Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.mft
File: Zw5gd5881NA9XlB4QPX6KjGmq40.mft (raw, json)
Hash identifier: Yj8PW5BQvFqT6xsM5eg4HCupD2cfIzlVxS9bFj/FkB4=
Subject key identifier: A0:36:56:DB:53:32:BF:B0:94:5A:62:69:C0:73:61:34:76:CD:5E:3E
Authority key identifier: 67:0E:60:77:9F:3C:D4:D0:3D:5E:50:78:40:F5:FA:2A:31:A6:AB:8D
Certificate issuer: /CN=670e60779f3cd4d03d5e507840f5fa2a31a6ab8d
Certificate serial: 019A5375AFB73D314E7EF47898DA01E82AC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zw5gd5881NA9XlB4QPX6KjGmq40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.mft
Manifest number: 056E
Signing time: Wed 05 Nov 2025 10:00:12 +0000
Manifest this update: Wed 05 Nov 2025 10:00:12 +0000
Manifest next update: Thu 06 Nov 2025 10:00:12 +0000
Files and hashes: 1: Zw5gd5881NA9XlB4QPX6KjGmq40.crl (hash: yrBE3JhmL08BzrHxeIqTTZMpT+rdHGa+cW8tLF5Z0cs=)
2: diLkZSNmSkA_P0E8XAQuJwLRalg.roa (hash: vX3W6kxo/WtwtkGg1PtHgNO/NmZd0a0bM+F9+jjmaok=)
3: hy_b_CLF0gjwTvb480me2nPqxL8.roa (hash: EAu5vgl/03EK2B5mmRo4ew+mHmc1IziDDQ2bL2kVt9M=)
4: uY__ejrV3u-AYFNveYDrJ-C2JUI.roa (hash: emJilGek+vVhrXzYGkdx6N/7HgCKTKlozt7sgU5B478=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zw5gd5881NA9XlB4QPX6KjGmq40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:75:af:b7:3d:31:4e:7e:f4:78:98:da:01:e8:2a:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=670e60779f3cd4d03d5e507840f5fa2a31a6ab8d
Validity
Not Before: Nov 5 10:00:12 2025 GMT
Not After : Nov 6 10:00:12 2025 GMT
Subject: CN=a03656db5332bfb0945a6269c073613476cd5e3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:86:23:ae:f7:2d:d7:66:f7:85:fc:30:f5:a1:
6b:c2:99:f5:ea:a7:86:f8:c4:d4:e3:d0:f7:dc:ee:
50:69:35:17:fa:14:08:64:8a:40:9b:73:81:a2:fd:
5b:b0:33:5e:ad:fb:d4:7a:76:1b:af:b1:d3:d9:43:
b9:f6:a7:7f:a2:4b:d9:ac:2a:f8:cc:0c:9b:3c:85:
b9:e8:6c:2f:e7:00:e8:7b:2b:8e:68:68:33:2c:0d:
f9:91:43:01:53:1f:ef:8d:ec:3e:25:d4:4f:40:f4:
1b:0d:67:89:db:50:dd:56:0a:d0:12:d2:55:cb:c3:
e4:2c:79:9d:33:8a:25:f6:2a:84:87:7b:5e:6a:a9:
91:53:90:67:8d:95:e0:52:db:05:6e:f4:ee:ae:d3:
20:5e:23:a3:9a:21:aa:3c:75:c4:d9:9a:11:25:cc:
eb:91:c9:8d:33:2c:d8:1d:93:a0:94:0f:c8:fc:a5:
7f:d9:43:fb:69:cf:8a:c2:9d:7b:c1:b6:d9:01:88:
0f:e1:19:6a:cc:b7:e4:c4:3c:19:b5:26:36:61:51:
bd:6a:a6:48:ca:18:33:da:1a:6c:ed:4f:cc:8f:38:
58:e6:cf:8d:57:aa:d0:ef:e3:ab:67:1f:4e:08:a7:
9f:63:53:f1:b4:0b:5d:69:1c:70:3f:ad:0a:36:2d:
e7:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:36:56:DB:53:32:BF:B0:94:5A:62:69:C0:73:61:34:76:CD:5E:3E
X509v3 Authority Key Identifier:
keyid:67:0E:60:77:9F:3C:D4:D0:3D:5E:50:78:40:F5:FA:2A:31:A6:AB:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zw5gd5881NA9XlB4QPX6KjGmq40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:22:98:b6:1f:b2:22:3b:98:b8:1e:90:24:18:81:11:75:7d:
c8:2e:f3:48:43:82:36:55:ad:d5:6c:85:af:80:0e:77:34:ce:
03:a6:ff:af:63:2f:92:f1:89:30:bb:03:5a:a4:1e:7f:df:bc:
b6:cd:d2:88:3e:d7:3a:3c:59:ca:cf:70:9d:30:69:b7:64:b3:
95:c8:4c:f1:f9:64:0c:8c:66:b5:e8:04:58:bd:43:ed:7b:e2:
5d:94:af:26:15:9a:57:0a:41:a0:8b:db:d8:25:93:ff:2a:7b:
84:e1:0a:f0:44:f3:0f:ae:a3:39:8b:c8:2e:86:a5:81:25:b1:
e5:48:05:65:47:66:67:51:24:d2:a2:e0:b1:91:34:c1:46:2e:
1c:25:80:ff:21:85:07:97:e3:4f:0d:40:95:48:1d:89:77:8a:
02:a8:76:7a:a8:af:8a:4c:aa:cd:52:c0:9e:28:7b:3f:b6:8c:
c3:6c:ac:e1:ad:40:78:00:cd:4b:c9:e9:16:ef:8c:31:d1:b0:
c9:d9:1d:68:5e:ba:42:53:e2:e6:49:8f:d6:bb:77:6c:e2:b7:
2e:c7:d1:0d:54:30:af:a5:92:04:0c:c7:a3:21:1b:ab:d7:07:
fc:b0:9e:c2:02:e7:81:01:19:a4:26:55:7b:4d:eb:6d:a0:b8:
38:04:c8:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:23:10 2025 by rpki-client