Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/6b1ea5-3f79-49ca-b985-57a5f3289992/1/ze5dkAYfoqckw2dCWGxinUceek0.mft
File: ze5dkAYfoqckw2dCWGxinUceek0.mft (raw, json)
Hash identifier: IIjpFYCoaHKE4CsS3QPSTuX/TaNgJnCm1xermSVrBpw=
Subject key identifier: 50:3F:C1:D0:66:A4:8A:58:F3:0D:3A:52:AB:B5:C8:B9:D5:C8:3C:8A
Authority key identifier: CD:EE:5D:90:06:1F:A2:A7:24:C3:67:42:58:6C:62:9D:47:1E:7A:4D
Certificate issuer: /CN=cdee5d90061fa2a724c36742586c629d471e7a4d
Certificate serial: 0199FBEBEAF6F681EC7241C0C821CDFEBE7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ze5dkAYfoqckw2dCWGxinUceek0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/6b1ea5-3f79-49ca-b985-57a5f3289992/1/ze5dkAYfoqckw2dCWGxinUceek0.mft
Manifest number: 0BE9
Signing time: Sun 19 Oct 2025 10:02:46 +0000
Manifest this update: Sun 19 Oct 2025 10:02:46 +0000
Manifest next update: Mon 20 Oct 2025 10:02:46 +0000
Files and hashes: 1: j_xflR4S2WvglBWH8M3t9MideIU.roa (hash: Cyel9g1MztQmxzP3oBvWVirfHDPFN3Z5801vcO4qaLk=)
2: ze5dkAYfoqckw2dCWGxinUceek0.crl (hash: GbRZQFNNKiabTGIZsd9cr3SB9EiBqBnvljt1GdJ6sJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/6b1ea5-3f79-49ca-b985-57a5f3289992/1/ze5dkAYfoqckw2dCWGxinUceek0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/6b1ea5-3f79-49ca-b985-57a5f3289992/1/ze5dkAYfoqckw2dCWGxinUceek0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ze5dkAYfoqckw2dCWGxinUceek0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:ea:f6:f6:81:ec:72:41:c0:c8:21:cd:fe:be:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdee5d90061fa2a724c36742586c629d471e7a4d
Validity
Not Before: Oct 19 10:02:46 2025 GMT
Not After : Oct 20 10:02:46 2025 GMT
Subject: CN=503fc1d066a48a58f30d3a52abb5c8b9d5c83c8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6e:84:37:36:1b:dd:e4:1f:68:47:33:49:55:
6d:3c:5b:31:bf:db:08:1a:4c:07:74:69:74:70:29:
2a:0c:3e:53:62:e6:49:e4:80:aa:d8:31:ba:f6:94:
f0:7f:80:99:1e:68:c4:15:9a:19:7c:7a:65:2f:db:
cd:4b:3b:92:ff:1f:2c:0d:aa:b2:44:e6:e5:eb:68:
b7:65:e6:b4:c9:25:93:bc:d8:7c:0e:f9:85:c9:e9:
19:d9:c7:81:3c:1a:99:a1:c4:7d:e6:92:b1:de:74:
cb:9e:96:0e:3c:01:f6:20:22:fc:43:7e:0c:d1:4a:
ce:09:b4:84:29:81:9d:b4:cf:fe:67:44:fc:9a:f9:
fe:ae:e6:8c:d4:3b:eb:14:a4:38:8f:e8:02:5c:5c:
60:c5:5c:b3:72:08:62:6e:fc:3a:e5:15:31:fe:c0:
f6:05:db:95:a9:86:ed:61:63:dd:31:84:7e:f9:fc:
cf:2c:de:0f:57:8e:34:09:29:99:94:dc:46:51:0d:
07:c9:12:21:0c:ee:f5:46:5b:3d:b8:72:75:9f:66:
3d:7a:27:d6:66:08:1e:c1:0e:43:d1:38:f2:38:54:
03:fe:8a:35:da:6e:c5:ec:78:bb:29:b1:4f:15:4e:
2b:3b:ce:9b:89:98:37:a4:cd:0d:86:cc:91:96:87:
92:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:3F:C1:D0:66:A4:8A:58:F3:0D:3A:52:AB:B5:C8:B9:D5:C8:3C:8A
X509v3 Authority Key Identifier:
keyid:CD:EE:5D:90:06:1F:A2:A7:24:C3:67:42:58:6C:62:9D:47:1E:7A:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ze5dkAYfoqckw2dCWGxinUceek0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/6b1ea5-3f79-49ca-b985-57a5f3289992/1/ze5dkAYfoqckw2dCWGxinUceek0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/6b1ea5-3f79-49ca-b985-57a5f3289992/1/ze5dkAYfoqckw2dCWGxinUceek0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:88:a0:3b:c4:b0:45:bc:0e:50:51:51:74:c8:5a:14:3a:a0:
0c:90:33:48:e2:c2:15:b0:50:94:cc:67:49:5c:01:d2:0c:6a:
ec:1e:50:86:1c:30:07:45:a0:ad:6c:11:97:87:a0:5d:3e:f4:
06:a5:ca:dd:2b:b9:f5:0b:a8:32:55:15:5d:e1:35:c4:3e:3e:
d4:37:90:b9:6a:09:71:09:c2:2e:bf:72:57:b7:46:22:ac:a7:
ef:65:36:9e:17:68:66:01:9c:12:a5:a8:33:00:2b:d4:80:33:
46:02:6c:f5:d5:bb:12:c8:1e:87:48:3f:7e:d2:32:5b:c4:06:
fd:3e:02:7d:c9:a9:75:9d:6e:cf:70:12:73:7a:60:6e:5e:c8:
12:4a:6f:ec:66:72:f0:ef:a0:23:80:d4:2d:07:c8:9a:24:cf:
63:43:4f:77:67:e3:ab:89:e0:54:15:59:56:64:c9:62:f6:22:
2d:90:82:6d:26:b9:f9:00:c4:4e:d6:c1:2f:0d:37:3a:c5:ff:
67:af:76:6b:2d:7e:b7:9f:b1:01:3d:c9:71:ee:a0:1a:32:80:
ed:b8:f9:da:6c:ce:89:38:d6:26:84:8b:67:d7:b4:4d:9d:2d:
7a:7e:f3:e4:71:46:53:8c:ce:43:80:58:2e:70:d0:99:3c:f3:
87:7a:a5:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:37:02 2025 by rpki-client