:09:59:B1:78:F7:CE:CB:C2:0C:35:E9:C1:37:93:44
Certificate issuer: /CN=cd698f55b40959b178f7cecbc20c35e9c1379344
Certificate serial: 019A7149E1E52395799794C4A93E6EA9E965
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zWmPVbQJWbF4987Lwgw16cE3k0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/a1449e-2adb-4b1a-b23c-bd6d8badcdc0/1/zWmPVbQJWbF4987Lwgw16cE3k0Q.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 05:00:58 +0000
Manifest this update: Tue 11 Nov 2025 05:00:58 +0000
Manifest next update: Wed 12 Nov 2025 05:00:58 +0000
Files and hashes: 1: 4IRJfTOXaKsLO79AGo1JoJbZxnI.roa (hash: z5NYfWatjYuL33vBwldK4hifLGzdry9JPmtM091yFpE=)
2: zWmPVbQJWbF4987Lwgw16cE3k0Q.crl (hash: QK5c9Ehhh7beyaoapWW4zMOTqLoyc1konjueVZ9QARI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/a1449e-2adb-4b1a-b23c-bd6d8badcdc0/1/zWmPVbQJWbF4987Lwgw16cE3k0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/a1449e-2adb-4b1a-b23c-bd6d8badcdc0/1/zWmPVbQJWbF4987Lwgw16cE3k0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/zWmPVbQJWbF4987Lwgw16cE3k0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:e1:e5:23:95:79:97:94:c4:a9:3e:6e:a9:e9:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd698f55b40959b178f7cecbc20c35e9c1379344
Validity
Not Before: Nov 11 05:00:58 2025 GMT
Not After : Nov 12 05:00:58 2025 GMT
Subject: CN=fdeacf67923c5041043654f7ed966d409cd76bfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ab:92:38:b1:ce:0c:7b:78:a6:0f:00:c6:94:
e8:9b:da:22:f7:75:54:1d:3a:e5:ef:7c:7d:8a:0a:
f5:fc:4a:a8:0d:4f:4d:19:97:a1:59:48:3e:97:78:
9c:a0:5f:dc:ba:0a:cc:be:e5:c4:3c:7d:3b:c0:89:
6c:1a:2a:37:75:5c:8a:f4:2d:02:80:2a:f2:97:35:
5a:97:91:35:ba:cc:fe:95:6f:1b:71:36:14:1b:13:
eb:a3:f0:87:0a:71:7a:4f:25:b1:d4:59:3a:4e:bd:
29:7f:19:70:26:01:7c:38:ec:f7:35:12:ae:8f:74:
b5:f8:b8:c5:1c:16:8f:6d:e4:06:bd:5a:63:7c:a7:
72:be:66:35:e3:0f:5b:4a:ec:30:ee:c8:70:1b:a2:
8e:5e:b1:06:8b:c5:c7:90:93:23:6f:90:fe:03:3b:
2a:c3:13:c9:c9:7c:2c:c9:5a:19:c9:f8:92:d6:d4:
91:a0:e1:1c:5f:8d:c2:03:c3:0b:d9:11:67:36:2b:
76:dd:7f:d8:66:e5:fa:cb:9c:b0:69:ad:29:08:ae:
8b:74:56:c1:71:dc:37:e5:6a:a4:d3:ad:08:a8:36:
93:c1:06:9b:9b:98:da:8d:44:51:89:8b:96:e3:c4:
d8:d8:e9:bf:b0:21:bd:04:31:fb:b7:55:01:38:0e:
35:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:EA:CF:67:92:3C:50:41:04:36:54:F7:ED:96:6D:40:9C:D7:6B:FD
X509v3 Authority Key Identifier:
keyid:CD:69:8F:55:B4:09:59:B1:78:F7:CE:CB:C2:0C:35:E9:C1:37:93:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWmPVbQJWbF4987Lwgw16cE3k0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a1449e-2adb-4b1a-b23c-bd6d8badcdc0/1/zWmPVbQJWbF4987Lwgw16cE3k0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a1449e-2adb-4b1a-b23c-bd6d8badcdc0/1/zWmPVbQJWbF4987Lwgw16cE3k0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:9f:42:62:39:e9:2f:38:37:05:fb:8c:fc:ba:7a:9d:4e:7b:
ae:92:67:e1:5b:7c:64:96:f9:20:5e:b1:2c:b7:58:db:e4:ec:
fa:e5:6b:bd:f7:f3:12:28:3a:28:35:90:e6:8b:52:4c:94:cc:
42:8b:33:ca:7b:d4:0a:53:67:e3:76:da:22:a1:d5:dc:d9:38:
93:66:ab:5d:84:3c:01:7a:07:27:5b:97:ec:42:76:b4:84:20:
a8:a1:29:e2:7f:47:d8:22:82:68:e0:49:48:2a:3f:27:67:f7:
74:c5:56:b9:83:64:9b:f6:99:7c:bd:08:d4:ec:89:1a:c7:4b:
f3:01:17:b3:2e:7c:e1:72:e1:09:3b:a5:02:fb:49:49:1d:2d:
12:65:30:89:ce:2b:ed:74:de:b3:8f:e6:86:48:84:03:3b:01:
c6:f0:ec:27:85:d1:28:90:b7:3f:f6:2b:b4:a6:db:b5:d8:c1:
c0:47:22:85:2f:27:99:a3:f4:ae:6a:63:3f:b6:f0:8a:b4:95:
08:d6:db:2a:4a:64:4e:e4:f8:a3:37:f3:fc:78:11:62:c2:28:
74:09:a9:42:64:34:9d:74:7a:63:be:07:ac:17:e4:7e:05:75:
c0:09:52:55:11:2b:76:9c:e7:b1:22:bf:62:e5:79:aa:34:bb:
ea:27:70:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:39:14 2025 by rpki-client