Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/b2dd00-a621-49a9-bbab-37f9bf7861b6/1/Zckgon4-U6Nn-eqW23uve9Zag-o.mft
File: Zckgon4-U6Nn-eqW23uve9Zag-o.mft (raw, json)
Hash identifier: JFhYMzanVzdvVvENr2bhAuezzSO+nzU/LyNFSqHnmGw=
Subject key identifier: 50:83:57:A9:2D:39:52:18:D9:25:66:04:AC:81:88:B9:E2:E1:31:E4
Authority key identifier: 65:C9:20:A2:7E:3E:53:A3:67:F9:EA:96:DB:7B:AF:7B:D6:5A:83:EA
Certificate issuer: /CN=65c920a27e3e53a367f9ea96db7baf7bd65a83ea
Certificate serial: 019A4FCFF21DCEAA7EF016F920C5B7755B84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zckgon4-U6Nn-eqW23uve9Zag-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/b2dd00-a621-49a9-bbab-37f9bf7861b6/1/Zckgon4-U6Nn-eqW23uve9Zag-o.mft
Manifest number: 12B1
Signing time: Tue 04 Nov 2025 17:00:19 +0000
Manifest this update: Tue 04 Nov 2025 17:00:19 +0000
Manifest next update: Wed 05 Nov 2025 17:00:19 +0000
Files and hashes: 1: Zckgon4-U6Nn-eqW23uve9Zag-o.crl (hash: F35ZTMXtT+f0x6MQdnYWJN5ZE53Ct1cREmFSCwug9gs=)
2: fWdcwSs6zepV4nyngmDbMNEhJgc.roa (hash: xKdKIOHrNEbxshe+Nt7u4EYPgDXnCkWil6RpBaiRPJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/b2dd00-a621-49a9-bbab-37f9bf7861b6/1/Zckgon4-U6Nn-eqW23uve9Zag-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/b2dd00-a621-49a9-bbab-37f9bf7861b6/1/Zckgon4-U6Nn-eqW23uve9Zag-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zckgon4-U6Nn-eqW23uve9Zag-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:cf:f2:1d:ce:aa:7e:f0:16:f9:20:c5:b7:75:5b:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65c920a27e3e53a367f9ea96db7baf7bd65a83ea
Validity
Not Before: Nov 4 17:00:19 2025 GMT
Not After : Nov 5 17:00:19 2025 GMT
Subject: CN=508357a92d395218d9256604ac8188b9e2e131e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2f:2d:0f:17:1f:b8:87:ea:97:38:53:b5:96:
d2:59:0a:d6:21:d9:a2:40:5b:0d:6d:0c:47:df:fe:
29:df:1b:72:fe:48:cb:76:71:bf:e6:bd:d1:ad:36:
d6:60:35:5e:2f:7a:78:5a:7a:bc:ef:dd:47:1a:4a:
af:c9:76:ca:db:32:38:1d:f0:b1:a0:b1:0e:df:31:
54:02:eb:2d:66:3e:50:20:66:a9:69:d1:52:1a:05:
ab:01:e4:76:54:35:6c:60:26:67:0a:96:51:9d:4a:
48:ce:74:d3:d4:a2:7b:b2:d3:c7:d3:4a:f6:e6:3b:
ca:ca:a3:fd:c5:3e:fc:63:4e:40:f9:88:b9:c7:ab:
e7:8e:56:ee:ef:17:f8:06:d7:bd:91:ba:11:3c:92:
d2:df:85:f4:70:39:90:e0:5a:c9:35:aa:13:ef:89:
a2:57:70:28:94:11:1b:08:73:ba:55:c4:f2:fe:cb:
c5:84:19:e3:90:48:56:3f:46:bd:de:71:f1:00:f1:
4d:ba:68:04:98:20:57:11:55:29:ff:b2:32:f6:da:
5d:41:83:c6:1e:98:2d:5b:1c:7f:7f:fa:0e:2c:85:
ee:73:a0:fc:62:bc:e4:e6:e0:91:f0:a2:9c:83:41:
a7:0e:a6:aa:fd:84:20:95:e3:6f:42:b7:0f:57:f3:
ab:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:83:57:A9:2D:39:52:18:D9:25:66:04:AC:81:88:B9:E2:E1:31:E4
X509v3 Authority Key Identifier:
keyid:65:C9:20:A2:7E:3E:53:A3:67:F9:EA:96:DB:7B:AF:7B:D6:5A:83:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zckgon4-U6Nn-eqW23uve9Zag-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b2dd00-a621-49a9-bbab-37f9bf7861b6/1/Zckgon4-U6Nn-eqW23uve9Zag-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b2dd00-a621-49a9-bbab-37f9bf7861b6/1/Zckgon4-U6Nn-eqW23uve9Zag-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:ce:8b:eb:fe:30:e0:79:7b:f6:e8:ea:03:02:b1:95:b1:b1:
ac:b9:2a:ce:a6:10:d2:a1:7f:d2:0e:01:10:bb:8b:81:ca:60:
92:31:6b:7f:53:86:99:c5:ec:7a:38:fa:da:08:ba:03:83:ed:
a3:81:13:60:c2:8b:4d:45:8b:30:d2:20:16:e8:f6:6e:2d:8e:
a8:5a:ff:95:24:af:23:a5:82:1c:59:3d:41:32:22:85:13:d8:
f4:d8:3d:a1:1d:74:a2:27:7b:b5:e4:f9:0e:b9:3d:cc:65:ab:
c3:cf:94:a5:6d:fd:2c:3e:f5:6d:97:9b:d2:d3:99:ff:4f:92:
70:8b:25:5a:58:6d:37:1e:8a:a3:2b:7d:16:81:a7:65:e3:1f:
8f:7b:49:09:78:52:7d:3c:4d:17:c5:b5:25:d0:b4:31:ce:09:
f5:59:45:38:05:23:ce:e1:23:17:4d:0b:24:5f:d7:bf:28:f5:
5c:e4:44:76:f5:7e:da:a8:5b:1a:7b:b7:fd:c7:79:7e:23:01:
9d:10:a3:fc:e6:ba:7c:78:28:7e:b0:df:f7:94:d0:2c:5f:47:
75:5b:ee:88:f0:11:dc:eb:a2:f0:f6:c0:b7:dc:84:89:76:bf:
d8:6a:24:c9:6e:de:42:b2:79:3d:9f:0f:b2:53:ba:08:58:22:
34:b6:72:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:40:47 2025 by rpki-client