Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/31dc10-5663-4555-a806-4e9305caf1a3/1/ZCOaUQhPGytcaEZDysFGIXx5-NE.mft
File: ZCOaUQhPGytcaEZDysFGIXx5-NE.mft (raw, json)
Hash identifier: os8YHHolEoixa3VCloGsxrAIYjX7sZVt/do/J3Pt888=
Subject key identifier: 0D:31:70:E0:D6:93:63:80:D3:C4:ED:47:52:16:3D:A4:4B:4A:77:3C
Authority key identifier: 64:23:9A:51:08:4F:1B:2B:5C:68:46:43:CA:C1:46:21:7C:79:F8:D1
Certificate issuer: /CN=64239a51084f1b2b5c684643cac146217c79f8d1
Certificate serial: 019A003534646062B0C8135D7E65978386E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZCOaUQhPGytcaEZDysFGIXx5-NE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/31dc10-5663-4555-a806-4e9305caf1a3/1/ZCOaUQhPGytcaEZDysFGIXx5-NE.mft
Manifest number: 0A1F
Signing time: Mon 20 Oct 2025 06:01:18 +0000
Manifest this update: Mon 20 Oct 2025 06:01:18 +0000
Manifest next update: Tue 21 Oct 2025 06:01:18 +0000
Files and hashes: 1: 1WnsILYxjGfpft24w4cU0Z9HVy0.roa (hash: mXH7nwV2vIU6tKBb8bErNfD249HtR3Br3nGu9VJRl4A=)
2: ZCOaUQhPGytcaEZDysFGIXx5-NE.crl (hash: DFEhNLgnroN+deM+miCRNJNZV6aQRJCEt3R1ffjU1kk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/31dc10-5663-4555-a806-4e9305caf1a3/1/ZCOaUQhPGytcaEZDysFGIXx5-NE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/31dc10-5663-4555-a806-4e9305caf1a3/1/ZCOaUQhPGytcaEZDysFGIXx5-NE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZCOaUQhPGytcaEZDysFGIXx5-NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:34:64:60:62:b0:c8:13:5d:7e:65:97:83:86:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64239a51084f1b2b5c684643cac146217c79f8d1
Validity
Not Before: Oct 20 06:01:18 2025 GMT
Not After : Oct 21 06:01:18 2025 GMT
Subject: CN=0d3170e0d6936380d3c4ed4752163da44b4a773c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:48:0e:81:c6:94:6c:fd:c7:7d:88:27:9f:94:
0a:40:8b:4f:0d:7e:9a:b8:30:cd:ca:0d:71:c4:88:
6d:b2:fa:2f:a6:52:54:02:5c:c7:93:b5:b2:a4:6e:
f0:ab:4e:2d:d5:dd:5a:83:b8:42:da:78:62:a9:60:
5d:97:a9:5b:9c:7a:7d:c4:d7:42:9b:28:45:56:c3:
fe:c9:4b:56:9f:cc:ea:4d:d8:79:91:d5:30:2d:5e:
66:80:04:59:d6:2e:aa:6e:b9:d6:52:0d:63:67:7f:
ff:2a:27:cb:92:a2:bb:5f:6d:99:92:0f:ac:81:77:
36:df:9b:de:ed:2b:8c:7e:84:8e:e8:a3:c6:7f:d1:
02:ce:e1:b4:84:47:b5:f7:4b:bd:ab:57:e4:d3:15:
ad:dd:ef:a0:bd:e7:58:60:34:51:bf:6f:56:62:b4:
78:3b:5c:0a:2d:b0:31:3f:36:22:58:a8:5e:ef:4d:
9f:81:7f:0b:a7:b2:34:6f:9e:ff:b2:d0:c5:8f:d7:
6c:1a:af:7a:20:30:9c:af:28:d6:83:24:e2:58:bb:
e2:3f:dc:fa:54:89:a6:d5:bb:16:fb:76:62:41:ca:
f1:67:41:b0:e2:be:e1:7b:6e:56:da:1f:5e:c9:93:
e9:15:81:d1:9c:57:34:ba:f6:9a:64:eb:45:d9:0d:
4a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:31:70:E0:D6:93:63:80:D3:C4:ED:47:52:16:3D:A4:4B:4A:77:3C
X509v3 Authority Key Identifier:
keyid:64:23:9A:51:08:4F:1B:2B:5C:68:46:43:CA:C1:46:21:7C:79:F8:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZCOaUQhPGytcaEZDysFGIXx5-NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/31dc10-5663-4555-a806-4e9305caf1a3/1/ZCOaUQhPGytcaEZDysFGIXx5-NE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/31dc10-5663-4555-a806-4e9305caf1a3/1/ZCOaUQhPGytcaEZDysFGIXx5-NE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:d9:0c:69:8b:b6:3f:43:c9:f0:f9:7f:d2:e6:b1:13:5e:c6:
15:14:5e:2a:3c:cd:9a:4b:ac:1d:f0:82:df:a5:e7:2f:ef:35:
15:81:ff:38:3f:e4:70:00:6b:aa:d6:41:bd:aa:da:ee:7c:d5:
f3:68:e3:90:9c:23:97:26:ab:d9:63:2e:aa:56:87:ed:a3:58:
17:e5:ea:a5:b2:98:59:c6:2e:de:af:7d:c0:43:83:00:51:0e:
ad:a2:7c:9b:41:6e:3f:93:c2:c9:54:81:b7:ca:5c:51:8c:d5:
40:6a:3b:60:98:8f:d5:c0:96:6a:69:9a:da:f1:48:5d:83:9e:
0f:95:91:cc:72:03:d5:fd:4e:13:8b:ba:49:4b:78:da:ab:4c:
18:88:91:8a:ab:b8:5a:60:8a:49:32:e7:2e:e1:33:be:96:c7:
67:66:54:25:ab:5e:56:89:e4:bd:b3:32:b5:39:26:29:b1:fb:
56:b8:35:0e:cd:82:66:d8:7b:90:8b:b6:ed:9e:0e:a1:dd:62:
cd:27:21:2e:09:63:0c:57:89:ed:b7:0e:23:ba:9c:b2:1d:49:
84:d4:b8:c9:4b:77:eb:96:4f:15:38:10:0f:bf:6f:20:d0:eb:
35:ad:30:62:9f:64:f2:c2:ff:fc:03:0f:03:67:fa:5b:48:ed:
bc:f6:9e:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:45:53 2025 by rpki-client