Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/0a8b1f-ca72-4eda-a717-482c86db2040/1/zQkyvbYQhcdt1kXB5263ERdUe5M.mft
File: zQkyvbYQhcdt1kXB5263ERdUe5M.mft (raw, json)
Hash identifier: TRalJ8oetzQJ6JMcISrKMG8MncRENVLa5l5wQXBHLgA=
Subject key identifier: 6E:21:4B:2E:48:9D:06:2A:04:D6:62:BD:9F:0C:78:37:CA:53:77:B1
Authority key identifier: CD:09:32:BD:B6:10:85:C7:6D:D6:45:C1:E7:6E:B7:11:17:54:7B:93
Certificate issuer: /CN=cd0932bdb61085c76dd645c1e76eb71117547b93
Certificate serial: 0199FB0F0DAD0F447FD16AA188D76C33F3FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zQkyvbYQhcdt1kXB5263ERdUe5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/0a8b1f-ca72-4eda-a717-482c86db2040/1/zQkyvbYQhcdt1kXB5263ERdUe5M.mft
Manifest number: 0F41
Signing time: Sun 19 Oct 2025 06:01:31 +0000
Manifest this update: Sun 19 Oct 2025 06:01:31 +0000
Manifest next update: Mon 20 Oct 2025 06:01:31 +0000
Files and hashes: 1: 1QvSwwMrqLMtK3WgrE7-BjuJNZU.roa (hash: xHdOOR5x+I+BVkrKwEv1LdA4W3/XGAhIP6d+Tp6sbDA=)
2: zQkyvbYQhcdt1kXB5263ERdUe5M.crl (hash: frRtkngQsROg3YAQq9JtgLs9jz9hVupzdtkzj/gA674=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/0a8b1f-ca72-4eda-a717-482c86db2040/1/zQkyvbYQhcdt1kXB5263ERdUe5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/0a8b1f-ca72-4eda-a717-482c86db2040/1/zQkyvbYQhcdt1kXB5263ERdUe5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/zQkyvbYQhcdt1kXB5263ERdUe5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0f:0d:ad:0f:44:7f:d1:6a:a1:88:d7:6c:33:f3:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd0932bdb61085c76dd645c1e76eb71117547b93
Validity
Not Before: Oct 19 06:01:31 2025 GMT
Not After : Oct 20 06:01:31 2025 GMT
Subject: CN=6e214b2e489d062a04d662bd9f0c7837ca5377b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:15:47:f1:7d:77:48:a1:5a:dc:a7:6d:f0:21:
66:b9:40:23:dc:9f:a9:c5:2f:2a:4d:47:af:d4:e4:
ab:c9:d3:dd:ca:32:75:99:b9:80:24:39:a1:e2:0b:
98:92:b5:f3:4b:16:55:31:d6:19:35:11:87:62:e6:
8e:c0:67:39:4c:05:67:fb:69:b0:8b:a5:30:37:f9:
62:fe:4c:3b:34:6c:62:6e:35:96:f2:5a:8a:ee:64:
02:0f:91:dc:09:e3:1e:bf:9a:60:d1:a8:d7:6b:e1:
9b:90:eb:6b:02:d1:9e:f5:71:f7:ed:87:70:9b:f5:
10:60:98:eb:26:bd:6c:19:63:97:ae:ad:82:9a:7e:
4a:f3:bc:56:95:68:df:50:ac:16:b8:d6:e8:3a:fd:
8b:f1:49:4b:9a:bd:a2:08:fc:6a:2a:a1:99:ba:b9:
19:6c:5e:eb:46:b0:32:df:d8:e1:b1:fe:37:39:1c:
ef:72:24:ed:cf:19:94:ac:c7:f3:fb:26:62:a3:01:
73:57:94:04:52:7b:ad:6d:61:21:37:72:65:2c:0b:
6c:53:17:f6:64:42:79:7f:07:67:94:0d:51:ce:b3:
13:27:e4:fc:1a:cc:20:9e:b1:f8:b3:a0:67:8d:e2:
31:38:ea:91:38:8d:fd:c2:98:b8:77:ec:bb:01:14:
c3:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:21:4B:2E:48:9D:06:2A:04:D6:62:BD:9F:0C:78:37:CA:53:77:B1
X509v3 Authority Key Identifier:
keyid:CD:09:32:BD:B6:10:85:C7:6D:D6:45:C1:E7:6E:B7:11:17:54:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQkyvbYQhcdt1kXB5263ERdUe5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0a8b1f-ca72-4eda-a717-482c86db2040/1/zQkyvbYQhcdt1kXB5263ERdUe5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0a8b1f-ca72-4eda-a717-482c86db2040/1/zQkyvbYQhcdt1kXB5263ERdUe5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:e7:33:80:bf:96:b4:b7:18:53:cf:28:87:ff:7a:6d:be:e7:
bb:42:aa:4a:d3:1a:5e:65:51:1c:bf:e1:2e:5c:b9:75:c4:67:
0f:2b:1a:9c:9a:77:95:c9:39:f0:67:9f:85:2b:53:0f:f1:29:
bc:c0:05:7e:69:a7:15:1b:3c:c2:00:f8:f2:81:65:6b:4e:d0:
50:07:23:e6:6e:8a:93:36:78:91:90:a4:42:6d:d6:69:7a:5e:
91:2f:17:4c:2a:c8:cc:e6:0c:ea:4c:77:c8:6e:bd:09:87:2e:
ce:96:86:1a:04:fd:07:1d:7a:ec:fb:5e:00:06:1a:04:52:63:
df:3e:10:f0:f7:2a:a3:4c:6f:e2:be:c3:eb:b0:02:7d:c3:87:
3c:9d:2e:b2:bc:e6:12:c9:bb:ad:eb:e3:d4:ff:ae:e2:f8:40:
32:bb:01:81:2c:32:3a:49:f8:4b:8f:98:f8:63:17:d8:01:ce:
a1:fc:73:1b:37:94:25:39:a6:d2:b5:9b:e7:e3:31:4d:ca:9b:
e1:35:ca:dd:14:ac:b4:33:b3:22:e4:e8:bd:0c:b3:78:39:e0:
df:f9:24:fa:c6:c4:62:3a:17:4a:c8:cc:b3:08:fe:8e:32:fb:
7e:1f:b7:f6:60:df:0e:7f:4c:b7:8f:06:a7:ce:33:c2:b1:48:
65:af:23:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:36 2025 by rpki-client