Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.mft
File: zYa4ziIkgqFPmxNGjOV-mZJoSWE.mft (raw, json)
Hash identifier: fYQK6620nj2akeyZCcTCQHBl/k77sFbdJiThVijznKI=
Subject key identifier: 1B:39:42:F7:36:BD:D0:95:94:75:98:CB:E3:D8:4E:02:6D:78:ED:DC
Authority key identifier: CD:86:B8:CE:22:24:82:A1:4F:9B:13:46:8C:E5:7E:99:92:68:49:61
Certificate issuer: /CN=cd86b8ce222482a14f9b13468ce57e9992684961
Certificate serial: 019A232E84D2A79FBCF3EF1766A63E5935D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zYa4ziIkgqFPmxNGjOV-mZJoSWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.mft
Manifest number: 06CB
Signing time: Mon 27 Oct 2025 01:00:42 +0000
Manifest this update: Mon 27 Oct 2025 01:00:42 +0000
Manifest next update: Tue 28 Oct 2025 01:00:42 +0000
Files and hashes: 1: DQHOKV8IKLhzD_DKbK2yKJLy3qI.roa (hash: PB4sy0lCqmdf8gfZUrxsVqDoVfWeVXqM8PmI2EwyuMw=)
2: zYa4ziIkgqFPmxNGjOV-mZJoSWE.crl (hash: P1/2J67lJ/Xo2I2QBp/gIpNFbFkeu9ITIWwOwAQqgtY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zYa4ziIkgqFPmxNGjOV-mZJoSWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:2e:84:d2:a7:9f:bc:f3:ef:17:66:a6:3e:59:35:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd86b8ce222482a14f9b13468ce57e9992684961
Validity
Not Before: Oct 27 01:00:42 2025 GMT
Not After : Oct 28 01:00:42 2025 GMT
Subject: CN=1b3942f736bdd095947598cbe3d84e026d78eddc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:dd:4a:e2:ef:6c:d4:4e:8b:65:8d:2a:47:ee:
23:01:46:b4:9a:b3:95:cb:52:73:bd:1c:17:be:91:
2a:bb:ec:d0:d9:ed:e8:4d:de:e4:64:86:30:c4:35:
0f:4d:e5:a3:0c:ed:a8:b2:d4:81:5a:18:e2:d7:e9:
bd:8c:be:47:ac:07:d2:7a:66:bf:d5:4d:0a:37:8f:
be:e5:f0:be:e6:2e:38:66:da:a3:47:48:28:8a:4f:
a9:ac:e6:06:74:41:1a:e7:2c:5d:11:27:19:7f:a9:
ca:a2:58:91:ea:df:05:73:70:43:99:62:e9:32:96:
7b:44:95:ac:a0:81:91:bd:78:28:b4:63:7e:b2:c4:
ff:a4:5d:ba:65:e0:bc:27:9d:6d:53:37:fd:79:da:
ab:ea:08:ff:5e:4b:1e:b7:bf:a1:64:70:2a:b8:0a:
25:1f:b7:c7:ab:2c:8d:4a:cb:74:ed:b3:ed:40:80:
67:c4:cd:ed:eb:6c:80:3b:bb:03:44:ce:e8:93:7e:
59:51:b9:de:1d:df:c4:0e:07:2a:e1:0f:ec:58:ee:
d9:d0:b9:4f:6f:8a:24:65:b6:af:c9:de:22:59:e0:
52:5e:ea:3a:43:ad:b0:35:18:a0:c3:53:18:b7:e5:
50:c4:96:0a:05:aa:e4:38:16:16:f5:31:82:4b:ea:
26:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:39:42:F7:36:BD:D0:95:94:75:98:CB:E3:D8:4E:02:6D:78:ED:DC
X509v3 Authority Key Identifier:
keyid:CD:86:B8:CE:22:24:82:A1:4F:9B:13:46:8C:E5:7E:99:92:68:49:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zYa4ziIkgqFPmxNGjOV-mZJoSWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:db:45:39:bc:dc:f7:cf:a3:e7:5f:d1:4b:9c:0b:45:28:85:
a3:4b:4f:6f:ef:68:1e:4a:40:d4:28:64:6d:10:dc:ce:72:52:
a7:48:ea:ac:4f:a6:a1:6f:89:0a:be:0d:4b:6c:cb:c9:89:0b:
3b:ab:65:9b:49:6f:18:6f:e2:29:e3:05:17:3a:57:48:e2:e4:
cb:9b:90:18:4f:ef:df:11:b7:9a:61:43:e2:2f:ae:c8:77:45:
b0:ff:d3:9a:c6:54:d7:41:d3:c4:c9:8b:3f:92:8e:44:aa:d5:
e5:05:f5:be:5b:93:37:1a:b3:b2:03:c1:10:29:a3:06:af:41:
f4:a3:45:68:59:33:af:71:25:c8:64:99:a6:67:62:32:58:93:
9c:8c:ca:56:63:dc:87:b6:a3:1c:5b:3c:f1:d6:ee:64:4e:7d:
06:03:64:f8:b3:33:b9:18:b0:b6:f1:52:b5:88:f7:84:d3:d0:
14:fc:95:7d:0c:c2:a1:6f:2d:1c:63:5a:1b:c9:26:a6:14:e9:
f2:de:ef:76:dc:c8:d7:99:21:73:b2:03:15:cd:af:ff:ea:9c:
7e:71:74:b6:6d:22:cb:52:88:3a:aa:5e:32:e9:21:6d:c2:c6:
8e:62:98:3b:1d:8b:b6:13:0b:7b:78:ae:28:4c:14:09:cf:90:
90:1d:a9:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:01:15 2025 by rpki-client