Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/1e4a1c-b14c-46b5-87cc-5d14a0ff6dee/1/zGQrH13XOvfTrQVIfghgAd_5suc.mft
File: zGQrH13XOvfTrQVIfghgAd_5suc.mft (raw, json)
Hash identifier: rsrG/W3V2Cy2bT/8ouCJPyHDXYg024EKj1o+eY030I8=
Subject key identifier: 96:4C:91:7A:9E:2C:02:08:4C:7F:23:06:BA:0C:80:42:F4:D0:A9:91
Authority key identifier: CC:64:2B:1F:5D:D7:3A:F7:D3:AD:05:48:7E:08:60:01:DF:F9:B2:E7
Certificate issuer: /CN=cc642b1f5dd73af7d3ad05487e086001dff9b2e7
Certificate serial: 0199FB0F0514EAAA87D0699679D87B6BA8A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zGQrH13XOvfTrQVIfghgAd_5suc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/1e4a1c-b14c-46b5-87cc-5d14a0ff6dee/1/zGQrH13XOvfTrQVIfghgAd_5suc.mft
Manifest number: 04A7
Signing time: Sun 19 Oct 2025 06:01:29 +0000
Manifest this update: Sun 19 Oct 2025 06:01:29 +0000
Manifest next update: Mon 20 Oct 2025 06:01:29 +0000
Files and hashes: 1: BBmeL_y8dFZnZVsyof-5HOdh9rM.roa (hash: l+ylGzhBzhl0JipTi0n6QhNTnBVAyKKM7zWtPfY+z3s=)
2: zGQrH13XOvfTrQVIfghgAd_5suc.crl (hash: uQy2qmcNI6XBNvX2mhih9WhAP2XTkZfq4nbY57RjWx4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/1e4a1c-b14c-46b5-87cc-5d14a0ff6dee/1/zGQrH13XOvfTrQVIfghgAd_5suc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/1e4a1c-b14c-46b5-87cc-5d14a0ff6dee/1/zGQrH13XOvfTrQVIfghgAd_5suc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zGQrH13XOvfTrQVIfghgAd_5suc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0f:05:14:ea:aa:87:d0:69:96:79:d8:7b:6b:a8:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc642b1f5dd73af7d3ad05487e086001dff9b2e7
Validity
Not Before: Oct 19 06:01:29 2025 GMT
Not After : Oct 20 06:01:29 2025 GMT
Subject: CN=964c917a9e2c02084c7f2306ba0c8042f4d0a991
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:47:41:4c:b6:b1:b2:c1:c8:b6:ff:1a:5e:49:
28:3f:61:0b:6a:37:ff:76:13:60:5f:44:2b:78:87:
35:15:57:cd:ab:01:28:e9:08:60:da:6a:92:69:26:
cc:02:83:da:8f:76:ac:be:35:cc:d9:52:7c:24:ad:
33:fd:6b:bf:b9:cb:8c:e7:ce:4b:d3:cd:8b:a0:96:
aa:ce:ea:17:a7:b6:61:05:87:74:ae:b3:ed:83:40:
c6:1d:85:66:62:9b:56:9c:17:37:d4:bb:0f:60:46:
20:e5:32:2b:21:5a:33:0d:da:6d:20:ab:9d:f0:f1:
8b:b7:05:d0:2b:1a:80:78:45:9b:f1:d1:52:00:53:
27:ee:e6:b5:c1:fd:9b:11:96:34:8e:fb:b4:1a:9f:
09:90:13:03:5c:34:3e:f7:d0:58:bb:7b:38:43:ab:
74:e4:8d:c9:34:15:0f:c9:9c:17:cd:a5:31:da:f3:
d3:3b:0f:9d:0a:9d:50:1b:fe:05:ed:25:c0:25:86:
22:78:1a:1d:e8:7f:51:34:6f:cc:f3:94:5b:08:d4:
37:bc:c0:0c:8e:11:b5:37:7b:89:18:d8:b5:b6:0b:
3f:10:90:bc:eb:4a:d3:6f:e1:62:37:ce:da:c7:bf:
ba:2b:7a:36:60:55:4a:df:23:6b:3f:29:ac:ef:d6:
90:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:4C:91:7A:9E:2C:02:08:4C:7F:23:06:BA:0C:80:42:F4:D0:A9:91
X509v3 Authority Key Identifier:
keyid:CC:64:2B:1F:5D:D7:3A:F7:D3:AD:05:48:7E:08:60:01:DF:F9:B2:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zGQrH13XOvfTrQVIfghgAd_5suc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/1e4a1c-b14c-46b5-87cc-5d14a0ff6dee/1/zGQrH13XOvfTrQVIfghgAd_5suc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/1e4a1c-b14c-46b5-87cc-5d14a0ff6dee/1/zGQrH13XOvfTrQVIfghgAd_5suc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:96:17:b8:6d:7b:75:44:c0:c4:69:ba:a4:bb:af:06:8d:5b:
66:00:91:d5:52:4d:63:22:d7:2d:0c:f9:c7:d4:82:3c:c5:89:
44:68:7e:73:51:50:5f:4c:a3:ca:73:2a:b6:64:0a:a4:f8:71:
82:e2:c2:ed:be:eb:7c:47:91:ae:c2:0a:91:89:81:71:1a:98:
c2:2e:e0:0b:57:a9:21:a2:ab:bc:ad:98:46:c5:9a:4e:85:b5:
71:d1:81:2c:f2:97:f4:c6:c7:d7:7f:4f:e7:73:88:30:f1:d6:
03:c2:23:f6:82:02:a2:67:c6:1c:97:d4:07:7f:2f:7b:fa:7b:
3f:a2:6f:6c:14:62:24:2e:e3:c2:56:85:c0:dd:3f:74:de:4c:
72:a2:69:de:95:7f:cf:14:4a:1f:d5:ee:40:72:f4:49:19:fd:
68:cd:4a:8a:1a:1f:a4:d0:88:f8:c5:6b:fb:f3:94:2e:d5:b7:
03:f6:6f:5d:a8:92:d1:8a:69:26:e2:30:b0:37:75:a9:67:57:
25:13:4d:91:e5:c5:eb:c7:31:44:55:71:f8:2c:b4:8f:1e:22:
79:c4:db:6a:d4:55:14:0f:a6:95:d5:90:c6:89:16:ad:64:e3:
81:b1:2a:dc:ab:8c:08:a2:a5:2b:2f:a3:1a:ca:f6:6a:df:4a:
8e:2c:92:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:28:30 2025 by rpki-client