Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/f2f26a-1547-43f3-a239-c9f09af729cf/1/zxuxqgyTt5GML9JDO0HCHXnUTao.mft
File: zxuxqgyTt5GML9JDO0HCHXnUTao.mft (raw, json)
Hash identifier: HgbU0KYwytgHuARU5fOjVrd5UB+/jpLFcQNmAJkgPaA=
Subject key identifier: AE:A4:78:2C:AB:76:B7:C3:57:7E:75:96:31:E5:3B:A5:CE:E1:0D:27
Authority key identifier: CF:1B:B1:AA:0C:93:B7:91:8C:2F:D2:43:3B:41:C2:1D:79:D4:4D:AA
Certificate issuer: /CN=cf1bb1aa0c93b7918c2fd2433b41c21d79d44daa
Certificate serial: 0199FBEBD7C513847752C3369D1C9EA3F4F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zxuxqgyTt5GML9JDO0HCHXnUTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/f2f26a-1547-43f3-a239-c9f09af729cf/1/zxuxqgyTt5GML9JDO0HCHXnUTao.mft
Manifest number: 0BA7
Signing time: Sun 19 Oct 2025 10:02:41 +0000
Manifest this update: Sun 19 Oct 2025 10:02:41 +0000
Manifest next update: Mon 20 Oct 2025 10:02:41 +0000
Files and hashes: 1: 6FMleRn7QE-uKMdEakcsOaCZ1ss.roa (hash: mcv6vhN3tb3ONM9bZ3O2URAWmhAYPv+UUje7yYCRo5U=)
2: zxuxqgyTt5GML9JDO0HCHXnUTao.crl (hash: vKq+QSe2AzNKA99SeYx6KnI4X7rNb04Fao1IDmWoueA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/f2f26a-1547-43f3-a239-c9f09af729cf/1/zxuxqgyTt5GML9JDO0HCHXnUTao.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/f2f26a-1547-43f3-a239-c9f09af729cf/1/zxuxqgyTt5GML9JDO0HCHXnUTao.mft
rsync://rpki.ripe.net/repository/DEFAULT/zxuxqgyTt5GML9JDO0HCHXnUTao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:d7:c5:13:84:77:52:c3:36:9d:1c:9e:a3:f4:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf1bb1aa0c93b7918c2fd2433b41c21d79d44daa
Validity
Not Before: Oct 19 10:02:41 2025 GMT
Not After : Oct 20 10:02:41 2025 GMT
Subject: CN=aea4782cab76b7c3577e759631e53ba5cee10d27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:34:5d:a6:90:6d:9d:43:54:ff:6d:03:b2:ef:
c3:5c:90:f3:30:d8:40:c6:00:fb:80:e9:ab:88:4c:
0f:df:74:24:ce:09:ed:29:c6:68:72:33:47:e5:5e:
4e:75:56:4b:a6:77:9a:f7:c9:52:ba:79:cc:fd:b1:
f5:f2:b4:e3:9d:4d:f5:d3:6f:36:0c:87:c1:c0:ad:
6e:19:d2:6b:74:2d:97:80:4b:28:22:3f:23:ff:96:
59:5f:f8:0e:ae:9d:3e:76:3f:97:84:60:84:a1:db:
8b:6a:4e:aa:ef:0b:d2:10:74:91:7b:16:15:ab:93:
33:99:12:cd:db:9b:ae:1a:6c:a4:39:b1:ee:84:fa:
44:fa:ae:f5:f8:af:39:5e:1d:ce:7d:28:ab:06:26:
b2:c1:23:6b:a0:1a:93:3a:b0:b4:84:07:41:e8:fd:
22:f6:92:b4:78:e7:11:73:e9:cc:53:7a:bd:f7:e5:
2d:18:f4:ad:6f:6d:f3:18:9f:f0:e5:dc:90:b5:7a:
f8:bf:70:95:95:80:6d:30:a6:3f:18:cb:d4:84:39:
0c:74:71:29:f7:6d:de:ed:e8:34:ea:67:18:c3:53:
96:4c:2e:ed:eb:64:50:59:7b:89:01:07:ac:f2:f8:
05:eb:17:02:2b:03:7a:e9:8f:59:63:4e:6d:fd:d1:
f8:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:A4:78:2C:AB:76:B7:C3:57:7E:75:96:31:E5:3B:A5:CE:E1:0D:27
X509v3 Authority Key Identifier:
keyid:CF:1B:B1:AA:0C:93:B7:91:8C:2F:D2:43:3B:41:C2:1D:79:D4:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zxuxqgyTt5GML9JDO0HCHXnUTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f2f26a-1547-43f3-a239-c9f09af729cf/1/zxuxqgyTt5GML9JDO0HCHXnUTao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f2f26a-1547-43f3-a239-c9f09af729cf/1/zxuxqgyTt5GML9JDO0HCHXnUTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:0a:28:16:7a:09:4e:cf:6d:f3:f2:73:2a:1b:e6:39:ae:e1:
5c:bd:11:8f:61:e8:03:3d:e1:01:17:d4:36:5d:e2:12:64:7c:
e5:14:f7:f4:51:41:1e:43:22:59:63:df:c9:53:56:7c:cd:56:
29:37:f5:12:dd:5a:e2:94:a7:9e:1d:8b:d0:ac:8f:9a:be:33:
59:e8:80:5a:f3:80:fa:6a:b8:6d:7e:95:ca:1b:53:1d:b6:68:
12:b6:ab:5f:7e:cd:2d:55:5a:4e:1b:cf:f8:96:74:e3:66:20:
8d:21:72:e8:6f:e4:de:40:da:ac:40:c3:1f:63:97:5c:77:04:
60:7d:37:4e:a0:dd:57:40:a2:4a:bb:4f:7c:20:da:cd:3f:bb:
85:f2:74:89:af:e5:ce:34:4d:49:5f:52:d1:58:a7:09:f0:5f:
31:1b:c4:9d:eb:f8:06:d7:57:1a:e0:48:ca:c4:7c:68:9e:4b:
f6:86:6a:ad:d7:53:54:24:8b:f1:b4:7b:76:96:c0:40:b1:4a:
1b:01:b4:be:ae:0a:d3:53:fa:2c:71:c1:6e:e6:12:ac:81:fc:
6a:d4:b3:ad:d8:d2:34:6b:74:90:4a:cb:73:cb:18:61:a8:e4:
48:d2:86:c2:27:4b:06:ea:be:17:c4:17:21:b3:9d:c7:ec:b8:
4d:4b:1f:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:56:25 2025 by rpki-client