Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/zoqNQOQ3rfSs182zjgQCR3ouUaY.mft
File: zoqNQOQ3rfSs182zjgQCR3ouUaY.mft (raw, json)
Hash identifier: zVOii0Uy9PN+L89K1qiXdcm8WfnyAaVEacJMxsiImdE=
Subject key identifier: 71:B9:AD:37:18:1D:F6:AB:9D:18:A5:1A:B0:4B:B7:C6:1D:01:FE:81
Authority key identifier: CE:8A:8D:40:E4:37:AD:F4:AC:D7:CD:B3:8E:04:02:47:7A:2E:51:A6
Certificate issuer: /CN=ce8a8d40e437adf4acd7cdb38e0402477a2e51a6
Certificate serial: 019A04B5B390458FD2453527ADA06BD277A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zoqNQOQ3rfSs182zjgQCR3ouUaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/zoqNQOQ3rfSs182zjgQCR3ouUaY.mft
Manifest number: 09F9
Signing time: Tue 21 Oct 2025 03:00:08 +0000
Manifest this update: Tue 21 Oct 2025 03:00:08 +0000
Manifest next update: Wed 22 Oct 2025 03:00:08 +0000
Files and hashes: 1: ZU0tNOC8sQ8jU4fobxNoGMM10f0.roa (hash: QwRQZ/MqRHfZYgeS/1/5p5EaEsQfSDsz5C+SoKx9QXA=)
2: tBAnS3ymUAQmGfi4CNowsEWHdl4.roa (hash: cxNoVhZk6fGnu1pynsqNRKY+P3+OdQAptw2DD5peCyU=)
3: zoqNQOQ3rfSs182zjgQCR3ouUaY.crl (hash: oBwSf7fWNUq8aWrA3hWfsH7C5adCVcoehybMtDvwJms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/zoqNQOQ3rfSs182zjgQCR3ouUaY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/zoqNQOQ3rfSs182zjgQCR3ouUaY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zoqNQOQ3rfSs182zjgQCR3ouUaY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:04:b5:b3:90:45:8f:d2:45:35:27:ad:a0:6b:d2:77:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce8a8d40e437adf4acd7cdb38e0402477a2e51a6
Validity
Not Before: Oct 21 03:00:08 2025 GMT
Not After : Oct 22 03:00:08 2025 GMT
Subject: CN=71b9ad37181df6ab9d18a51ab04bb7c61d01fe81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:75:6d:5e:b3:1c:b0:79:eb:a7:67:9c:7a:3b:
65:2d:4f:79:ef:03:ee:1c:cc:21:e6:f0:80:15:f1:
9c:5e:d0:82:e8:0a:9d:eb:e8:ee:76:6c:33:57:48:
15:b4:84:60:be:4e:26:87:63:87:af:ee:4a:b4:e0:
62:dc:19:be:22:7e:c9:e0:54:24:5f:7c:1d:10:62:
0f:8a:63:fa:8e:3a:a3:56:2c:41:a0:a2:b2:58:fa:
d0:c4:d5:5c:20:1b:18:51:50:25:e1:c3:64:f4:a6:
92:5f:db:f1:04:da:0c:cf:bb:5d:75:40:e5:c7:6d:
97:7c:37:12:07:4d:93:7d:34:8a:83:33:a4:c6:54:
38:65:e8:95:0d:de:f6:e7:d8:79:84:d4:90:5b:92:
f5:fc:b5:e6:83:67:56:28:5a:83:c5:5f:c9:6a:8f:
50:2b:27:31:af:a7:cb:e4:cf:39:ba:ba:1e:12:1b:
9d:59:66:b8:e6:89:97:ed:4e:0b:42:85:04:98:64:
e3:f4:bd:c9:54:7d:30:32:a3:fe:df:e4:f5:b9:e5:
af:df:c5:ea:9b:79:16:e1:ef:45:75:eb:61:61:09:
53:4a:f6:c9:7c:96:de:39:7d:87:d5:e3:b8:df:11:
39:6e:cd:6f:7b:eb:d5:c9:2a:1c:47:86:50:e4:48:
ef:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:B9:AD:37:18:1D:F6:AB:9D:18:A5:1A:B0:4B:B7:C6:1D:01:FE:81
X509v3 Authority Key Identifier:
keyid:CE:8A:8D:40:E4:37:AD:F4:AC:D7:CD:B3:8E:04:02:47:7A:2E:51:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zoqNQOQ3rfSs182zjgQCR3ouUaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/zoqNQOQ3rfSs182zjgQCR3ouUaY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/zoqNQOQ3rfSs182zjgQCR3ouUaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:89:00:88:c5:8e:90:ed:cd:d1:cb:b5:b7:6f:31:23:e7:aa:
6c:a5:53:63:8d:40:2a:c2:e0:b2:cd:75:7d:f7:d3:a8:39:7a:
93:05:6c:ba:d7:ee:0d:28:99:b1:8a:b8:52:f4:1f:f8:24:84:
56:76:b0:4d:47:be:57:27:b7:32:43:ed:bb:a9:c1:a3:33:bd:
14:6c:e6:92:ec:85:83:b9:b4:f4:3e:86:12:ea:92:73:a7:13:
5c:57:25:d4:78:76:a3:41:b3:d1:52:e1:16:d6:92:4e:93:8c:
54:9d:ac:c1:65:9d:54:d6:cf:4e:34:c4:f7:9e:03:b3:4c:f0:
ad:5b:19:75:19:a9:d6:b4:5a:7f:7c:4e:55:d8:8b:0b:ec:7e:
a9:68:29:bd:88:cb:2e:76:78:b1:7e:cd:bd:6d:07:10:ef:6d:
83:78:de:e6:97:59:fc:a7:8d:5d:21:36:78:74:fe:93:eb:19:
cb:08:58:3f:af:24:51:55:78:6a:64:04:79:a6:e2:3b:92:65:
41:53:25:f3:9b:b8:05:c9:c9:b8:22:0b:21:e6:a0:2b:97:b2:
81:b3:2c:b2:f4:0c:49:22:f1:82:68:33:8c:a6:66:3d:c8:1b:
47:c6:49:d5:8f:87:7e:d6:6b:c4:b3:ca:91:a1:90:cc:dd:fb:
8c:28:01:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 07:17:33 2025 by rpki-client