Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/a7851c-bb78-4f29-a1d9-7b991824bd83/1/zyddD-Y5mOobfTnlGPsyn3a-0WY.mft
File: zyddD-Y5mOobfTnlGPsyn3a-0WY.mft (raw, json)
Hash identifier: YnE2w+CoqfUpU/31g/6+oLt997wFEPg08syY/f8BMbI=
Subject key identifier: CA:B6:79:DC:96:CD:CC:B5:42:65:1C:E9:27:61:74:48:50:4C:9A:2E
Authority key identifier: CF:27:5D:0F:E6:39:98:EA:1B:7D:39:E5:18:FB:32:9F:76:BE:D1:66
Certificate issuer: /CN=cf275d0fe63998ea1b7d39e518fb329f76bed166
Certificate serial: 0199FC8FB2C74F8D1B622EF2CA3076A17301
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zyddD-Y5mOobfTnlGPsyn3a-0WY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/a7851c-bb78-4f29-a1d9-7b991824bd83/1/zyddD-Y5mOobfTnlGPsyn3a-0WY.mft
Manifest number: 04D0
Signing time: Sun 19 Oct 2025 13:01:39 +0000
Manifest this update: Sun 19 Oct 2025 13:01:39 +0000
Manifest next update: Mon 20 Oct 2025 13:01:39 +0000
Files and hashes: 1: ks8iWy1FilD9kiiIcgz0a9tcMkE.roa (hash: xbOsfKBCXele8prh5n/9hZCYsk36tRLAfw19ggRv57E=)
2: zyddD-Y5mOobfTnlGPsyn3a-0WY.crl (hash: i6jQ5o9DiIrLorGbfMTiqeO2L3ciXIaTzbY6TJa/zKQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/a7851c-bb78-4f29-a1d9-7b991824bd83/1/zyddD-Y5mOobfTnlGPsyn3a-0WY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/a7851c-bb78-4f29-a1d9-7b991824bd83/1/zyddD-Y5mOobfTnlGPsyn3a-0WY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zyddD-Y5mOobfTnlGPsyn3a-0WY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:b2:c7:4f:8d:1b:62:2e:f2:ca:30:76:a1:73:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf275d0fe63998ea1b7d39e518fb329f76bed166
Validity
Not Before: Oct 19 13:01:39 2025 GMT
Not After : Oct 20 13:01:39 2025 GMT
Subject: CN=cab679dc96cdccb542651ce927617448504c9a2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:fe:f8:6e:8a:44:77:00:7a:3a:c2:3d:20:ef:
95:42:2e:50:65:20:cd:c5:58:e4:31:8b:c5:0a:26:
79:78:c3:09:f9:d1:c5:08:6b:e2:3d:f7:f6:7f:af:
40:9f:e9:aa:1c:77:ba:4e:fa:50:fc:07:6c:cf:e8:
78:16:98:a5:ef:8d:e0:2f:0d:f9:e9:37:d1:46:c5:
1d:83:4e:c2:9b:1a:66:53:67:b6:57:e1:9f:89:14:
4f:0f:57:5e:0a:30:e3:5f:9d:9a:56:d9:d8:9d:31:
93:7f:ec:08:d6:b5:9a:8e:e5:ed:a8:85:9f:70:1b:
75:81:8f:3b:ea:0f:9c:48:b2:62:d9:2c:0d:0d:bd:
c9:86:2f:bc:ca:79:0d:57:01:86:7d:f5:a6:de:58:
10:9a:a1:52:0c:71:ee:e4:a3:c0:2a:4c:e3:16:b2:
60:35:7b:b1:a5:f0:d7:74:96:06:78:0c:86:6f:8e:
44:6c:ab:49:e5:7b:fb:ed:a7:de:42:ec:05:bb:98:
45:1e:fb:58:2c:68:b1:2d:32:1f:36:13:b3:b3:ab:
2a:07:41:5c:e9:f8:ee:b8:e7:31:1b:61:44:f5:9b:
87:f1:0b:35:71:89:46:9e:0b:a3:af:4c:77:a9:91:
3c:2e:70:c8:4a:e1:8c:a6:4a:83:5c:34:b2:71:e1:
fd:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:B6:79:DC:96:CD:CC:B5:42:65:1C:E9:27:61:74:48:50:4C:9A:2E
X509v3 Authority Key Identifier:
keyid:CF:27:5D:0F:E6:39:98:EA:1B:7D:39:E5:18:FB:32:9F:76:BE:D1:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zyddD-Y5mOobfTnlGPsyn3a-0WY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a7851c-bb78-4f29-a1d9-7b991824bd83/1/zyddD-Y5mOobfTnlGPsyn3a-0WY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a7851c-bb78-4f29-a1d9-7b991824bd83/1/zyddD-Y5mOobfTnlGPsyn3a-0WY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:92:9e:73:fb:e2:29:30:b9:07:35:b7:5b:54:b9:55:5a:3a:
84:e4:a7:d1:ba:f8:1a:b3:9a:8b:37:fd:02:07:54:de:10:22:
26:39:8b:67:54:9a:0c:93:a1:9a:bb:f8:02:03:ac:4b:c7:00:
ea:92:e5:6c:d6:93:93:08:58:15:c3:60:85:25:6a:37:4e:e7:
b2:3d:1d:43:fc:cd:fc:16:aa:c7:68:30:ac:64:e4:98:61:92:
e9:c5:42:4c:60:aa:e2:f7:e3:38:1c:b4:0c:d9:8f:26:43:91:
8a:5f:a4:e6:4f:ea:51:7a:df:ff:5e:55:10:c8:76:8b:ce:db:
5c:7e:3a:ef:b5:28:c6:73:b2:3e:65:c4:41:aa:e8:aa:74:97:
98:5c:5f:19:b2:4b:21:f3:f4:33:0d:59:0a:53:02:3d:8a:58:
06:85:e4:78:26:2e:30:cb:40:dc:12:98:06:3d:69:17:0a:76:
13:fd:7c:82:8a:38:09:be:71:66:51:3d:20:2b:e3:22:4c:0b:
39:5a:c2:39:3b:13:a2:5c:9e:cd:99:13:03:3e:27:7a:9e:a1:
a2:20:9a:cf:38:61:73:b9:0b:aa:2b:21:90:2d:df:e7:57:65:
55:46:3f:0f:b4:1d:fb:26:64:1a:4e:6f:37:ee:b5:18:fc:5c:
3f:ac:80:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:31:49 2025 by rpki-client