Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/2fe112-d63e-40ce-a8bc-f3f7bd31a0fe/1/zIHVTcD9FqySU0uaeA4mdksvj3s.mft
File: zIHVTcD9FqySU0uaeA4mdksvj3s.mft (raw, json)
Hash identifier: uxwBfWFpGWdDcHNP2w2VmSnGhiXM3wpnXANB+j0VWcA=
Subject key identifier: D4:BC:05:86:48:CD:89:09:26:43:7C:57:54:67:01:7B:A6:66:4A:09
Authority key identifier: CC:81:D5:4D:C0:FD:16:AC:92:53:4B:9A:78:0E:26:76:4B:2F:8F:7B
Certificate issuer: /CN=cc81d54dc0fd16ac92534b9a780e26764b2f8f7b
Certificate serial: 019A71B941463722797126EB05948247AFF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zIHVTcD9FqySU0uaeA4mdksvj3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/2fe112-d63e-40ce-a8bc-f3f7bd31a0fe/1/zIHVTcD9FqySU0uaeA4mdksvj3s.mft
Manifest number: 111A
Signing time: Tue 11 Nov 2025 07:02:37 +0000
Manifest this update: Tue 11 Nov 2025 07:02:37 +0000
Manifest next update: Wed 12 Nov 2025 07:02:37 +0000
Files and hashes: 1: zIHVTcD9FqySU0uaeA4mdksvj3s.crl (hash: +v4mdST1QdoC3JwHqfyh3Z6ib/Ra5oB/wXv6fEhQLzg=)
2: zc4Ly4ZSumRQTJBfuAeYEW7TEYc.roa (hash: EgP68fSUBBXlJuUGr4bTlwk3uiBoJBQFQ6/v7VJHcgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/2fe112-d63e-40ce-a8bc-f3f7bd31a0fe/1/zIHVTcD9FqySU0uaeA4mdksvj3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/2fe112-d63e-40ce-a8bc-f3f7bd31a0fe/1/zIHVTcD9FqySU0uaeA4mdksvj3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/zIHVTcD9FqySU0uaeA4mdksvj3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:41:46:37:22:79:71:26:eb:05:94:82:47:af:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc81d54dc0fd16ac92534b9a780e26764b2f8f7b
Validity
Not Before: Nov 11 07:02:37 2025 GMT
Not After : Nov 12 07:02:37 2025 GMT
Subject: CN=d4bc058648cd890926437c575467017ba6664a09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:97:00:0b:51:0d:3d:af:23:b4:d2:a6:09:6d:
e3:35:e1:32:e8:44:97:76:44:67:b0:3c:21:0f:66:
43:01:3d:6f:ae:7f:5f:d0:d7:37:81:13:7c:11:de:
4e:59:bc:82:8f:3b:c2:42:fc:ea:42:2e:26:21:8e:
32:36:9f:54:ff:5d:63:ea:c8:4d:33:41:df:86:33:
cc:bb:a1:06:1d:d2:0a:5d:bf:9a:a6:66:11:1a:d7:
dd:0e:d6:c1:ff:66:3c:fa:78:b9:e1:58:18:bf:f1:
ca:2a:1d:5d:6a:19:0c:0e:46:23:92:90:b1:5c:37:
ff:8d:1c:65:eb:7b:4c:a7:ed:3d:ae:3f:7a:42:b6:
7f:bf:b9:59:69:9c:96:d0:a7:3d:14:a3:13:83:c0:
cf:5d:d0:a2:ec:a9:f0:24:9e:39:d3:63:bc:29:ca:
af:65:c5:1f:8d:5e:4b:6c:69:6d:58:99:33:34:73:
63:3b:67:46:5e:24:4f:9f:2b:be:4c:5e:f7:a1:c2:
dc:2c:d2:75:5b:b3:89:06:62:91:12:74:ea:32:93:
ee:67:5a:5e:7b:8d:f1:82:d4:0d:98:42:e6:c7:87:
1e:55:d0:c9:8c:35:3d:44:4d:23:a7:d7:ff:7b:81:
90:38:7a:23:ac:dc:76:50:f9:2e:a9:6f:a0:e0:da:
e2:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:BC:05:86:48:CD:89:09:26:43:7C:57:54:67:01:7B:A6:66:4A:09
X509v3 Authority Key Identifier:
keyid:CC:81:D5:4D:C0:FD:16:AC:92:53:4B:9A:78:0E:26:76:4B:2F:8F:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zIHVTcD9FqySU0uaeA4mdksvj3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2fe112-d63e-40ce-a8bc-f3f7bd31a0fe/1/zIHVTcD9FqySU0uaeA4mdksvj3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2fe112-d63e-40ce-a8bc-f3f7bd31a0fe/1/zIHVTcD9FqySU0uaeA4mdksvj3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:c5:51:be:3b:0d:24:79:94:48:98:53:ff:bd:e6:36:1f:11:
67:1a:d9:e3:29:99:e6:ff:f4:a4:ce:e6:b4:86:7e:90:b4:7d:
45:a7:86:af:58:76:60:7f:d0:3b:a3:be:e6:98:13:bd:b9:6f:
8e:69:a7:cd:cf:fb:df:47:c9:10:93:f2:43:cb:5b:dc:c1:d3:
f9:a4:7d:4a:76:34:20:1e:89:bb:29:87:8c:36:6f:fe:46:6e:
27:c8:f9:55:65:8c:d6:0e:61:44:7b:2e:e4:8f:05:40:20:db:
aa:80:04:e0:53:5a:6b:35:8e:3e:88:01:2a:b1:fe:81:99:8c:
0a:ed:e4:a4:aa:c0:30:96:ac:fc:af:5d:51:91:29:df:45:f3:
67:1f:e7:ff:cc:c9:b0:4f:49:69:63:35:c6:0b:92:15:75:7f:
3d:73:c9:c7:75:a1:05:c9:92:99:d3:e4:76:6b:25:22:e7:3c:
b9:34:93:76:41:bb:f8:e2:35:a5:0d:6a:58:91:2a:5f:c7:b1:
0d:6e:ad:f9:45:c0:74:bf:7f:e4:0a:91:8f:0c:6c:53:6c:46:
0a:ee:f9:7e:c9:7a:f2:c6:a4:48:d3:95:75:41:dc:d8:ef:b7:
b1:55:82:c0:0d:8b:80:0d:89:7a:6e:14:78:de:6f:47:5c:f0:
9c:68:b3:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:32 2025 by rpki-client