Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/5bf30d-69eb-41a4-a90d-21b9f12d22f3/1/ZpT1sPq1_tLflTXiqcAp8YfVVAQ.mft
File: ZpT1sPq1_tLflTXiqcAp8YfVVAQ.mft (raw, json)
Hash identifier: K3Q3KCDaDo+4QKq4Fo+5z6H0FaW44TWTL0jMxmSRYZ0=
Subject key identifier: 1D:C3:16:40:DE:B7:B9:8B:72:47:C2:03:A4:70:25:8A:7D:24:C0:59
Authority key identifier: 66:94:F5:B0:FA:B5:FE:D2:DF:95:35:E2:A9:C0:29:F1:87:D5:54:04
Certificate issuer: /CN=6694f5b0fab5fed2df9535e2a9c029f187d55404
Certificate serial: 019A503DD28836E03AA36DDC58918F0C9D31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZpT1sPq1_tLflTXiqcAp8YfVVAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/5bf30d-69eb-41a4-a90d-21b9f12d22f3/1/ZpT1sPq1_tLflTXiqcAp8YfVVAQ.mft
Manifest number: 082D
Signing time: Tue 04 Nov 2025 19:00:19 +0000
Manifest this update: Tue 04 Nov 2025 19:00:19 +0000
Manifest next update: Wed 05 Nov 2025 19:00:19 +0000
Files and hashes: 1: 1s99Tw3afz1xnVyZeR8lNzEPEk8.roa (hash: b6Tn8In4pLbU3Aif4BcpGyzCXnOKH3eVjkyvFPcCx0s=)
2: ZpT1sPq1_tLflTXiqcAp8YfVVAQ.crl (hash: 8f4MKkIuJocrVG7Z/8ffWvxk4oVEWr1+txc+sgDYjrk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/5bf30d-69eb-41a4-a90d-21b9f12d22f3/1/ZpT1sPq1_tLflTXiqcAp8YfVVAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/5bf30d-69eb-41a4-a90d-21b9f12d22f3/1/ZpT1sPq1_tLflTXiqcAp8YfVVAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZpT1sPq1_tLflTXiqcAp8YfVVAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3d:d2:88:36:e0:3a:a3:6d:dc:58:91:8f:0c:9d:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6694f5b0fab5fed2df9535e2a9c029f187d55404
Validity
Not Before: Nov 4 19:00:19 2025 GMT
Not After : Nov 5 19:00:19 2025 GMT
Subject: CN=1dc31640deb7b98b7247c203a470258a7d24c059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:18:a7:f2:98:99:2b:9f:20:e8:11:51:6f:0a:
53:89:b3:34:5b:9f:6f:f1:de:0c:33:cc:49:ea:c5:
16:b8:e1:3f:ff:7e:16:be:0d:5a:0d:51:d8:ad:5f:
d3:62:fa:8a:93:42:8e:ee:50:30:c9:b5:70:ec:22:
06:06:b7:40:13:98:b6:27:8f:84:7f:c1:aa:f5:64:
35:63:55:be:8a:3e:d4:86:a8:e8:a0:da:17:77:53:
a7:93:f4:af:11:b7:5f:26:6c:2c:2b:f5:a1:91:dd:
a0:38:33:fa:55:a6:c2:e7:ba:80:43:b2:7a:e4:4c:
c2:8c:a1:3b:ba:44:3e:a8:55:ed:c2:81:3e:e3:9c:
81:4f:5a:dd:d5:27:6a:27:7b:6d:3b:46:88:81:83:
84:37:e9:53:b8:ee:a3:a0:34:ae:c1:27:c3:b1:04:
4c:a0:79:74:8b:80:86:60:4c:02:c8:ee:7f:db:c1:
01:f4:c4:cf:4e:89:94:7c:1d:87:d0:e4:b2:9b:94:
2e:13:60:d1:41:08:cc:ba:35:b7:5e:5f:3b:45:fb:
37:3c:16:7b:e7:06:a9:ed:50:a2:a9:97:e3:95:b9:
27:29:f4:96:c2:b3:25:42:1b:02:63:5c:ad:18:48:
6c:fb:b5:a5:a1:7d:e6:8c:bf:17:97:1b:c4:d0:db:
c5:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:C3:16:40:DE:B7:B9:8B:72:47:C2:03:A4:70:25:8A:7D:24:C0:59
X509v3 Authority Key Identifier:
keyid:66:94:F5:B0:FA:B5:FE:D2:DF:95:35:E2:A9:C0:29:F1:87:D5:54:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZpT1sPq1_tLflTXiqcAp8YfVVAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/5bf30d-69eb-41a4-a90d-21b9f12d22f3/1/ZpT1sPq1_tLflTXiqcAp8YfVVAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/5bf30d-69eb-41a4-a90d-21b9f12d22f3/1/ZpT1sPq1_tLflTXiqcAp8YfVVAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:c2:7e:f6:1c:00:22:d0:aa:6c:98:d0:2b:f4:12:10:90:1f:
56:08:6e:6d:b7:48:91:fa:bc:98:97:ed:ba:f8:ee:3c:46:d8:
1c:46:cf:b8:f6:57:b8:68:c2:12:2b:98:a9:fa:93:97:0c:f6:
9e:f6:d0:74:e3:8a:aa:ef:85:c7:4f:21:46:37:c1:f4:b8:e0:
ce:e0:ee:75:22:fa:c7:8c:4d:9e:43:6f:4b:c7:d5:1e:e9:d5:
df:75:9b:a0:5f:48:75:a7:22:2e:3a:12:36:51:f3:4b:7d:21:
55:31:35:97:5f:f9:dd:38:45:47:1e:3d:50:21:6c:9a:86:68:
bd:1f:76:50:ef:8c:cd:55:7f:81:43:4f:2f:b0:05:e9:e4:b1:
41:09:2d:b4:60:d5:06:ae:d5:90:5c:18:1f:8d:2c:6b:18:f9:
a3:47:9e:d4:97:22:be:34:67:95:46:a7:d1:14:56:ac:a5:78:
60:e5:38:d8:4b:7d:87:8f:a6:f5:d6:8f:42:0e:92:f3:4f:b7:
62:b8:44:87:7c:49:ce:a3:c6:b0:6d:ff:f6:b7:e0:96:d3:c3:
e6:8a:c7:3d:ac:c5:75:6d:71:a8:26:0d:6b:37:11:e9:f2:75:
95:d5:d9:ff:ac:d6:bd:bc:5a:77:5e:fb:c6:c0:67:24:f7:92:
27:d5:b8:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:37:02 2025 by rpki-client