Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/zdtvEAMOJ2-DFidvQLPUpBhNlN0.mft
File: zdtvEAMOJ2-DFidvQLPUpBhNlN0.mft (raw, json)
Hash identifier: S3cidfjWPvmtUdsnzg/8N45sxQzd5wZJBCqM+wTHOvI=
Subject key identifier: 56:67:6B:91:C9:87:A9:1D:CC:95:37:6A:22:24:24:44:90:B5:40:41
Authority key identifier: CD:DB:6F:10:03:0E:27:6F:83:16:27:6F:40:B3:D4:A4:18:4D:94:DD
Certificate issuer: /CN=cddb6f10030e276f8316276f40b3d4a4184d94dd
Certificate serial: 019A4F62A66A211A0808EB249CD1954FF05E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zdtvEAMOJ2-DFidvQLPUpBhNlN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/zdtvEAMOJ2-DFidvQLPUpBhNlN0.mft
Manifest number: 0E9E
Signing time: Tue 04 Nov 2025 15:00:56 +0000
Manifest this update: Tue 04 Nov 2025 15:00:56 +0000
Manifest next update: Wed 05 Nov 2025 15:00:56 +0000
Files and hashes: 1: TvLjh2HZ_d_rU4Q7CUAOZ93ZHYk.roa (hash: UVHQPQPEMrt8FraIptsGKJQLRzbjMltNPf+IrL/aqn4=)
2: _51jX_RgZUWiVEK-S_q11tdiAsw.roa (hash: ojYxEEbJ9SvKIYoya6or2Wh9tzHv7tWRka6iaB4zigM=)
3: bvBCOOZR_53uuydhAIJbHOE_y50.roa (hash: O8HiOtyZpJTxAkEZvvlqiB0vlYICj10yBc68YG6rua0=)
4: zdtvEAMOJ2-DFidvQLPUpBhNlN0.crl (hash: IG085K0eH+eF3rjEmMJ81B5cXYltAsVf0h2vwAdY1VI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/zdtvEAMOJ2-DFidvQLPUpBhNlN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/zdtvEAMOJ2-DFidvQLPUpBhNlN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/zdtvEAMOJ2-DFidvQLPUpBhNlN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:a6:6a:21:1a:08:08:eb:24:9c:d1:95:4f:f0:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cddb6f10030e276f8316276f40b3d4a4184d94dd
Validity
Not Before: Nov 4 15:00:56 2025 GMT
Not After : Nov 5 15:00:56 2025 GMT
Subject: CN=56676b91c987a91dcc95376a2224244490b54041
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b3:67:c4:cf:87:16:3d:7c:4d:dc:60:cd:0e:
ad:5b:b7:33:93:8b:a9:d6:a2:a6:3c:1a:04:65:9d:
46:6b:dd:48:f5:05:6b:bc:d2:74:56:18:fc:16:e9:
14:55:d3:5d:27:c2:a3:9d:a9:44:99:fb:38:39:ba:
d9:87:3d:c1:a3:d2:9a:0e:fe:a0:7d:09:fb:e2:2b:
a5:de:fa:08:1b:9f:5d:90:4e:ac:e1:d7:fd:f6:bd:
dd:fb:6a:2a:18:81:f0:c3:66:f3:0b:c7:56:57:1f:
5f:cf:1d:4b:8c:b6:be:75:e4:0d:f1:11:aa:68:f8:
ec:30:ed:b0:09:fe:ec:19:7e:52:ee:99:3e:97:23:
69:80:00:4d:8a:b3:95:3e:e4:25:0a:19:7e:d8:b6:
4a:11:cc:19:b5:23:d2:52:f9:8e:c4:d2:3d:d0:14:
d4:97:45:9e:bc:58:67:b4:b2:9a:73:d6:0f:47:4d:
f9:2f:63:60:6e:68:b4:ec:98:32:ef:65:7c:2c:e7:
9a:2b:9b:90:dd:99:10:40:3e:43:63:ec:43:d3:20:
43:ad:8c:bc:09:58:70:a4:07:b1:81:70:2b:96:f9:
31:78:2f:83:bf:1e:64:b1:67:e2:b6:3d:98:23:a8:
33:68:ee:94:16:94:9e:79:4e:df:ed:ad:02:71:34:
15:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:67:6B:91:C9:87:A9:1D:CC:95:37:6A:22:24:24:44:90:B5:40:41
X509v3 Authority Key Identifier:
keyid:CD:DB:6F:10:03:0E:27:6F:83:16:27:6F:40:B3:D4:A4:18:4D:94:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zdtvEAMOJ2-DFidvQLPUpBhNlN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/zdtvEAMOJ2-DFidvQLPUpBhNlN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/zdtvEAMOJ2-DFidvQLPUpBhNlN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:52:a1:41:3e:25:6c:a0:1e:7f:64:72:96:d4:eb:88:e2:44:
8a:d4:bc:e4:39:3e:5a:bf:0f:c4:92:6f:67:dd:78:da:b4:98:
1e:89:70:49:a9:dc:9e:f5:53:90:28:4d:4e:94:ba:a9:22:2b:
09:98:02:59:b7:3e:d0:40:46:49:b5:b5:01:fd:28:7d:68:03:
b7:34:f6:b6:03:2f:a7:71:ff:a0:e8:9e:01:36:ac:f8:69:a0:
02:e5:35:0c:fd:a2:70:d1:25:5e:4f:31:e7:30:c9:36:c2:1d:
b7:10:7b:16:ce:b7:53:21:78:fd:28:17:21:4d:df:35:10:4b:
13:1b:86:8d:bd:98:0a:91:ab:e2:6b:ef:65:77:a7:f8:92:6f:
53:46:3f:63:96:94:db:73:f0:12:5d:df:8f:4d:30:7e:1e:91:
41:a9:05:7e:32:03:fc:04:57:63:f5:ce:c3:93:9c:ca:f1:45:
0d:53:f9:30:01:18:cc:3f:eb:50:37:c1:5e:d6:70:20:80:4a:
0a:77:64:e9:93:a5:0e:ef:ad:e7:b8:42:1e:02:fe:85:0a:a8:
71:40:ba:c5:1e:c8:a9:90:34:6f:0c:a5:3e:08:94:cc:cd:6d:
1f:2b:c1:58:ad:3b:13:c0:ba:d6:20:85:ee:94:28:69:4a:6e:
4f:54:71:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:11:41 2025 by rpki-client