Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.mft
File: z1VnEiqIypiJoXmLbJQtzAy8dTs.mft (raw, json)
Hash identifier: aCkrlPSrtE0WwCPyZRIMvd1KPVxlpYlWafhz39CwuGo=
Subject key identifier: E5:89:57:BD:8C:3A:56:C0:46:4A:A1:DE:4C:41:8B:E1:18:D8:E4:84
Authority key identifier: CF:55:67:12:2A:88:CA:98:89:A1:79:8B:6C:94:2D:CC:0C:BC:75:3B
Certificate issuer: /CN=cf5567122a88ca9889a1798b6c942dcc0cbc753b
Certificate serial: 019A1F88F88494A3487E5ED795E8C9E18164
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z1VnEiqIypiJoXmLbJQtzAy8dTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.mft
Manifest number: 173E
Signing time: Sun 26 Oct 2025 08:01:01 +0000
Manifest this update: Sun 26 Oct 2025 08:01:01 +0000
Manifest next update: Mon 27 Oct 2025 08:01:01 +0000
Files and hashes: 1: YBpkKYl7hf_TRzIQKlqwjzGdNXQ.roa (hash: h+D2pJlFj/niq8kSK086wec9+0ZFE38ysN0VslreY9A=)
2: ZCpcz07bfoxqZmLpOfiQ2xZolXY.roa (hash: 6dY5wDKmlwtQaOeXt2ULBB4pGFCZsK4sBgWWnMb/pjg=)
3: z1VnEiqIypiJoXmLbJQtzAy8dTs.crl (hash: k/ZHr/92fUHtch7qjSr3zJDb0sMcigKDezbsMMdR3hQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/z1VnEiqIypiJoXmLbJQtzAy8dTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 08:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1f:88:f8:84:94:a3:48:7e:5e:d7:95:e8:c9:e1:81:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf5567122a88ca9889a1798b6c942dcc0cbc753b
Validity
Not Before: Oct 26 08:01:01 2025 GMT
Not After : Oct 27 08:01:01 2025 GMT
Subject: CN=e58957bd8c3a56c0464aa1de4c418be118d8e484
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c2:cf:0b:56:c0:82:61:71:50:d1:a3:9e:b7:
7d:f7:15:17:ef:bc:6e:45:73:ce:4a:94:62:d6:d2:
d0:0b:be:c2:91:a9:7e:88:b8:ac:0c:4c:8a:98:f0:
b4:e4:33:4b:96:c2:e6:a3:98:4c:b3:3c:7d:e3:d9:
69:7b:26:25:81:21:34:41:05:40:2a:ea:b8:22:39:
22:aa:fe:2a:0c:6a:a2:02:e4:e3:a4:06:0c:9d:0b:
a9:3f:34:4a:9b:8a:da:88:6a:2f:2a:f2:c4:15:d6:
c8:51:de:06:2e:be:f3:41:50:81:21:24:83:ca:cb:
04:6f:1a:eb:18:5b:35:c2:c1:b7:ce:c1:cd:04:77:
a4:ff:c5:96:4b:54:aa:84:16:7e:a8:cc:a6:d7:12:
51:c0:da:cf:49:5b:af:6b:30:4a:60:bd:a1:6f:28:
13:57:7e:df:a2:29:0c:29:25:a5:25:ab:21:37:c8:
41:57:9e:74:1b:72:a9:66:32:4c:e3:45:17:f1:48:
ea:04:58:eb:ca:d7:50:09:d2:39:a2:84:d7:43:15:
d9:81:24:20:33:33:f6:10:b1:72:5d:e8:76:e6:50:
33:26:ec:b2:4d:20:98:a5:6f:57:3e:b8:dc:06:36:
48:18:01:63:64:7e:2b:d8:33:25:15:df:80:f4:47:
de:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:89:57:BD:8C:3A:56:C0:46:4A:A1:DE:4C:41:8B:E1:18:D8:E4:84
X509v3 Authority Key Identifier:
keyid:CF:55:67:12:2A:88:CA:98:89:A1:79:8B:6C:94:2D:CC:0C:BC:75:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z1VnEiqIypiJoXmLbJQtzAy8dTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:14:60:6e:30:e4:64:a7:ac:c7:fb:44:20:da:e7:31:f4:d7:
7a:c2:d0:be:36:d8:d1:f9:4a:36:4e:b7:1a:c1:65:d8:90:42:
78:4a:8d:91:b0:64:cf:e8:bf:a5:31:64:59:b7:e2:41:56:d1:
15:27:a1:6a:5d:a1:15:c0:52:44:d7:88:0f:e8:06:ed:71:57:
6e:3a:6c:e2:30:d5:fa:7f:ef:80:5e:76:7d:f4:a7:11:ea:9e:
46:b1:9d:a3:b9:57:06:c0:47:1f:ff:e1:03:4a:70:89:65:8d:
d0:07:08:e3:bf:f1:75:ec:39:84:88:1c:c5:c6:0a:ee:16:b5:
33:1f:42:27:a9:c3:ed:c4:45:e4:bc:9f:7d:ef:84:ba:1b:b5:
ea:c4:3e:dd:f9:e5:a4:7d:8e:1f:2a:a2:a9:71:00:0a:bb:88:
97:1b:68:19:0f:48:38:c9:2e:fa:12:c4:12:d6:bf:84:21:1c:
7d:22:53:6d:8f:25:52:10:0d:29:9b:2f:c3:0a:a9:49:14:89:
4c:b0:f4:7c:52:29:5f:da:ef:e1:ec:e0:6d:e3:7e:18:d7:83:
4f:9e:c5:30:5f:85:97:fe:cb:dc:a2:4f:dc:6e:e8:88:70:df:
91:15:46:02:b9:5e:e2:32:e2:86:af:5c:ff:6b:1d:b2:20:5a:
02:66:6d:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 17:07:31 2025 by rpki-client