Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/310d34-f5d8-4e96-9b7c-648f501afae5/1/zGUyZJpq70cUhBucj1RmDYibBik.mft
File: zGUyZJpq70cUhBucj1RmDYibBik.mft (raw, json)
Hash identifier: vfYO+iQiPTvb3ZumEdmyZoN6T1W+FApwgtQTelhblko=
Subject key identifier: 43:78:73:B5:D5:84:8F:82:A4:D4:B8:56:32:49:2B:59:90:50:14:8C
Authority key identifier: CC:65:32:64:9A:6A:EF:47:14:84:1B:9C:8F:54:66:0D:88:9B:06:29
Certificate issuer: /CN=cc6532649a6aef4714841b9c8f54660d889b0629
Certificate serial: 0199FE1039C6CBB87CAFC59289D9578C63E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zGUyZJpq70cUhBucj1RmDYibBik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/310d34-f5d8-4e96-9b7c-648f501afae5/1/zGUyZJpq70cUhBucj1RmDYibBik.mft
Manifest number: 0C91
Signing time: Sun 19 Oct 2025 20:01:40 +0000
Manifest this update: Sun 19 Oct 2025 20:01:40 +0000
Manifest next update: Mon 20 Oct 2025 20:01:40 +0000
Files and hashes: 1: KciWQRUUKA8G37qpiXIJOStEILw.roa (hash: YmPZf2aHwh91FO6k/J1ZnsKw+UadvZ5IXF9CJ4jQgGc=)
2: onkr1ceIBIpKPgL3tDwWHACVi7M.roa (hash: EEvxEqVipQPJzVBh5cB6I21KRgxyU4/cw+o/6DWEUyk=)
3: zGUyZJpq70cUhBucj1RmDYibBik.crl (hash: sRM5/0QsVSc5gFoyvwW0NYlgu9qEfloBm1pIG5y+yu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/310d34-f5d8-4e96-9b7c-648f501afae5/1/zGUyZJpq70cUhBucj1RmDYibBik.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/310d34-f5d8-4e96-9b7c-648f501afae5/1/zGUyZJpq70cUhBucj1RmDYibBik.mft
rsync://rpki.ripe.net/repository/DEFAULT/zGUyZJpq70cUhBucj1RmDYibBik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:10:39:c6:cb:b8:7c:af:c5:92:89:d9:57:8c:63:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc6532649a6aef4714841b9c8f54660d889b0629
Validity
Not Before: Oct 19 20:01:40 2025 GMT
Not After : Oct 20 20:01:40 2025 GMT
Subject: CN=437873b5d5848f82a4d4b85632492b599050148c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:65:44:1c:cb:da:c7:55:e3:0a:61:c0:53:b7:
68:48:c2:b3:3c:92:59:c1:cc:ae:91:26:eb:b5:c7:
67:5f:0b:5c:eb:80:62:2e:73:cb:a0:de:2a:72:28:
15:c1:df:11:59:83:06:12:f2:cf:0a:27:52:cb:15:
7c:23:f8:6d:9a:c3:c8:5f:ae:ce:48:21:ed:d0:90:
67:e4:7b:ea:ec:77:95:f9:92:8c:67:0f:0e:80:a7:
db:73:6a:33:32:7e:1a:77:12:de:29:f8:c6:ed:b3:
88:06:11:84:6f:81:59:fa:40:18:11:1c:a2:8c:d7:
52:3d:72:05:e7:f7:df:a8:39:bf:3b:17:70:02:46:
67:18:6e:8c:10:61:62:f8:65:b0:87:53:db:24:64:
20:ab:48:3e:3a:91:a3:7c:23:7f:00:a9:bd:70:de:
37:b3:93:2c:8c:2f:4b:cc:90:ad:a7:86:bf:93:34:
ce:a8:77:b3:65:be:ff:61:d1:46:b6:ec:05:0a:17:
32:db:05:8a:5e:a1:40:00:06:4c:78:a7:03:9e:dc:
d7:d7:50:c5:80:ba:2d:39:ea:2b:b8:5f:31:5d:c7:
5a:e9:9d:65:2a:5d:e9:5a:80:4e:99:1b:07:cb:7e:
1a:18:79:30:80:bd:49:b0:cd:c9:19:70:d4:21:ae:
73:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:78:73:B5:D5:84:8F:82:A4:D4:B8:56:32:49:2B:59:90:50:14:8C
X509v3 Authority Key Identifier:
keyid:CC:65:32:64:9A:6A:EF:47:14:84:1B:9C:8F:54:66:0D:88:9B:06:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zGUyZJpq70cUhBucj1RmDYibBik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/310d34-f5d8-4e96-9b7c-648f501afae5/1/zGUyZJpq70cUhBucj1RmDYibBik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/310d34-f5d8-4e96-9b7c-648f501afae5/1/zGUyZJpq70cUhBucj1RmDYibBik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:33:bd:9c:85:16:ea:30:37:16:4f:ae:3a:f8:1b:03:d6:ee:
db:9d:02:71:52:0f:7b:95:26:d9:1d:41:a4:13:bd:eb:85:a1:
ab:aa:ea:ff:b8:66:fe:da:6b:e2:df:93:81:cb:9a:84:2f:03:
d8:9f:4f:9c:96:4b:77:ef:ae:c0:2d:7c:45:fd:b5:d9:fc:09:
45:e5:01:b4:90:08:f7:75:de:93:4a:7d:24:8c:2b:77:0d:f9:
f2:a4:ea:a4:be:6f:45:66:2b:4c:98:a9:6e:ce:b0:fb:ef:31:
cc:0c:6f:6d:df:de:de:fc:de:95:98:1f:45:30:4f:43:97:9d:
ef:2a:19:71:f7:aa:ef:7c:a8:af:96:94:fa:a0:42:42:32:3c:
19:39:8d:19:3f:ce:b7:dd:76:d1:47:1b:f7:72:33:6c:66:60:
17:e6:3c:f4:f2:e9:d7:9e:33:84:6c:23:c1:de:c2:a8:6d:51:
bc:4c:31:19:85:47:8e:d8:e9:1c:7d:f6:57:51:be:fc:51:43:
bb:d4:d8:41:a9:68:41:08:fc:78:86:dd:aa:05:1c:0e:49:33:
05:d9:11:fe:90:df:b0:8d:ca:42:74:ff:fc:80:1f:72:d1:26:
4f:05:57:1f:f8:e0:27:1b:f1:93:cc:a9:14:eb:04:fb:55:c6:
74:5c:3d:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:57:54 2025 by rpki-client