Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/7a1274-03ac-494d-ba8e-cfcffa3c0665/1/zT5kktRzFSDB7tvNopZ5UArAg6s.mft
File: zT5kktRzFSDB7tvNopZ5UArAg6s.mft (raw, json)
Hash identifier: ZoxLqczw1zbX6Zkc48NaTt1n1kQxhwEnt7MSTw+kQNk=
Subject key identifier: CC:F2:DE:83:60:1F:1D:21:CB:B5:80:96:5B:D0:84:89:B4:1D:DE:5F
Authority key identifier: CD:3E:64:92:D4:73:15:20:C1:EE:DB:CD:A2:96:79:50:0A:C0:83:AB
Certificate issuer: /CN=cd3e6492d4731520c1eedbcda29679500ac083ab
Certificate serial: 0199FEEBEFFCC7E0B075638FBEECCDC6483D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zT5kktRzFSDB7tvNopZ5UArAg6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/7a1274-03ac-494d-ba8e-cfcffa3c0665/1/zT5kktRzFSDB7tvNopZ5UArAg6s.mft
Manifest number: 05B1
Signing time: Mon 20 Oct 2025 00:01:39 +0000
Manifest this update: Mon 20 Oct 2025 00:01:39 +0000
Manifest next update: Tue 21 Oct 2025 00:01:39 +0000
Files and hashes: 1: COOSirhVHTLVRSIt4NAQH8L8vr4.roa (hash: tu1lQ0uqkhi4vcEmV6leM3hmh+odZkH5lyLz+npAcNE=)
2: zT5kktRzFSDB7tvNopZ5UArAg6s.crl (hash: 9zIrOEOJu2eeyjltKUbWy6EzJeri8rtwF6hUWQNVmmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/7a1274-03ac-494d-ba8e-cfcffa3c0665/1/zT5kktRzFSDB7tvNopZ5UArAg6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/7a1274-03ac-494d-ba8e-cfcffa3c0665/1/zT5kktRzFSDB7tvNopZ5UArAg6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/zT5kktRzFSDB7tvNopZ5UArAg6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:ef:fc:c7:e0:b0:75:63:8f:be:ec:cd:c6:48:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd3e6492d4731520c1eedbcda29679500ac083ab
Validity
Not Before: Oct 20 00:01:39 2025 GMT
Not After : Oct 21 00:01:39 2025 GMT
Subject: CN=ccf2de83601f1d21cbb580965bd08489b41dde5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:27:ff:c1:08:1b:c1:f4:7f:ea:07:fe:79:3e:
65:31:94:aa:2d:16:e4:a1:6a:53:9a:24:07:2c:df:
b9:12:4b:3c:b4:f3:40:4f:b8:2c:1f:23:39:d3:02:
67:6d:ff:2e:a1:d8:ac:70:34:f5:07:df:1c:86:31:
90:fb:1b:06:43:d5:4a:1b:f1:0c:aa:ad:72:0d:fc:
9d:d3:b0:78:f6:4f:69:f4:aa:57:1c:40:c0:cd:0f:
fb:61:a2:b7:55:0a:fa:0c:6a:7e:e0:1a:94:4e:27:
fc:20:3a:85:7e:c9:50:83:93:3f:9f:3a:4f:4e:72:
d9:f4:f5:0a:ad:db:18:48:f7:eb:33:bd:ad:b6:f1:
59:ba:ad:6e:06:38:c5:7a:1e:01:a7:fc:1f:09:43:
78:f4:95:49:f2:2b:7c:99:b0:72:f7:f7:27:68:35:
20:ab:7c:c4:6e:d5:1e:12:68:84:67:93:a3:9a:89:
67:2e:ae:8f:7d:fd:ae:60:ea:cf:00:9f:6d:64:21:
d8:9e:f4:b5:ad:e0:3b:ae:7c:b1:bf:7f:26:4e:a3:
f1:0a:17:83:0d:8d:b2:a3:5d:26:25:17:60:c4:8a:
cc:57:78:5e:eb:3f:ba:0e:97:b8:bd:e4:4c:ca:1a:
de:02:25:b5:ab:56:b5:79:f3:64:b7:ee:4a:3b:20:
ef:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:F2:DE:83:60:1F:1D:21:CB:B5:80:96:5B:D0:84:89:B4:1D:DE:5F
X509v3 Authority Key Identifier:
keyid:CD:3E:64:92:D4:73:15:20:C1:EE:DB:CD:A2:96:79:50:0A:C0:83:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zT5kktRzFSDB7tvNopZ5UArAg6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7a1274-03ac-494d-ba8e-cfcffa3c0665/1/zT5kktRzFSDB7tvNopZ5UArAg6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7a1274-03ac-494d-ba8e-cfcffa3c0665/1/zT5kktRzFSDB7tvNopZ5UArAg6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:c0:18:6d:30:9c:43:5a:b6:47:fa:66:6c:8c:37:fa:6d:75:
18:92:f6:5e:8a:59:74:78:ae:f8:56:dc:04:63:43:87:d7:d3:
25:23:ca:8d:86:4d:9f:e6:77:b8:5c:28:89:0b:b2:87:c8:0d:
1d:3c:bc:d5:c0:57:37:5a:0c:72:1b:24:79:ad:77:5c:7f:9a:
e0:57:37:df:8f:17:e4:f4:d8:14:cb:bf:d7:59:a2:b1:4c:9e:
98:7c:00:a3:82:32:82:95:b4:aa:74:8b:03:96:f7:f9:06:15:
7c:a9:eb:2f:7d:25:f5:64:a0:a6:c9:21:e2:e9:31:09:da:ad:
2c:f3:42:a2:e0:f5:4a:24:f3:bb:55:5c:09:82:cb:c9:72:62:
81:20:35:d4:07:59:9a:2c:e8:d4:bb:78:51:44:43:64:06:8e:
46:a9:96:f4:b8:70:72:df:c9:e2:6e:9a:51:bc:ed:f3:a2:13:
19:7a:c4:26:22:ed:6f:c0:7b:2b:23:1a:72:c0:16:39:29:c1:
7b:6f:67:c0:46:58:6f:3f:78:4e:a5:eb:68:fd:09:ca:ec:54:
89:74:f1:bc:b6:f8:c0:d1:d4:4c:11:9e:ac:9c:f5:7f:c9:03:
73:0e:39:03:88:f1:bc:1d:e2:01:0a:f9:93:77:5b:d0:de:d8:
17:f1:cd:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:38:30 2025 by rpki-client