Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/f3b8a0-be43-44ee-8d54-85a0d1239923/1/Z4RrhMd5BRIoH4DCSBvkswpl0I0.mft
File: Z4RrhMd5BRIoH4DCSBvkswpl0I0.mft (raw, json)
Hash identifier: 6gyIZJrvuVxV3UhWvZ2XKvxrautHDtEmJvdPt8Xt5K0=
Subject key identifier: 12:49:54:7F:41:88:46:66:FC:93:D8:67:1B:8D:A0:F8:B4:33:F8:F3
Authority key identifier: 67:84:6B:84:C7:79:05:12:28:1F:80:C2:48:1B:E4:B3:0A:65:D0:8D
Certificate issuer: /CN=67846b84c7790512281f80c2481be4b30a65d08d
Certificate serial: 019A4EF45B7C4A48C0304F8F3C4F0ABBD981
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z4RrhMd5BRIoH4DCSBvkswpl0I0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/f3b8a0-be43-44ee-8d54-85a0d1239923/1/Z4RrhMd5BRIoH4DCSBvkswpl0I0.mft
Manifest number: 0625
Signing time: Tue 04 Nov 2025 13:00:28 +0000
Manifest this update: Tue 04 Nov 2025 13:00:28 +0000
Manifest next update: Wed 05 Nov 2025 13:00:28 +0000
Files and hashes: 1: Z4RrhMd5BRIoH4DCSBvkswpl0I0.crl (hash: i8jOuf/CJ9OUzJ/qUT3EFc4/vCcTc/9Ugu2o6zw+y3o=)
2: e9CofsvHtUd9nOdIWFYukSYHblY.roa (hash: bRaoXZzCxY/+WP3cSFPKma8SeEgItuQDnpy+HQsr3lA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/f3b8a0-be43-44ee-8d54-85a0d1239923/1/Z4RrhMd5BRIoH4DCSBvkswpl0I0.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/f3b8a0-be43-44ee-8d54-85a0d1239923/1/Z4RrhMd5BRIoH4DCSBvkswpl0I0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z4RrhMd5BRIoH4DCSBvkswpl0I0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:5b:7c:4a:48:c0:30:4f:8f:3c:4f:0a:bb:d9:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67846b84c7790512281f80c2481be4b30a65d08d
Validity
Not Before: Nov 4 13:00:28 2025 GMT
Not After : Nov 5 13:00:28 2025 GMT
Subject: CN=1249547f41884666fc93d8671b8da0f8b433f8f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:7b:a8:5f:34:f3:5d:78:f5:71:f6:f3:68:85:
39:a0:68:85:35:22:8a:75:9d:70:39:3c:53:0e:f5:
96:f0:8d:5d:8e:57:16:5c:3f:b7:aa:ee:7c:6e:77:
9e:a0:0b:64:d7:ae:a5:39:de:61:ba:bd:85:13:b8:
a4:05:2c:9c:a4:dc:bd:d0:aa:be:d9:10:49:db:a0:
6f:80:9e:ed:55:85:13:5a:a1:34:58:14:2f:fd:a5:
b8:64:fa:9b:7e:2d:c5:00:04:a7:a3:40:9e:57:ec:
7f:d8:76:d7:0a:11:af:76:da:0a:f7:04:50:d4:ad:
2f:da:52:a8:15:e3:a5:04:cb:4d:e3:c2:a4:4b:98:
62:74:db:ac:8f:c1:73:54:dd:a2:72:f7:44:48:15:
d4:17:c0:9f:02:55:7d:9b:ee:22:5c:e4:00:81:7f:
1a:da:83:9c:86:62:72:d7:3e:fa:b7:95:f4:26:b4:
43:02:fa:ce:f7:76:ed:0d:92:28:00:62:bf:dc:7b:
08:96:48:dc:83:0f:6d:fd:fa:a6:20:59:07:0f:b1:
d0:b1:2b:bc:1a:8f:b2:89:cc:a1:2e:39:08:3a:72:
0a:19:58:82:3b:ed:27:f9:7e:d5:cf:6f:50:6f:7e:
51:43:bd:0a:d6:2c:3a:25:68:b5:1d:fa:de:83:be:
bb:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:49:54:7F:41:88:46:66:FC:93:D8:67:1B:8D:A0:F8:B4:33:F8:F3
X509v3 Authority Key Identifier:
keyid:67:84:6B:84:C7:79:05:12:28:1F:80:C2:48:1B:E4:B3:0A:65:D0:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z4RrhMd5BRIoH4DCSBvkswpl0I0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/f3b8a0-be43-44ee-8d54-85a0d1239923/1/Z4RrhMd5BRIoH4DCSBvkswpl0I0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/f3b8a0-be43-44ee-8d54-85a0d1239923/1/Z4RrhMd5BRIoH4DCSBvkswpl0I0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:a6:49:10:a0:f3:50:8e:be:c1:2c:14:65:1c:69:8b:b9:50:
4c:f6:70:93:fe:cf:48:df:38:70:8b:9a:f3:97:f3:74:23:9e:
a7:be:a4:33:04:b8:7f:90:42:f3:5a:54:b7:76:3c:d4:70:77:
5e:1f:1d:d6:95:70:61:08:4f:27:a4:ac:eb:48:88:cf:b2:42:
a4:18:29:bf:23:f9:f9:bb:82:1a:af:7a:ba:08:5d:18:62:d6:
00:f5:ca:c8:01:f3:18:5a:10:dd:5c:5d:fb:79:4d:6d:f7:7b:
dc:dd:36:e7:10:88:e8:86:31:da:2f:f7:24:4e:00:a1:db:46:
c9:fe:c0:99:c0:46:24:19:fd:ff:b4:7a:ed:53:61:ec:d6:c7:
b2:b8:61:5d:96:fa:e7:66:9c:98:83:89:ad:0a:df:21:2d:f3:
43:4f:b7:54:2c:13:fa:67:52:4e:05:34:89:9a:8c:73:97:e6:
b0:47:8f:64:9e:f4:67:95:75:69:3b:ca:95:64:8e:90:a8:cc:
59:7d:69:b7:72:7c:24:53:c7:56:83:a2:32:1e:80:cc:37:d3:
82:7e:7e:0f:8d:23:81:bd:a9:ee:45:2f:11:72:36:a5:23:f6:
4b:d1:ea:bb:1b:52:10:fc:e3:cb:4b:f6:0f:4d:a8:69:6b:6c:
2d:69:83:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:41:40 2025 by rpki-client