Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.mft
File: ZQYJZpX35mELGbCOHX_ZxNkUpPA.mft (raw, json)
Hash identifier: AVHK7jUW0XNuvqJyVpdY8fPki2Hn+yH4A/AXE4uiwnQ=
Subject key identifier: 65:66:C0:D0:9F:B7:A6:D4:1C:4E:79:64:E1:4A:A0:BD:C1:1B:30:40
Authority key identifier: 65:06:09:66:95:F7:E6:61:0B:19:B0:8E:1D:7F:D9:C4:D9:14:A4:F0
Certificate issuer: /CN=6506096695f7e6610b19b08e1d7fd9c4d914a4f0
Certificate serial: 019A533F39E167C575511209557D81708609
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZQYJZpX35mELGbCOHX_ZxNkUpPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.mft
Manifest number: 1710
Signing time: Wed 05 Nov 2025 09:00:43 +0000
Manifest this update: Wed 05 Nov 2025 09:00:43 +0000
Manifest next update: Thu 06 Nov 2025 09:00:43 +0000
Files and hashes: 1: 4GHtaL2ENr8x0dHCgzjR-2oufsc.roa (hash: SkJfNfL4xk1uCL5vaUVq92gTeEiReavJzDd3NtKKtoQ=)
2: P4Bbz81DKVf659V7Pusw5yxnCg8.roa (hash: 6mtNya9D4eJ+7094qYmfrW/oPVu6b8pgbmkAvNwldHc=)
3: ZQYJZpX35mELGbCOHX_ZxNkUpPA.crl (hash: UwNPG44assqGTunoPRpqz1HtQJiF3KMdjWMWdgmnTkE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZQYJZpX35mELGbCOHX_ZxNkUpPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 09:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:3f:39:e1:67:c5:75:51:12:09:55:7d:81:70:86:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6506096695f7e6610b19b08e1d7fd9c4d914a4f0
Validity
Not Before: Nov 5 09:00:43 2025 GMT
Not After : Nov 6 09:00:43 2025 GMT
Subject: CN=6566c0d09fb7a6d41c4e7964e14aa0bdc11b3040
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:32:c7:f0:6e:5e:4b:1c:ab:24:d8:32:c4:77:
32:21:5b:b2:c2:3b:e4:cf:c5:47:48:ca:54:20:8e:
9e:46:a9:69:d9:a5:9e:01:ce:54:a7:34:00:c7:d7:
1a:bb:15:91:af:ab:50:97:be:bd:c4:18:d8:94:b3:
e2:8a:fd:ec:29:9d:8e:3a:5a:20:bd:ae:b9:f4:78:
63:8d:9d:e9:ad:f6:19:08:d7:a8:66:60:ba:02:6d:
63:e3:39:77:50:8c:7d:a6:e8:3d:b7:98:8a:a2:68:
19:0f:bb:f9:5c:1a:85:32:68:05:98:60:25:f7:87:
b8:c4:ec:df:d1:6f:3a:fa:c1:b6:d6:4d:cf:61:10:
72:67:46:c3:b5:ab:96:28:c6:38:d6:e7:d2:cb:41:
e3:ce:82:b2:0d:58:69:67:ba:62:b9:29:c1:8c:23:
84:9f:92:bd:81:ff:b9:0e:b1:cb:44:97:8d:f9:30:
9a:c0:37:3e:59:04:63:1a:c9:52:a3:c3:70:c3:31:
99:5f:d2:2c:ad:6b:06:b5:f3:08:70:04:ba:e7:6d:
75:ba:f3:39:c0:74:40:bf:bf:86:56:dd:02:c3:4f:
a5:47:02:4d:1b:b5:85:f8:d5:55:a2:8b:bb:f7:ca:
4c:ae:89:51:a5:69:9d:de:7e:fd:35:12:75:a1:ac:
4c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:66:C0:D0:9F:B7:A6:D4:1C:4E:79:64:E1:4A:A0:BD:C1:1B:30:40
X509v3 Authority Key Identifier:
keyid:65:06:09:66:95:F7:E6:61:0B:19:B0:8E:1D:7F:D9:C4:D9:14:A4:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZQYJZpX35mELGbCOHX_ZxNkUpPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:fd:b9:53:cd:52:07:c6:b1:c7:47:e4:98:cc:b0:42:e7:12:
ab:23:7b:bc:6c:86:51:12:e8:fa:da:c6:07:40:fb:19:7d:14:
ef:3e:a9:bb:01:c6:1d:fd:4f:d0:86:55:23:79:9a:1e:44:e8:
ad:45:91:64:c4:74:a1:33:28:4a:5e:80:86:a1:41:64:17:68:
9a:bf:1c:62:cb:05:31:26:c1:f5:56:97:6a:f5:c2:1e:8e:7d:
6d:cf:00:52:c0:49:e0:99:14:2a:8a:ef:d1:83:2e:a1:35:07:
9b:4a:12:87:00:2c:81:24:c8:bf:d3:11:c4:d4:e1:c7:a3:51:
02:47:c6:6d:0a:a4:1f:50:95:d9:0c:81:d8:c7:1d:4a:db:c5:
85:dc:b8:e8:b5:32:80:9a:31:e3:89:b2:ad:83:e1:d9:ab:aa:
69:e4:65:dd:85:ce:ca:9b:30:07:78:2c:cd:d3:d5:b5:86:2b:
d6:08:d5:40:13:29:35:06:54:fd:e8:90:ea:b2:16:6e:7f:ba:
04:cf:47:f3:de:85:88:38:81:f9:7b:b9:33:f7:9c:66:93:99:
90:e7:01:db:66:54:46:25:5e:b8:b2:7b:c0:b9:5e:76:eb:ad:
01:79:a1:17:ff:27:91:1e:79:e8:db:34:c6:d0:d8:16:1c:f2:
80:6b:52:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:05:51 2025 by rpki-client