Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/51885b-5693-4892-a1d4-1a19792a1d26/1/zS0OOdePxiAiVaW0rbVFg9ne3c4.mft
File: zS0OOdePxiAiVaW0rbVFg9ne3c4.mft (raw, json)
Hash identifier: qzk0ZInOBujJeUuG8Wzc4qYiGHDLUKy0mHnj3wV7XI8=
Subject key identifier: FD:93:74:8A:D2:98:9E:62:11:89:FE:C0:D0:B9:5F:6F:FC:55:EB:AA
Authority key identifier: CD:2D:0E:39:D7:8F:C6:20:22:55:A5:B4:AD:B5:45:83:D9:DE:DD:CE
Certificate issuer: /CN=cd2d0e39d78fc6202255a5b4adb54583d9deddce
Certificate serial: 0199FEB48794698760832A535FE9710E2FCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zS0OOdePxiAiVaW0rbVFg9ne3c4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/51885b-5693-4892-a1d4-1a19792a1d26/1/zS0OOdePxiAiVaW0rbVFg9ne3c4.mft
Manifest number: 0A07
Signing time: Sun 19 Oct 2025 23:01:08 +0000
Manifest this update: Sun 19 Oct 2025 23:01:08 +0000
Manifest next update: Mon 20 Oct 2025 23:01:08 +0000
Files and hashes: 1: 3EEDSMX4c2BQtUFlexj7ViVaNFg.roa (hash: i/HEM5WN4SpMsFYFUufkSvdwrDOTS979dTw2WJmTqxo=)
2: zS0OOdePxiAiVaW0rbVFg9ne3c4.crl (hash: AwSel1XtdCf9DALQIDlvplAuHauklvncZgNKPc2LfyY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/51885b-5693-4892-a1d4-1a19792a1d26/1/zS0OOdePxiAiVaW0rbVFg9ne3c4.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/51885b-5693-4892-a1d4-1a19792a1d26/1/zS0OOdePxiAiVaW0rbVFg9ne3c4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zS0OOdePxiAiVaW0rbVFg9ne3c4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:87:94:69:87:60:83:2a:53:5f:e9:71:0e:2f:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd2d0e39d78fc6202255a5b4adb54583d9deddce
Validity
Not Before: Oct 19 23:01:08 2025 GMT
Not After : Oct 20 23:01:08 2025 GMT
Subject: CN=fd93748ad2989e621189fec0d0b95f6ffc55ebaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:09:09:92:68:48:72:56:2c:aa:52:64:49:60:
27:5e:ad:4f:5d:b0:bb:7c:e3:79:74:7b:70:42:b7:
ef:50:d2:1d:6c:bf:1b:4c:2a:8b:0c:a6:9a:02:3e:
de:23:80:5d:bb:b8:e5:13:c1:fc:9e:a3:87:18:14:
9a:54:73:24:b9:45:bc:6e:d8:65:55:ac:62:16:fc:
aa:fc:1d:2b:c9:22:e8:22:01:44:7d:46:0f:7f:5b:
6b:c9:88:47:c7:fd:c8:17:08:d1:b6:4b:0a:09:c3:
b3:73:13:e3:30:ed:4a:7b:01:d6:fe:e7:0d:ae:73:
f3:c9:02:5b:2b:06:ee:c3:e8:4a:0a:1e:7d:c6:ed:
16:bf:55:22:3d:a8:d2:02:a7:0f:6f:70:90:be:91:
a0:cc:c3:1f:25:62:bd:71:2c:5a:9a:60:5c:85:d0:
db:94:05:b4:62:a8:3f:2c:c4:bb:d3:99:69:fd:a5:
f0:42:77:67:02:c6:af:b0:ad:60:15:d3:0c:87:e0:
2a:6c:f8:f0:29:9f:a8:d8:78:c1:bb:a1:6d:43:6b:
06:07:3c:7b:9e:25:ee:6e:d6:24:28:24:85:10:3a:
69:32:7b:16:8e:e6:18:30:50:29:30:dd:84:f1:51:
8f:aa:41:27:96:67:ec:7d:23:a4:b4:b0:a9:f3:95:
bd:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:93:74:8A:D2:98:9E:62:11:89:FE:C0:D0:B9:5F:6F:FC:55:EB:AA
X509v3 Authority Key Identifier:
keyid:CD:2D:0E:39:D7:8F:C6:20:22:55:A5:B4:AD:B5:45:83:D9:DE:DD:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zS0OOdePxiAiVaW0rbVFg9ne3c4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/51885b-5693-4892-a1d4-1a19792a1d26/1/zS0OOdePxiAiVaW0rbVFg9ne3c4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/51885b-5693-4892-a1d4-1a19792a1d26/1/zS0OOdePxiAiVaW0rbVFg9ne3c4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:47:9b:93:67:df:2c:51:03:22:d8:e4:23:90:f3:e8:e1:05:
33:3b:d8:f8:ed:77:3f:3b:28:03:5e:e9:0e:2e:78:73:d8:ba:
82:64:ae:5f:da:34:76:de:df:7c:a9:aa:c7:80:c7:35:c8:94:
7d:8c:37:ee:b1:f0:a7:ec:71:fb:a1:15:ef:d6:6a:0e:42:19:
ae:2e:11:32:02:c3:c4:c6:7c:b3:35:d2:03:16:a3:f4:c9:0b:
63:da:06:f6:88:f9:0f:57:8d:02:02:82:7b:a8:69:58:3e:da:
ff:c4:0d:c8:47:c3:8b:a0:80:10:16:c6:b4:3f:40:d0:b8:e8:
9b:a3:e8:40:12:2f:94:c0:48:6e:5e:c7:5b:55:cc:df:32:16:
4b:6d:d1:6b:ae:a2:8e:b9:d2:cc:cb:ee:e3:cd:47:0e:9a:70:
0b:cd:67:cd:9e:4b:21:22:d0:50:54:3a:0b:61:9d:da:ce:a6:
46:22:a2:d3:8e:75:66:4f:6a:74:ee:fe:ab:b3:ff:07:ac:ad:
20:14:04:b9:f1:4c:06:a3:18:17:5d:dd:a3:e2:d2:f2:d5:73:
be:55:14:05:5d:73:22:ae:71:a1:58:46:10:b0:e2:ef:86:b7:
f1:55:be:f9:b5:85:20:ab:9e:f9:33:d1:8b:b7:99:e9:8f:67:
5d:e5:6e:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:47:30 2025 by rpki-client