Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/ZVrvPO89mvoCfbM1efSh_orZHG8.mft
File: ZVrvPO89mvoCfbM1efSh_orZHG8.mft (raw, json)
Hash identifier: inJMIUGUhpw+soTepfHAI4po1eesJTFuvXlXOrLHG68=
Subject key identifier: FF:CE:78:B5:DE:56:BF:4B:52:D2:3F:14:9C:CF:AA:3D:8C:16:2E:05
Authority key identifier: 65:5A:EF:3C:EF:3D:9A:FA:02:7D:B3:35:79:F4:A1:FE:8A:D9:1C:6F
Certificate issuer: /CN=655aef3cef3d9afa027db33579f4a1fe8ad91c6f
Certificate serial: 019A4EF5EDDD33C44E25EB37833EEB5F030B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZVrvPO89mvoCfbM1efSh_orZHG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/ZVrvPO89mvoCfbM1efSh_orZHG8.mft
Manifest number: 1256
Signing time: Tue 04 Nov 2025 13:02:11 +0000
Manifest this update: Tue 04 Nov 2025 13:02:11 +0000
Manifest next update: Wed 05 Nov 2025 13:02:11 +0000
Files and hashes: 1: 6awQ5vvLp2COkdyExVIfOWpcf0U.roa (hash: x8eRoJ1IMK9tcKhwbrAHFnXzsVa+tGQZBHOMDWjY4g4=)
2: ZQpO1aPpN8R6g2nPkZCJTaDtLDo.roa (hash: jW7tnAUthIc+57WN8d2CU9YQ1bHY6ehX+0z6UW+dFyI=)
3: ZVrvPO89mvoCfbM1efSh_orZHG8.crl (hash: Irs1cnj1XbjEEn2Qc08e3uzlnvISdN7YrXYP8hBV+FQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/ZVrvPO89mvoCfbM1efSh_orZHG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/ZVrvPO89mvoCfbM1efSh_orZHG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZVrvPO89mvoCfbM1efSh_orZHG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:ed:dd:33:c4:4e:25:eb:37:83:3e:eb:5f:03:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=655aef3cef3d9afa027db33579f4a1fe8ad91c6f
Validity
Not Before: Nov 4 13:02:11 2025 GMT
Not After : Nov 5 13:02:11 2025 GMT
Subject: CN=ffce78b5de56bf4b52d23f149ccfaa3d8c162e05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:29:e1:35:e1:8e:5b:ea:96:3f:53:58:2d:95:
2d:b2:35:1e:cb:69:7c:fc:1e:90:f2:a8:2c:1e:41:
05:85:78:bc:40:b9:58:ac:6a:9a:fd:39:c5:ce:cd:
03:ec:b9:39:34:b5:42:c0:fb:cb:2a:64:b4:64:49:
62:48:04:ab:c6:4e:cd:5b:42:0b:91:70:59:f5:a4:
b9:a8:52:ae:8d:bb:27:0b:d1:ab:ab:95:8d:78:3d:
1b:da:ae:65:f7:ec:f9:27:d9:10:d8:e6:70:aa:d7:
5b:72:88:78:8b:25:27:90:f9:d8:82:68:85:e8:6b:
74:7e:58:f2:d3:9b:b9:b0:e8:ed:da:ef:36:43:37:
22:fa:b2:b7:ad:0a:c1:b9:54:fb:f7:1a:2b:8a:e3:
1a:1d:56:0b:38:27:d9:6d:5a:da:c1:fb:12:de:9e:
63:7a:64:62:cd:f3:3a:2e:34:7d:13:58:46:5e:df:
23:fd:19:c1:38:32:fa:99:6a:8c:db:b4:c4:da:5d:
7a:0c:9e:ec:c1:ef:53:71:57:25:bc:e8:3f:86:8b:
56:94:fd:dd:71:a1:a9:94:45:6a:39:f7:32:2c:97:
2a:d9:42:a8:e4:8e:8c:9e:6d:f6:84:ac:e3:5c:9e:
97:6e:0e:6f:f7:71:97:e7:1c:71:57:6c:72:1c:1d:
d7:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:CE:78:B5:DE:56:BF:4B:52:D2:3F:14:9C:CF:AA:3D:8C:16:2E:05
X509v3 Authority Key Identifier:
keyid:65:5A:EF:3C:EF:3D:9A:FA:02:7D:B3:35:79:F4:A1:FE:8A:D9:1C:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZVrvPO89mvoCfbM1efSh_orZHG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/ZVrvPO89mvoCfbM1efSh_orZHG8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/ZVrvPO89mvoCfbM1efSh_orZHG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:c6:5d:2f:d7:bf:57:fb:eb:c8:df:22:20:74:48:00:05:5b:
ef:58:7c:bc:12:47:b3:ed:7c:95:f2:76:5b:f4:af:54:fb:e6:
d1:0b:06:fa:4f:8a:d3:b8:70:1c:92:ce:d3:ce:1d:e2:25:b8:
95:4d:57:f3:df:31:05:df:d7:45:d9:72:f9:d0:d6:a1:a2:b6:
12:34:71:10:f0:9b:60:aa:b8:00:7a:da:ec:24:41:21:50:d0:
d0:44:17:68:93:98:c3:cb:25:f2:7b:a6:cf:04:c0:5d:b4:55:
80:27:2a:7c:59:e9:bb:e3:0d:70:f3:4b:14:f6:0b:e0:84:e1:
6f:e4:7c:da:fa:e2:1a:ee:03:f7:00:18:0a:71:4c:09:ee:67:
39:3c:00:49:b3:e0:e2:88:60:fe:bc:e6:1e:4c:a2:b4:1e:bc:
b5:b7:17:9b:c1:c4:a7:aa:04:6e:ce:83:07:ad:38:a6:2d:14:
74:87:cb:8a:9b:51:1f:1d:37:0d:5a:26:41:c5:29:7d:ed:f6:
8a:9c:33:53:92:de:d8:74:9d:d2:f5:3b:e4:bf:2b:af:03:5f:
c9:2f:d1:68:cb:e6:00:e8:f8:5e:75:bc:80:61:3b:a4:6e:c1:
6e:4e:10:b2:dd:47:bf:4e:82:89:6a:93:b4:b4:d8:ed:bf:b8:
5a:f8:bf:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:01:21 2025 by rpki-client