Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.mft
File: zpTDHhXfS3pg5dQN86rBhS6Np0s.mft (raw, json)
Hash identifier: 9jMwG6DnYfcR2Me0cDZ5jL2kXhUfd0c2E2zLpQFmTkQ=
Subject key identifier: 1E:F2:8C:A2:FB:34:90:0C:70:4C:42:AA:E9:17:F4:7A:EF:89:8E:85
Authority key identifier: CE:94:C3:1E:15:DF:4B:7A:60:E5:D4:0D:F3:AA:C1:85:2E:8D:A7:4B
Certificate issuer: /CN=ce94c31e15df4b7a60e5d40df3aac1852e8da74b
Certificate serial: 0199FFC7B155CFDA8A43DC97881B417176F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zpTDHhXfS3pg5dQN86rBhS6Np0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.mft
Manifest number: 08E1
Signing time: Mon 20 Oct 2025 04:01:41 +0000
Manifest this update: Mon 20 Oct 2025 04:01:41 +0000
Manifest next update: Tue 21 Oct 2025 04:01:41 +0000
Files and hashes: 1: cGaM1pqwI_iREeyFYU4bDaF6huI.roa (hash: ZX5FkbfvKLABufYmP9T9sbDn4rTGZcGZ9RNRwuV4C4s=)
2: zpTDHhXfS3pg5dQN86rBhS6Np0s.crl (hash: SQLGAC4iuYlP7bXJUt4Ex2ntAnaejmro3G2hiBgSJKk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/zpTDHhXfS3pg5dQN86rBhS6Np0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:b1:55:cf:da:8a:43:dc:97:88:1b:41:71:76:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce94c31e15df4b7a60e5d40df3aac1852e8da74b
Validity
Not Before: Oct 20 04:01:41 2025 GMT
Not After : Oct 21 04:01:41 2025 GMT
Subject: CN=1ef28ca2fb34900c704c42aae917f47aef898e85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a3:b1:e9:95:d9:f5:4a:a9:1c:2a:e4:c1:be:
33:68:9a:0f:ba:55:70:02:ba:27:96:6a:93:95:04:
55:c0:39:be:c8:77:66:15:e7:07:17:42:29:9e:92:
26:eb:1f:4a:dd:2b:a9:da:6d:e9:81:88:9e:0f:aa:
fd:fc:e3:5a:50:65:d3:ae:3a:ed:64:17:f3:75:22:
6b:64:64:e9:43:03:18:60:35:1c:3f:3c:7a:0d:9a:
04:d9:11:02:0c:06:db:d2:e2:8f:f6:8b:cd:24:91:
06:86:b6:9b:39:4b:85:93:54:39:96:6b:6b:db:35:
29:96:61:e8:63:62:c7:e9:f5:87:b6:19:33:c4:af:
4a:00:aa:ee:1d:05:d4:89:c8:b7:47:44:39:1f:bd:
b1:7e:77:61:1e:e6:df:cf:05:9f:92:df:ce:d0:c3:
6f:c0:76:01:f4:eb:04:6f:1a:cb:a6:ef:9b:8c:68:
54:ba:46:fe:31:19:d3:b9:4c:70:57:ba:3d:ee:0b:
e1:94:24:74:d4:10:f3:53:a7:b3:ec:14:d3:1f:e5:
22:67:a7:ce:d5:c2:54:ad:66:ff:4e:01:17:33:f8:
05:02:38:47:bb:c2:d9:e2:92:7a:c8:60:35:60:2d:
88:d0:fb:2c:c2:d3:ae:6a:7b:4b:65:77:74:6f:c4:
fe:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:F2:8C:A2:FB:34:90:0C:70:4C:42:AA:E9:17:F4:7A:EF:89:8E:85
X509v3 Authority Key Identifier:
keyid:CE:94:C3:1E:15:DF:4B:7A:60:E5:D4:0D:F3:AA:C1:85:2E:8D:A7:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zpTDHhXfS3pg5dQN86rBhS6Np0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:d8:85:e6:30:d8:b5:39:25:a8:52:98:0a:0e:82:90:f6:28:
b7:f8:bf:2e:a4:13:be:e3:7f:60:74:5a:53:d1:b4:52:cc:ba:
16:48:ed:68:05:52:7d:aa:f4:89:bb:1a:f4:18:6d:d3:8e:a9:
4f:4e:0e:f9:dc:68:fc:58:c9:8c:38:cc:60:38:43:65:97:ce:
9b:75:f1:45:0a:3c:3c:b1:31:5b:7c:22:e0:c6:f4:5a:57:70:
a2:e9:d6:cc:41:72:17:9f:c9:b4:ad:cc:8e:5f:86:03:c8:a1:
7e:56:64:2a:c6:ad:ac:b7:4e:0f:42:ac:5b:9b:40:e1:5d:cd:
d0:fa:d1:9f:5d:c5:4e:51:6e:18:d2:b4:18:d5:92:0c:18:c5:
31:c5:50:c0:22:a1:7f:db:7d:7a:fa:d9:e2:44:95:de:92:5e:
14:ca:fd:d4:cb:1c:a4:b8:9f:91:fd:9a:87:c0:ef:43:60:01:
db:f8:d2:54:c7:ad:fd:a0:89:45:95:44:87:c8:f7:20:17:57:
07:13:84:1b:f2:f0:f3:12:d2:7f:61:9c:75:eb:34:77:45:56:
1b:25:29:06:a6:d1:53:db:5e:04:1b:86:7b:3d:97:1f:5e:a8:
70:49:6e:0f:16:c3:28:33:b9:8b:ec:21:d8:06:7d:b7:a5:04:
80:81:80:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:23:41 2025 by rpki-client