Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/34acf4-747f-45fe-8129-402f1fb848cf/1/zOV9yCNN9fWdZ_3GhWuyYucZP1I.mft
File: zOV9yCNN9fWdZ_3GhWuyYucZP1I.mft (raw, json)
Hash identifier: o8xUbfJevCSzUu9U1Ij0jv35IO/8/1tTcBfc0GXQMLM=
Subject key identifier: 85:0C:C7:59:AE:31:C5:5E:AF:F5:B9:AE:EF:75:CC:6B:C3:03:66:E0
Authority key identifier: CC:E5:7D:C8:23:4D:F5:F5:9D:67:FD:C6:85:6B:B2:62:E7:19:3F:52
Certificate issuer: /CN=cce57dc8234df5f59d67fdc6856bb262e7193f52
Certificate serial: 0199FAD8239E579B418E9A043842E0C18086
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zOV9yCNN9fWdZ_3GhWuyYucZP1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/34acf4-747f-45fe-8129-402f1fb848cf/1/zOV9yCNN9fWdZ_3GhWuyYucZP1I.mft
Manifest number: 0EAD
Signing time: Sun 19 Oct 2025 05:01:32 +0000
Manifest this update: Sun 19 Oct 2025 05:01:32 +0000
Manifest next update: Mon 20 Oct 2025 05:01:32 +0000
Files and hashes: 1: F8CkVi3Azk4IP8l0xbj9A7utWT4.roa (hash: E5Iv0quJqPnudHATWcToHknlwXYMpaxnHvHdqASmVUA=)
2: zOV9yCNN9fWdZ_3GhWuyYucZP1I.crl (hash: UtSCHSvmrc82VpomWCv3fWIwJUSqHKyeRPlk7Wza4+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/34acf4-747f-45fe-8129-402f1fb848cf/1/zOV9yCNN9fWdZ_3GhWuyYucZP1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/34acf4-747f-45fe-8129-402f1fb848cf/1/zOV9yCNN9fWdZ_3GhWuyYucZP1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/zOV9yCNN9fWdZ_3GhWuyYucZP1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:23:9e:57:9b:41:8e:9a:04:38:42:e0:c1:80:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cce57dc8234df5f59d67fdc6856bb262e7193f52
Validity
Not Before: Oct 19 05:01:32 2025 GMT
Not After : Oct 20 05:01:32 2025 GMT
Subject: CN=850cc759ae31c55eaff5b9aeef75cc6bc30366e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:40:a8:2f:8e:53:89:93:b2:81:04:dd:5d:92:
07:a5:45:64:ae:f6:d5:89:06:fa:19:34:e7:4a:a4:
11:1b:40:6d:a7:d3:db:24:3f:66:16:bf:7d:77:d7:
3f:3c:3c:52:f7:4f:05:c8:14:99:c7:a5:31:90:d5:
37:53:bf:23:df:5d:ce:8a:6e:36:aa:4c:6c:e1:3b:
c3:50:3b:d0:6f:6f:a7:e9:4e:44:20:30:09:f3:07:
1a:5c:d8:b5:3a:75:df:9d:6f:84:7b:03:60:7d:2d:
74:e9:51:c8:7a:92:7f:6e:58:3c:99:96:58:72:c2:
d3:34:32:e0:73:1d:e0:df:11:d7:f1:24:5c:bc:ce:
cb:3c:40:7c:c6:89:81:43:54:77:c1:51:96:f9:86:
15:ec:29:36:9e:ce:fa:90:e2:ed:54:45:bb:df:4b:
87:ed:8a:28:d7:40:3b:cc:aa:63:e5:6e:59:61:8c:
5f:35:88:69:14:5b:26:86:44:72:58:3d:b1:00:88:
b2:46:ef:f8:c3:f5:fa:70:37:50:75:66:75:43:79:
ce:15:b3:a6:3a:d5:bf:df:b9:d5:86:bb:dc:10:6c:
e8:a9:50:e5:10:2d:55:13:1e:48:b6:8b:02:4b:60:
d2:f8:19:5b:6c:e1:bd:bd:4a:0b:fb:19:36:ff:b6:
00:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:0C:C7:59:AE:31:C5:5E:AF:F5:B9:AE:EF:75:CC:6B:C3:03:66:E0
X509v3 Authority Key Identifier:
keyid:CC:E5:7D:C8:23:4D:F5:F5:9D:67:FD:C6:85:6B:B2:62:E7:19:3F:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zOV9yCNN9fWdZ_3GhWuyYucZP1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/34acf4-747f-45fe-8129-402f1fb848cf/1/zOV9yCNN9fWdZ_3GhWuyYucZP1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/34acf4-747f-45fe-8129-402f1fb848cf/1/zOV9yCNN9fWdZ_3GhWuyYucZP1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:db:44:da:5e:d4:94:2e:be:a5:c7:c5:40:00:55:e2:c2:34:
17:48:45:8d:81:c6:10:f4:3b:a4:e3:5e:cd:03:24:06:f4:42:
4a:a9:cf:82:cd:44:aa:9a:0b:b0:62:c1:7a:65:78:ca:34:bd:
c5:e4:fa:18:36:2c:57:1f:23:a0:80:20:33:8c:d4:db:16:2b:
2b:29:89:bc:ce:ce:ae:cf:e6:b0:fa:2e:9a:b0:5f:16:1b:a5:
66:29:38:6c:8d:8f:79:c4:fe:ad:10:0e:57:16:06:2b:fb:e5:
42:9e:ec:98:b6:32:ac:2e:cf:60:d1:c5:60:b1:86:05:e1:2d:
f3:ba:93:14:c9:d3:1d:2f:47:bf:4b:76:21:b5:f2:ca:40:35:
51:5f:de:f6:62:54:33:84:2a:f0:f1:a6:c4:f8:9e:49:43:47:
a9:98:71:23:d4:43:e1:15:54:e7:d0:4a:0f:10:97:c3:c3:9e:
ea:41:34:7d:67:9b:7f:27:b6:0d:3e:fe:8d:04:1f:7c:02:04:
57:b1:54:d9:12:4a:dd:4a:51:cf:4a:24:5b:b2:93:fa:88:0f:
4e:9d:4c:32:8b:cf:7c:f1:c7:98:c2:21:f3:71:f8:0e:18:88:
95:95:7d:f7:4f:86:e7:e5:ad:23:c2:2c:4e:7c:0f:db:24:3f:
43:6d:a0:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:09:49 2025 by rpki-client