Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft
File: CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft (raw, json)
Hash identifier: ZcNCXXVbOkK2mLZZXj+uVmyXvP6gFWDRGLSkj9FUatc=
Subject key identifier: 54:45:22:F2:AB:74:93:1E:6B:27:32:5F:1F:C3:4E:A0:DC:DE:D4:13
Authority key identifier: 09:9D:A0:6B:80:FA:74:90:68:02:8B:59:7B:E3:E5:0E:8B:11:87:86
Certificate issuer: /CN=099da06b80fa749068028b597be3e50e8b118786
Certificate serial: 019A51F59A54071D2E9401C9081A23078DC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZ2ga4D6dJBoAotZe-PlDosRh4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft
Manifest number: 0529
Signing time: Wed 05 Nov 2025 03:00:41 +0000
Manifest this update: Wed 05 Nov 2025 03:00:41 +0000
Manifest next update: Thu 06 Nov 2025 03:00:41 +0000
Files and hashes: 1: CZ2ga4D6dJBoAotZe-PlDosRh4Y.crl (hash: YBVsi+IM3/0x490ABv74KYiZCL/FY3XSxk9+ZeVFw/k=)
2: ayUSDw8mdGoHelr_2bHuT_Ht97M.roa (hash: gvA+DDKSQOPFRf0cxBqKQel7xs/RAWw3rOxPxkz9/ZY=)
3: i3ThCtdNGW1cjUxQLhhdn5p0rJI.roa (hash: GXqzqfOOBrl4UZP/OkbdiBzFUWkoVhn5KODt99i+lAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/CZ2ga4D6dJBoAotZe-PlDosRh4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:9a:54:07:1d:2e:94:01:c9:08:1a:23:07:8d:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=099da06b80fa749068028b597be3e50e8b118786
Validity
Not Before: Nov 5 03:00:41 2025 GMT
Not After : Nov 6 03:00:41 2025 GMT
Subject: CN=544522f2ab74931e6b27325f1fc34ea0dcded413
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:14:1e:80:76:84:16:fc:f6:13:67:43:81:96:
01:32:c7:06:ef:b9:6d:15:b8:34:56:60:2e:8b:a0:
32:f2:d3:6c:06:80:d0:b8:34:14:97:21:69:e3:98:
fc:fd:05:47:61:2d:b8:64:43:7a:53:ae:e2:3e:0c:
a1:8f:17:f9:88:7f:b9:af:b2:2e:30:07:6d:d7:0d:
02:6d:d3:cf:81:f2:db:67:66:b1:3d:43:27:3b:10:
82:10:21:01:34:68:65:58:32:80:aa:d2:e4:96:c1:
78:82:c1:e7:6d:6e:23:7a:9c:1c:94:8d:38:da:53:
eb:0d:a3:41:2a:0d:5a:1e:8c:6f:d1:09:83:b1:2e:
2f:e0:b7:f8:e5:76:36:cb:46:c7:cc:e1:5e:db:cb:
aa:bd:2a:11:f6:d9:d6:e8:43:02:54:ba:4a:38:db:
c5:bc:7b:00:a0:13:d4:a5:9f:dc:d8:b9:34:e7:f4:
f2:76:f8:a8:6a:0d:bf:91:de:7c:84:27:fd:2b:4a:
fd:04:1e:d4:30:d4:cc:8c:40:ce:1c:3f:9c:72:f7:
13:0a:4a:79:b4:5e:d3:b7:69:c5:5a:f6:ea:08:c2:
c4:3c:de:dd:7a:58:26:d9:0e:d8:40:92:62:68:be:
40:19:37:5c:d1:3f:4f:a9:d1:62:e9:06:36:7c:fe:
4d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:45:22:F2:AB:74:93:1E:6B:27:32:5F:1F:C3:4E:A0:DC:DE:D4:13
X509v3 Authority Key Identifier:
keyid:09:9D:A0:6B:80:FA:74:90:68:02:8B:59:7B:E3:E5:0E:8B:11:87:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZ2ga4D6dJBoAotZe-PlDosRh4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:27:3f:20:8a:05:a5:f6:92:d1:c1:58:98:5f:13:bb:1f:1f:
bb:d7:5a:3a:de:fe:a2:5f:3b:78:14:bf:40:c6:e3:40:31:ee:
65:e0:3f:29:5d:73:56:dc:bb:dd:01:2d:a8:ab:4f:db:5a:33:
c8:40:06:24:cc:95:ac:43:21:45:b7:74:e7:93:7e:da:cb:80:
01:90:1d:11:d2:fc:a0:43:12:c4:4a:98:3d:a6:c7:4e:b7:08:
6f:d4:9b:76:02:19:cf:54:5b:d1:69:3b:34:74:93:e8:06:00:
4a:2e:dc:a6:53:54:5e:f6:92:48:8b:3a:28:3a:32:5d:a5:d2:
13:43:b9:52:bb:6d:64:36:3b:fe:c3:98:7e:a8:f7:83:f8:64:
c2:20:4e:6d:bb:b4:12:a2:c9:8d:4a:c4:09:4a:02:77:d6:70:
a4:c6:ec:8a:94:91:cd:c5:70:43:a3:7c:5f:be:a3:ff:f6:97:
80:5d:5b:5f:c6:f1:d3:a8:d6:27:94:5d:66:0d:8d:a5:6f:76:
07:dd:b7:1a:19:5f:84:20:46:fb:23:29:35:86:d0:31:f3:68:
ac:e5:e5:4a:b7:58:52:28:47:46:4c:a5:bc:75:b5:12:16:5b:
9a:f7:32:d2:ff:5d:e7:40:58:83:66:00:3b:d4:60:4c:18:ab:
cf:8a:a7:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:55:10 2025 by rpki-client