Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/zRJC5sfr2Coj-hoI85br5as0z2s.mft
File: zRJC5sfr2Coj-hoI85br5as0z2s.mft (raw, json)
Hash identifier: Ty5iDde/CzwS+e2a3nZDLgW8T8klzFdwhjjoMYBoM9o=
Subject key identifier: CE:C4:56:A9:6B:81:C0:C9:4E:64:53:1F:23:BF:12:F9:60:69:AF:AD
Authority key identifier: CD:12:42:E6:C7:EB:D8:2A:23:FA:1A:08:F3:96:EB:E5:AB:34:CF:6B
Certificate issuer: /CN=cd1242e6c7ebd82a23fa1a08f396ebe5ab34cf6b
Certificate serial: 019A277927BF64A243118C19BDFCD2C66AFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRJC5sfr2Coj-hoI85br5as0z2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/zRJC5sfr2Coj-hoI85br5as0z2s.mft
Manifest number: 16F8
Signing time: Mon 27 Oct 2025 21:00:42 +0000
Manifest this update: Mon 27 Oct 2025 21:00:42 +0000
Manifest next update: Tue 28 Oct 2025 21:00:42 +0000
Files and hashes: 1: 08D6A8hDDz8EmWz4TWfTzIZtuw4.roa (hash: c9bmK28UA0mGlnzCRW7yMDsTOGRfKW7u6iqtfGSyl+c=)
2: beEuyHtj6-YxYYEBP6CwFITtXCo.roa (hash: 15tHsK0ns4vomu3PpRO0w+CWAE5FrW5s/l3utsU9ZCI=)
3: zRJC5sfr2Coj-hoI85br5as0z2s.crl (hash: jPFrj6tPm1ct67Fl6+nEwcrQ1y9QK2PgRltrhuDZlDw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/zRJC5sfr2Coj-hoI85br5as0z2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/zRJC5sfr2Coj-hoI85br5as0z2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/zRJC5sfr2Coj-hoI85br5as0z2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 21:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:27:79:27:bf:64:a2:43:11:8c:19:bd:fc:d2:c6:6a:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd1242e6c7ebd82a23fa1a08f396ebe5ab34cf6b
Validity
Not Before: Oct 27 21:00:42 2025 GMT
Not After : Oct 28 21:00:42 2025 GMT
Subject: CN=cec456a96b81c0c94e64531f23bf12f96069afad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c7:b2:1b:39:77:9e:ff:97:7b:37:54:7f:c5:
d0:ce:a6:bd:4f:e7:6f:8a:31:cc:69:2a:e9:b1:be:
40:73:5a:cd:7b:bd:a9:8a:5a:ea:c2:d1:e0:32:02:
2a:6f:11:6f:1d:c7:ee:ab:be:c4:b7:d6:e3:5e:3e:
4a:56:ea:66:15:68:cf:67:74:16:80:47:40:56:d5:
d9:48:ba:26:c6:9d:45:c5:b7:ab:c0:84:8a:69:17:
fe:a1:7d:8c:6e:87:3d:4d:d3:ac:22:0b:6e:89:32:
11:38:cf:67:3d:92:7c:e2:81:5a:3f:56:56:03:8e:
db:bb:91:eb:30:e5:06:6a:2b:c6:6e:84:1d:31:24:
f2:4c:b7:18:4a:1e:b9:63:58:35:88:28:5a:37:3d:
0c:22:b0:f0:fa:3b:84:72:02:80:ca:f6:f1:14:68:
4c:ff:83:c4:2d:f0:91:28:38:4d:42:1a:c0:10:b2:
d0:57:ad:ae:37:99:3d:7d:1d:10:b6:ed:a2:5c:08:
6d:4d:52:62:49:9b:d2:55:12:0a:2f:bd:a1:5d:c9:
f7:a1:5d:28:41:dc:35:4f:dc:5c:f5:99:75:f1:d7:
88:3b:44:8f:78:ae:15:3f:16:30:82:ff:f0:e1:4f:
37:14:80:cd:b1:c5:76:14:cb:b6:9f:cf:58:1c:3d:
6f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:C4:56:A9:6B:81:C0:C9:4E:64:53:1F:23:BF:12:F9:60:69:AF:AD
X509v3 Authority Key Identifier:
keyid:CD:12:42:E6:C7:EB:D8:2A:23:FA:1A:08:F3:96:EB:E5:AB:34:CF:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRJC5sfr2Coj-hoI85br5as0z2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/zRJC5sfr2Coj-hoI85br5as0z2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/zRJC5sfr2Coj-hoI85br5as0z2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:34:e8:b6:58:d7:e2:19:8f:19:6b:db:09:b6:11:8b:99:5d:
30:fb:a1:1d:e8:02:ee:dd:65:63:2c:ff:e5:c8:99:84:20:45:
a6:26:9d:49:9c:7f:0e:8b:d5:c5:13:aa:b4:90:42:c8:40:a5:
60:ec:36:44:39:bc:96:03:cd:2d:bd:83:22:ce:ca:71:30:60:
29:3b:ec:5f:6f:d8:c4:81:23:9c:1b:05:94:0b:07:7e:91:b6:
74:b3:79:a6:21:54:f8:4d:0d:a0:77:cc:46:b2:17:6e:d1:30:
29:48:c1:8c:64:c2:f5:65:e6:57:da:25:67:89:74:7b:7a:88:
c5:3f:64:1c:1e:91:11:02:69:e9:d6:b1:1a:bd:ad:5b:78:48:
d9:14:5b:11:97:21:4c:34:fa:d7:c0:e4:6c:09:48:66:58:a3:
58:7b:be:44:57:7a:70:a6:5c:75:48:6e:3d:93:ac:6e:5b:bb:
70:ab:2a:3e:19:65:38:45:e6:02:7c:f9:f6:76:fa:6e:aa:18:
be:fc:03:fe:10:01:44:6f:86:82:af:70:d1:ae:ea:b6:39:9a:
8d:17:7e:eb:a8:ab:5b:06:fe:c7:48:4a:9a:65:e1:53:26:f7:
e6:8d:64:f8:74:28:94:ff:f1:5c:25:80:a9:f6:a1:f6:00:40:
e8:a0:e9:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 06:25:47 2025 by rpki-client