Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/0f24dd-ef4a-4dbf-b20d-b039c24b99ca/1/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.mft
File: ZK7IAkyqEDqEEmlsfnL3eAPNhpU.mft (raw, json)
Hash identifier: OFOqbdgM1Na/N1BFdJAAk2P1Ig/XfsjVZEARKVm7+wc=
Subject key identifier: 0C:18:C2:6C:FF:BB:50:E9:36:FF:E6:FE:AB:B8:CD:3E:0E:4A:0B:50
Authority key identifier: 64:AE:C8:02:4C:AA:10:3A:84:12:69:6C:7E:72:F7:78:03:CD:86:95
Certificate issuer: /CN=64aec8024caa103a8412696c7e72f77803cd8695
Certificate serial: 019A4EF456480CC337A919A3B3890D7DCB97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/0f24dd-ef4a-4dbf-b20d-b039c24b99ca/1/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.mft
Manifest number: 114D
Signing time: Tue 04 Nov 2025 13:00:26 +0000
Manifest this update: Tue 04 Nov 2025 13:00:26 +0000
Manifest next update: Wed 05 Nov 2025 13:00:26 +0000
Files and hashes: 1: ZK7IAkyqEDqEEmlsfnL3eAPNhpU.crl (hash: 52gIB2Q+NAqcMdK1e4Q8cio1lZeOdSlJKiGIytrpuvA=)
2: jPXJlh-t4_XYR3J0eKKhQRTzmMQ.roa (hash: LCBAN0N7xGJeaqTX5AAQMXZtcLuwBKPNcwcKiOcd8Dc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/0f24dd-ef4a-4dbf-b20d-b039c24b99ca/1/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/0f24dd-ef4a-4dbf-b20d-b039c24b99ca/1/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:56:48:0c:c3:37:a9:19:a3:b3:89:0d:7d:cb:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64aec8024caa103a8412696c7e72f77803cd8695
Validity
Not Before: Nov 4 13:00:26 2025 GMT
Not After : Nov 5 13:00:26 2025 GMT
Subject: CN=0c18c26cffbb50e936ffe6feabb8cd3e0e4a0b50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:41:f2:be:ec:3c:7b:30:95:b8:da:2f:63:50:
b0:a3:43:12:ae:b8:fc:53:1c:e5:78:5d:af:ee:3e:
9d:77:44:5b:32:ae:9f:8b:66:c7:da:f9:6b:cb:af:
17:97:36:7d:ba:00:f1:b8:4d:f3:f6:de:d4:63:83:
20:f7:58:6e:70:f0:61:53:17:f3:9b:9d:10:bd:b5:
27:c9:59:7a:f9:7f:f5:85:16:1a:a7:59:e6:ef:de:
6d:52:15:1c:c5:6b:b0:32:c3:80:e8:59:d2:c9:a4:
b3:ee:26:3e:16:0e:4c:8b:d0:2b:e5:b1:3a:40:b0:
8e:b6:fa:69:83:80:5c:e2:2e:60:fd:7b:6e:16:f9:
b1:74:31:16:cd:d6:ee:64:59:a6:85:70:a9:09:54:
a2:08:48:6d:f0:b8:cb:f7:53:14:04:35:3e:33:62:
70:a6:71:26:3f:dd:46:7f:e1:da:81:e4:d8:f5:44:
24:b6:4f:1d:7e:a8:0b:2c:d4:bd:e6:94:8c:c9:d8:
e6:5b:8f:d1:6b:35:fc:53:fe:7c:0c:7f:26:1c:62:
5c:0f:a7:f9:7e:e1:30:d8:ea:f3:d5:c7:f5:45:2a:
74:a2:0f:0b:e7:11:ea:80:36:45:41:61:09:d0:11:
df:d8:39:92:86:b3:ed:a5:da:7f:20:5e:8c:b6:85:
5f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:18:C2:6C:FF:BB:50:E9:36:FF:E6:FE:AB:B8:CD:3E:0E:4A:0B:50
X509v3 Authority Key Identifier:
keyid:64:AE:C8:02:4C:AA:10:3A:84:12:69:6C:7E:72:F7:78:03:CD:86:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/0f24dd-ef4a-4dbf-b20d-b039c24b99ca/1/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/0f24dd-ef4a-4dbf-b20d-b039c24b99ca/1/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:28:41:2f:d5:0f:37:b4:6c:65:51:75:b3:db:c4:96:a8:d6:
45:5f:db:6f:b4:43:ec:4d:82:0a:58:54:56:35:73:fc:d9:7e:
03:20:f5:8e:8e:26:91:c3:40:a7:99:c1:b9:a9:d6:56:c2:5b:
b3:ed:45:ac:47:3e:b1:20:7a:c2:65:3a:44:f1:04:62:0b:c6:
91:0d:fb:65:e9:e3:a4:70:d8:15:85:3e:42:a9:28:9f:cc:60:
29:99:50:46:9b:c4:4c:6d:c4:59:92:67:16:ac:b1:1f:0f:f1:
ad:8a:79:96:ee:09:6c:85:db:4a:b9:d9:55:16:aa:dc:9c:85:
33:bb:1c:22:40:56:10:cc:27:9c:d4:cf:79:ff:35:83:d6:fe:
99:7c:d8:ee:59:d1:7b:73:5a:3a:9f:61:5e:0e:98:d8:e3:56:
d5:b2:1c:db:bd:0a:6f:fe:c8:a4:41:35:05:3d:2d:ba:39:8f:
2f:f5:da:48:f3:fd:f4:33:00:f9:cc:f6:e1:e0:23:2a:79:20:
59:37:2d:fc:58:ee:87:e1:9e:a4:72:d1:2a:1f:fc:b6:d2:56:
80:3e:1b:e3:0c:d5:b8:e1:64:7f:eb:78:30:77:e0:01:25:92:
41:25:48:58:07:9b:2a:f9:28:e8:d6:a4:a8:11:0a:95:8e:d6:
a2:f9:de:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:08:09 2025 by rpki-client