Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/ed3d4a-704f-4aa4-821f-dcd5e9478084/1/ZD2vEi46h6yqb9tiw1olKhmaWNk.mft
File: ZD2vEi46h6yqb9tiw1olKhmaWNk.mft (raw, json)
Hash identifier: W6d1qAym+quzx/DmZPVs6zyaDpwQY1KtQhZa5U85VkQ=
Subject key identifier: 79:11:F0:5F:CB:58:82:3A:01:9D:4E:3B:A1:FB:72:8D:DA:CF:9B:A2
Authority key identifier: 64:3D:AF:12:2E:3A:87:AC:AA:6F:DB:62:C3:5A:25:2A:19:9A:58:D9
Certificate issuer: /CN=643daf122e3a87acaa6fdb62c35a252a199a58d9
Certificate serial: 019A4DAAEBFA0EB75CD24BBA5FC74607222E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZD2vEi46h6yqb9tiw1olKhmaWNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/ed3d4a-704f-4aa4-821f-dcd5e9478084/1/ZD2vEi46h6yqb9tiw1olKhmaWNk.mft
Manifest number: 0E8F
Signing time: Tue 04 Nov 2025 07:00:38 +0000
Manifest this update: Tue 04 Nov 2025 07:00:38 +0000
Manifest next update: Wed 05 Nov 2025 07:00:38 +0000
Files and hashes: 1: 5y54voFpQemaWdhJdL3R6I-ZfdY.roa (hash: 0q0hdM7ItmEN9aXgu0xUxeLxjebZjyz7UrwOiAMpRFI=)
2: ZD2vEi46h6yqb9tiw1olKhmaWNk.crl (hash: bKnKZ90fW7rgY3uUL2GKdb5I1mQoqPD349tdYQ5Sswk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/ed3d4a-704f-4aa4-821f-dcd5e9478084/1/ZD2vEi46h6yqb9tiw1olKhmaWNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/ed3d4a-704f-4aa4-821f-dcd5e9478084/1/ZD2vEi46h6yqb9tiw1olKhmaWNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZD2vEi46h6yqb9tiw1olKhmaWNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:eb:fa:0e:b7:5c:d2:4b:ba:5f:c7:46:07:22:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=643daf122e3a87acaa6fdb62c35a252a199a58d9
Validity
Not Before: Nov 4 07:00:38 2025 GMT
Not After : Nov 5 07:00:38 2025 GMT
Subject: CN=7911f05fcb58823a019d4e3ba1fb728ddacf9ba2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8d:b7:7c:5f:b1:dc:fa:ce:a7:00:d4:e5:04:
f9:c0:41:3c:ec:e9:c4:86:25:dd:fa:88:88:c2:fc:
b9:50:c3:20:a6:64:fa:47:13:42:ae:3b:d8:77:a4:
7d:3b:f3:da:c7:49:11:f0:7f:c3:b4:8b:f5:8d:38:
5d:7f:45:ae:4d:94:06:18:b2:75:57:3a:cc:a3:da:
ea:31:78:db:be:69:46:bb:7b:d5:b4:e4:12:98:14:
b5:8e:ba:05:49:46:b9:ff:53:02:12:da:93:59:65:
89:79:ac:72:f8:25:5d:7d:47:04:b2:41:2b:ef:38:
ab:f3:8e:64:db:2b:db:10:ef:ce:a8:fd:01:97:ea:
1f:94:25:f6:43:7c:6f:f4:81:73:9f:86:2f:ee:bf:
75:e7:9e:db:b2:f8:2a:2a:ef:08:47:e8:28:ee:e9:
18:11:04:aa:81:d6:cd:36:ca:76:00:b9:08:a4:ab:
66:d1:a8:33:58:7c:ca:36:69:9a:0f:a9:3e:c3:d1:
36:8e:7e:1f:ff:d9:94:4d:2d:4e:dd:51:12:0e:ca:
f0:e0:00:dd:cc:87:17:4d:80:ea:28:d9:72:01:80:
bf:7a:55:a6:a0:fc:70:36:c8:d1:de:47:9a:1e:b3:
19:c4:b0:3a:fd:2e:5e:d2:3d:87:dd:03:bf:1c:bc:
b8:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:11:F0:5F:CB:58:82:3A:01:9D:4E:3B:A1:FB:72:8D:DA:CF:9B:A2
X509v3 Authority Key Identifier:
keyid:64:3D:AF:12:2E:3A:87:AC:AA:6F:DB:62:C3:5A:25:2A:19:9A:58:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZD2vEi46h6yqb9tiw1olKhmaWNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/ed3d4a-704f-4aa4-821f-dcd5e9478084/1/ZD2vEi46h6yqb9tiw1olKhmaWNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/ed3d4a-704f-4aa4-821f-dcd5e9478084/1/ZD2vEi46h6yqb9tiw1olKhmaWNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:ed:e7:7e:0c:f5:7c:23:56:b6:20:72:5b:62:d2:eb:43:57:
fc:75:aa:0d:ca:ec:ab:6d:8c:42:82:74:59:8b:2a:c6:3f:76:
15:b9:c1:8d:ff:85:77:89:df:9a:b5:26:55:16:f9:e7:5f:54:
07:de:4f:5d:35:48:7d:9b:a8:30:ea:04:e1:d5:30:de:42:ae:
8f:e2:42:02:32:1c:cc:54:9f:d1:73:59:45:59:a3:ac:a7:c5:
f2:68:c2:3c:d0:69:0a:55:6e:8e:1e:4d:ee:5e:af:13:e9:2e:
a5:d0:d2:97:80:3b:7e:09:c7:81:cc:1a:f0:94:73:97:7c:af:
a8:2c:ce:14:ee:4f:90:87:f0:f4:1b:2f:d7:91:77:15:6c:53:
69:c9:27:b9:56:cb:ed:c8:c4:5f:ba:a6:6e:df:6f:19:18:9c:
60:80:e4:81:0f:40:21:c4:d9:84:02:43:e4:31:09:6f:86:e6:
cc:ea:bf:eb:91:fe:75:64:3f:73:b9:d4:91:e4:2e:18:26:fe:
d3:85:10:ef:a6:68:39:fe:d3:b0:0b:86:04:e2:a1:3a:ec:5a:
b6:ad:f8:9e:64:56:6b:92:c6:3c:08:e3:04:75:a6:51:76:04:
9b:74:68:c6:16:2a:eb:21:a5:93:c8:f8:14:70:06:62:82:e6:
42:1c:03:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:43 2025 by rpki-client