Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.mft
File: zPqIwisefFLecaN2Q96jw_zdSVQ.mft (raw, json)
Hash identifier: /TMV20wA3hbAc/TcKLTe9GaeckWfNuNGpsCvhHFIxp4=
Subject key identifier: 92:0F:73:B8:C7:16:86:1B:2E:52:14:7C:5D:44:4D:F9:1A:4A:BE:C7
Authority key identifier: CC:FA:88:C2:2B:1E:7C:52:DE:71:A3:76:43:DE:A3:C3:FC:DD:49:54
Certificate issuer: /CN=ccfa88c22b1e7c52de71a37643dea3c3fcdd4954
Certificate serial: 019A24AF1BAB76C7E3EBA7776183CC7E5BBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zPqIwisefFLecaN2Q96jw_zdSVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.mft
Manifest number: 1689
Signing time: Mon 27 Oct 2025 08:00:46 +0000
Manifest this update: Mon 27 Oct 2025 08:00:46 +0000
Manifest next update: Tue 28 Oct 2025 08:00:46 +0000
Files and hashes: 1: 45oepcPp24ddD7U9F9fgcfRE2_A.roa (hash: JFFqkItzCIGw3eiTO4eyZ8lxk2ns3Bweomn6UBCbaB0=)
2: 6NfPgvm2R-DEhD59RilUaEstXMs.roa (hash: nHYetpjWCpzfXvmA5NqKKNkZO4+XknrY7xhjpxJgzio=)
3: zPqIwisefFLecaN2Q96jw_zdSVQ.crl (hash: sn6n9GOy56BIJ5cbft/3QeZrhsXejJpocF23gRiynn4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/zPqIwisefFLecaN2Q96jw_zdSVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:af:1b:ab:76:c7:e3:eb:a7:77:61:83:cc:7e:5b:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccfa88c22b1e7c52de71a37643dea3c3fcdd4954
Validity
Not Before: Oct 27 08:00:46 2025 GMT
Not After : Oct 28 08:00:46 2025 GMT
Subject: CN=920f73b8c716861b2e52147c5d444df91a4abec7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:87:0d:54:38:d4:79:23:df:d0:d8:02:6d:4a:
aa:d2:f9:3f:40:57:d1:44:e1:24:8c:69:be:94:c5:
c2:07:6b:9b:62:9f:f6:6e:43:a8:b7:cf:9b:8a:df:
14:59:b9:e9:28:85:37:d0:31:39:fa:f6:8c:ab:81:
7e:87:cb:b6:f1:4b:63:ea:a9:c7:1d:aa:85:b1:f2:
0e:1d:eb:a1:bf:1c:9e:75:07:32:cd:96:39:d3:4a:
04:cc:6c:c7:57:77:42:60:30:2d:ab:5d:ae:df:86:
4f:5a:2e:bd:fa:30:39:5c:06:28:1a:0f:08:5f:a5:
f0:43:58:bd:53:db:b7:04:13:01:5e:bb:fa:32:64:
69:96:12:9c:69:5a:97:9f:97:30:3e:f2:97:b5:d7:
b4:07:08:a0:0b:79:1f:fd:e7:8d:b1:1e:99:c1:40:
ba:d9:54:11:96:02:af:74:15:e0:2c:17:ba:9e:ba:
f3:2e:da:b5:83:a1:5f:37:9d:55:c0:f9:08:7c:47:
10:94:32:c3:8b:45:e2:97:fe:ed:f0:35:85:24:34:
69:15:c7:ea:4b:c7:ed:19:15:7a:9c:43:f3:60:38:
5c:22:f5:fa:94:e5:28:20:23:eb:11:88:30:e9:5e:
8c:e4:10:8f:7d:93:04:7e:dc:2c:a6:b7:02:f4:e0:
53:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:0F:73:B8:C7:16:86:1B:2E:52:14:7C:5D:44:4D:F9:1A:4A:BE:C7
X509v3 Authority Key Identifier:
keyid:CC:FA:88:C2:2B:1E:7C:52:DE:71:A3:76:43:DE:A3:C3:FC:DD:49:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zPqIwisefFLecaN2Q96jw_zdSVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:e3:db:c4:66:35:da:f1:fd:37:81:c4:90:7f:81:84:4d:06:
ac:ae:ba:19:5f:17:52:08:f9:1a:84:2e:2b:24:7f:cc:2d:b3:
8a:b9:91:ae:e5:90:ef:f8:af:a0:8d:e5:ca:52:39:72:cc:47:
a3:be:47:9f:63:0c:2d:24:ec:c9:aa:0a:60:39:44:72:fd:b3:
ad:01:97:3b:32:a6:f9:24:c3:57:08:4c:34:f9:ae:76:b8:69:
1e:48:cb:ab:55:af:a9:5a:8e:6d:92:18:66:77:36:fa:ea:90:
c6:9e:24:d0:84:4e:0c:3a:65:21:c0:87:8b:0b:aa:ef:16:86:
90:79:93:85:9f:e9:62:9f:d3:cf:f5:43:a7:5b:c3:34:65:fa:
1a:52:30:78:f8:c5:72:d7:08:28:89:be:d1:43:5d:2f:5d:ff:
c0:c5:4a:e2:63:75:bc:de:0e:74:ec:0a:97:a3:0b:d9:ba:49:
54:a6:41:a2:d4:a5:22:05:60:ba:88:28:dc:78:f3:00:a1:4d:
f2:c7:13:d2:d7:4f:e5:32:fd:5b:66:96:fb:11:d0:b0:3e:4a:
84:d9:2d:70:40:31:94:16:3c:54:ee:aa:34:b9:a7:78:3a:b5:
89:6d:39:74:bf:1d:e7:34:1f:6d:41:ea:45:64:77:d7:a5:ad:
31:a0:22:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:04:31 2025 by rpki-client