
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/3e3483-1845-442d-a59a-dd72550d78ac/1/zQHNoDArgT6xRVea2B9e19KcAgk.mft
File: zQHNoDArgT6xRVea2B9e19KcAgk.mft (raw, json)
Hash identifier: wsGA4KlBLCNprwrEntCZXzu7dST1XxuJqzkawS+/9AE=
Subject key identifier: B2:53:C1:8D:92:14:77:55:4C:51:B4:4B:6D:5F:B2:CE:CD:50:1D:4B
Authority key identifier: CD:01:CD:A0:30:2B:81:3E:B1:45:57:9A:D8:1F:5E:D7:D2:9C:02:09
Certificate issuer: /CN=cd01cda0302b813eb145579ad81f5ed7d29c0209
Certificate serial: 0199FDD98D5F63A4B08FA990F9E29729063E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zQHNoDArgT6xRVea2B9e19KcAgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/3e3483-1845-442d-a59a-dd72550d78ac/1/zQHNoDArgT6xRVea2B9e19KcAgk.mft
Manifest number: 0C32
Signing time: Sun 19 Oct 2025 19:01:57 +0000
Manifest this update: Sun 19 Oct 2025 19:01:57 +0000
Manifest next update: Mon 20 Oct 2025 19:01:57 +0000
Files and hashes: 1: 0CX7t2odLe1-aKNEQm4nhIdzG64.roa (hash: uGt7n5BK6nTit2QXoLjymR88j/L4jwCXMbpw123vP/Q=)
2: zQHNoDArgT6xRVea2B9e19KcAgk.crl (hash: brqd6ej0L7v13ClwLRnHb5VgXx9jOJZ1uJeWbuAedy0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/3e3483-1845-442d-a59a-dd72550d78ac/1/zQHNoDArgT6xRVea2B9e19KcAgk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/3e3483-1845-442d-a59a-dd72550d78ac/1/zQHNoDArgT6xRVea2B9e19KcAgk.mft
rsync://rpki.ripe.net/repository/DEFAULT/zQHNoDArgT6xRVea2B9e19KcAgk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:8d:5f:63:a4:b0:8f:a9:90:f9:e2:97:29:06:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd01cda0302b813eb145579ad81f5ed7d29c0209
Validity
Not Before: Oct 19 19:01:57 2025 GMT
Not After : Oct 20 19:01:57 2025 GMT
Subject: CN=b253c18d921477554c51b44b6d5fb2cecd501d4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f6:6d:12:bd:df:8a:a8:5f:cb:05:56:66:e7:
fc:75:7a:91:06:9c:de:83:d5:5b:a3:19:4f:e4:89:
23:67:63:20:fa:a1:fa:81:7c:a1:05:d9:f7:a9:f6:
84:d4:6a:be:93:02:2a:c9:e2:eb:70:71:a5:6b:7f:
4e:b5:4a:11:91:d9:77:26:f4:79:3e:8d:f6:13:13:
32:d3:6c:49:bf:5e:66:78:09:a6:f9:6c:33:7c:c6:
20:f9:99:df:32:9a:8c:f6:4e:39:e1:f6:ce:10:38:
b1:ae:a5:8c:a8:03:60:e5:18:cb:54:d6:fb:e7:d1:
ef:c2:73:7b:f6:c3:c5:64:9d:51:d4:91:a0:42:27:
ed:69:af:ed:3d:45:67:84:14:fd:c8:c4:16:0f:4d:
22:a5:a5:02:e1:6e:06:af:a2:3d:2c:47:02:08:db:
2b:32:4d:1f:c6:68:6a:5b:ff:c8:8a:24:fa:9e:c7:
b0:c8:0f:ee:e0:b0:48:52:43:f2:c2:26:a3:9c:cd:
23:93:17:05:dd:d7:f9:46:2f:37:cb:89:d1:cf:6b:
2e:e7:cc:42:61:b8:ef:b5:f4:fd:67:88:4b:c5:7e:
de:ff:56:63:3e:9f:1a:62:c3:ce:28:08:1c:e4:f4:
4e:05:86:8b:72:02:c1:18:d9:1d:39:88:b4:54:3d:
e4:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:53:C1:8D:92:14:77:55:4C:51:B4:4B:6D:5F:B2:CE:CD:50:1D:4B
X509v3 Authority Key Identifier:
keyid:CD:01:CD:A0:30:2B:81:3E:B1:45:57:9A:D8:1F:5E:D7:D2:9C:02:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQHNoDArgT6xRVea2B9e19KcAgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/3e3483-1845-442d-a59a-dd72550d78ac/1/zQHNoDArgT6xRVea2B9e19KcAgk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/3e3483-1845-442d-a59a-dd72550d78ac/1/zQHNoDArgT6xRVea2B9e19KcAgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:5d:35:7d:36:78:c6:52:88:57:da:f6:45:35:63:5f:1c:19:
21:90:e2:46:97:c7:d6:d4:3a:be:f0:2b:d0:23:59:76:5b:36:
23:46:97:92:05:29:a6:24:4d:4d:42:da:c6:00:c6:e2:3a:12:
c3:b8:e6:09:c3:7c:f2:ea:06:cd:76:84:ef:52:bd:3a:d3:09:
0c:5c:79:0f:89:9d:1a:a9:38:3f:e5:c6:44:de:10:9c:47:32:
c1:17:e0:b3:e0:09:79:cd:c2:bb:df:3c:38:31:48:31:bd:4e:
3c:c0:db:a8:52:12:5d:d7:96:d8:70:9b:c9:8f:48:7e:7e:20:
28:a9:3c:91:01:9a:40:99:48:e6:f2:f6:58:42:1b:84:f0:49:
f2:8a:93:45:02:84:e9:34:e7:cc:b5:4f:f1:4f:4c:df:71:b4:
68:a4:22:67:b6:81:d1:fd:70:7d:b5:b5:ec:f0:9e:fe:6a:c7:
44:a0:9d:08:59:a7:ff:10:ff:81:b1:1d:61:4e:78:b8:28:e9:
db:77:af:d6:f5:4e:92:db:43:97:c4:3c:e8:c4:bb:7d:f9:0b:
3a:0d:71:18:e6:90:66:55:e9:4b:94:41:a4:b9:5b:c8:78:c7:
cc:13:d2:95:c6:e6:7e:26:ca:f4:d7:23:49:c9:78:3a:0c:51:
73:9f:2c:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:16:31 2025 by rpki-client