Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.mft
File: ZlARZWRaqA3LoxWIXPN0rLbSEwU.mft (raw, json)
Hash identifier: 7a4r9kvdOO3iyoEoVEh054M5whNhWmqc/K+tBITT9yk=
Subject key identifier: 18:10:7E:95:65:97:9F:1D:F1:CF:C0:6D:4B:13:DC:2A:C5:81:4B:AF
Authority key identifier: 66:50:11:65:64:5A:A8:0D:CB:A3:15:88:5C:F3:74:AC:B6:D2:13:05
Certificate issuer: /CN=66501165645aa80dcba315885cf374acb6d21305
Certificate serial: 019A4D7472001D52549DFD7729E347C3E69D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZlARZWRaqA3LoxWIXPN0rLbSEwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.mft
Manifest number: 0B20
Signing time: Tue 04 Nov 2025 06:01:08 +0000
Manifest this update: Tue 04 Nov 2025 06:01:08 +0000
Manifest next update: Wed 05 Nov 2025 06:01:08 +0000
Files and hashes: 1: BcdGko0r03EyM3V22SJp6LUI_jg.roa (hash: 98Brzs1QQHJfWLy5qsyBt5iEFr39Rl2gjaUb1gsQClI=)
2: KnbUd5nAcObJx-mFANUZ-3dv9ZE.roa (hash: J1B+8yhPspHeU/Bm8kDFuArgnyqhlnkM76APcA7nLcw=)
3: ZlARZWRaqA3LoxWIXPN0rLbSEwU.crl (hash: s40ymWEqF4HStByxGWU9OMwbLb0+pZnx3hvP+Ua5pXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZlARZWRaqA3LoxWIXPN0rLbSEwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:72:00:1d:52:54:9d:fd:77:29:e3:47:c3:e6:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66501165645aa80dcba315885cf374acb6d21305
Validity
Not Before: Nov 4 06:01:08 2025 GMT
Not After : Nov 5 06:01:08 2025 GMT
Subject: CN=18107e9565979f1df1cfc06d4b13dc2ac5814baf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:2b:c5:23:94:e4:ad:21:cc:3c:14:b5:7f:00:
50:d5:da:2f:62:da:3b:76:92:ba:42:93:40:b1:d0:
e5:b8:74:0d:32:b2:9e:b1:26:b4:51:1e:3e:1c:1b:
f8:2d:4e:e5:16:99:57:c8:92:05:ad:85:c6:83:fe:
f7:1a:e2:b7:f2:87:96:7b:90:d8:2b:03:45:d5:c0:
44:03:cf:d1:44:20:a2:c9:5d:01:b5:d9:a5:0b:6f:
82:9d:65:2c:5f:7f:00:3c:1f:5d:39:2c:54:0c:97:
3b:9d:30:eb:c8:c0:65:cd:a3:d1:f4:8d:d7:9a:14:
bc:b4:50:4a:a5:3c:d3:b1:46:fc:04:45:2d:68:97:
33:93:38:11:7f:6b:6f:3e:de:ba:0f:9a:b6:26:12:
4a:ab:77:1a:74:ce:6d:ea:36:7a:2b:40:c6:ae:2b:
9b:63:1f:1d:21:5d:8c:62:1c:bf:29:fe:cc:8a:37:
6a:b2:f5:8b:9f:8d:9e:e1:dd:7e:12:5a:48:51:31:
11:67:fe:ae:f9:c2:12:30:15:c7:30:d5:c5:b1:79:
b0:eb:93:63:50:eb:cd:84:d4:42:b2:41:80:dc:99:
92:da:34:7c:5a:e3:aa:be:33:c1:ca:23:dd:1e:75:
ed:6b:f8:50:9d:3d:8c:d6:35:cd:1b:6c:58:2b:8a:
0b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:10:7E:95:65:97:9F:1D:F1:CF:C0:6D:4B:13:DC:2A:C5:81:4B:AF
X509v3 Authority Key Identifier:
keyid:66:50:11:65:64:5A:A8:0D:CB:A3:15:88:5C:F3:74:AC:B6:D2:13:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZlARZWRaqA3LoxWIXPN0rLbSEwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:a6:3c:1d:f6:0d:a7:b0:ab:b4:15:75:bb:91:ca:92:f0:47:
41:dd:97:79:b0:09:ac:35:e4:a4:54:1f:c7:e4:b8:14:fa:00:
fa:e0:8d:db:5d:da:de:2f:ca:61:31:2c:e9:2e:2a:b0:9e:be:
4f:2a:1d:16:87:e0:4c:8e:fc:61:29:e4:37:14:02:82:2c:ee:
68:98:03:68:59:ff:39:16:ee:c5:2e:82:25:5f:d1:4a:b4:0c:
e5:9c:b0:ee:3b:9b:f8:5c:74:f1:4c:7e:19:e0:be:8d:2d:74:
1f:ab:dc:86:28:b6:30:e6:ff:8b:c9:8b:8c:7f:52:a1:90:e9:
1e:7d:54:e2:9e:fa:3b:97:bc:f2:7d:29:1e:bb:12:ab:1a:46:
b6:a0:41:28:31:18:34:e6:50:50:b6:22:a8:8f:6c:9c:3e:b2:
f2:93:89:b7:a2:b7:46:c8:0d:b3:2e:76:76:5f:a6:7b:a3:26:
92:14:d9:1d:d4:69:ec:38:f3:f6:5c:29:b9:e5:a6:85:2e:3e:
0b:63:dd:3c:56:fc:c4:78:35:b5:50:d0:23:b9:f6:fe:ab:19:
3d:18:7f:97:d9:f3:a6:ca:6a:ee:c0:82:51:52:1c:61:e5:57:
e0:00:7d:e8:42:be:83:5f:28:c4:f2:e1:8d:19:c3:18:18:37:
ba:d9:f2:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:08:18 2025 by rpki-client