Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/307be8-5e11-4110-a1d3-3a9c0fbc8a0a/1/ZpPysE64W2oqbiHAPPu3coekWv8.mft
File: ZpPysE64W2oqbiHAPPu3coekWv8.mft (raw, json)
Hash identifier: ccxOBVOh7KUcs8J0WtunOJTlKykRc19sfm7DlU8I6Rk=
Subject key identifier: 7B:A9:EE:20:3B:0A:CE:B6:96:C2:19:1D:37:39:DF:23:38:80:EC:CF
Authority key identifier: 66:93:F2:B0:4E:B8:5B:6A:2A:6E:21:C0:3C:FB:B7:72:87:A4:5A:FF
Certificate issuer: /CN=6693f2b04eb85b6a2a6e21c03cfbb77287a45aff
Certificate serial: 019A4EF442DAB96489D6FE6882CC6229A00F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZpPysE64W2oqbiHAPPu3coekWv8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/307be8-5e11-4110-a1d3-3a9c0fbc8a0a/1/ZpPysE64W2oqbiHAPPu3coekWv8.mft
Manifest number: 0884
Signing time: Tue 04 Nov 2025 13:00:21 +0000
Manifest this update: Tue 04 Nov 2025 13:00:21 +0000
Manifest next update: Wed 05 Nov 2025 13:00:21 +0000
Files and hashes: 1: OBgfNHwDlYtlqjjhJRFUWeZDTUY.roa (hash: 6sPRuYPKeEviFfVQ52vvMVNq0j09JkQvr2PG17VGRJU=)
2: ZpPysE64W2oqbiHAPPu3coekWv8.crl (hash: YQ6CmdQzWQwJHC2228ipZgN714Z7v819xfxX6eW4wJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/307be8-5e11-4110-a1d3-3a9c0fbc8a0a/1/ZpPysE64W2oqbiHAPPu3coekWv8.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/307be8-5e11-4110-a1d3-3a9c0fbc8a0a/1/ZpPysE64W2oqbiHAPPu3coekWv8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZpPysE64W2oqbiHAPPu3coekWv8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:42:da:b9:64:89:d6:fe:68:82:cc:62:29:a0:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6693f2b04eb85b6a2a6e21c03cfbb77287a45aff
Validity
Not Before: Nov 4 13:00:21 2025 GMT
Not After : Nov 5 13:00:21 2025 GMT
Subject: CN=7ba9ee203b0aceb696c2191d3739df233880eccf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9e:8f:5c:09:a8:6c:30:f9:29:4b:f6:8b:93:
00:dd:1c:ea:a7:9e:7e:a2:32:85:f3:c9:34:90:cc:
2e:67:ab:df:8a:ff:11:60:7f:a8:b3:7b:55:4f:44:
d8:3d:30:8c:48:5a:ea:3b:4b:e2:bf:e9:e4:23:4e:
db:d0:23:35:f4:0f:c1:e4:ed:ca:6c:03:69:83:77:
b9:68:76:09:64:3f:24:2e:e0:21:d2:86:90:8d:ae:
86:e6:6b:47:26:87:b1:23:32:80:d0:3e:23:43:05:
45:4f:6d:4b:ad:e9:05:53:27:d1:9d:29:69:b5:d2:
8d:c2:b5:9c:d1:da:96:11:aa:7b:10:c5:8d:d1:62:
d3:9f:8d:54:76:70:22:71:c6:31:fe:b5:02:41:66:
ff:c7:04:a7:89:5a:a3:77:65:d0:f4:04:3f:a6:6b:
3f:32:be:b3:95:9f:0e:62:59:dc:df:d8:a4:3c:e1:
3f:6d:01:76:32:c7:2b:2d:5c:a6:a2:8f:d4:30:75:
98:d7:fd:4f:84:30:7e:8e:89:f9:9b:d3:f7:05:76:
c0:67:f7:24:f8:a4:20:cf:4d:61:ed:6d:7e:03:ef:
33:19:55:61:d1:3e:be:da:13:b4:b2:0f:0f:45:ac:
79:57:f1:12:c5:2d:6f:8d:ef:91:c2:ae:8a:2a:2d:
60:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:A9:EE:20:3B:0A:CE:B6:96:C2:19:1D:37:39:DF:23:38:80:EC:CF
X509v3 Authority Key Identifier:
keyid:66:93:F2:B0:4E:B8:5B:6A:2A:6E:21:C0:3C:FB:B7:72:87:A4:5A:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZpPysE64W2oqbiHAPPu3coekWv8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/307be8-5e11-4110-a1d3-3a9c0fbc8a0a/1/ZpPysE64W2oqbiHAPPu3coekWv8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/307be8-5e11-4110-a1d3-3a9c0fbc8a0a/1/ZpPysE64W2oqbiHAPPu3coekWv8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:1c:03:a3:91:91:0a:0e:a2:88:cb:b2:39:b3:a0:e1:6b:b2:
e1:53:9b:1e:c4:2a:a4:38:17:bf:62:47:82:9a:72:d2:87:a1:
de:37:46:ef:52:be:c9:84:8e:b6:00:a9:64:d9:44:35:66:a6:
4d:12:43:6e:dc:94:25:e9:ae:53:b3:94:91:ab:cb:c3:6b:8a:
7c:12:8b:27:5b:c6:5d:37:ef:69:15:54:6d:e7:ec:dd:59:44:
48:e4:b6:21:08:b5:e9:36:b0:a4:09:d1:0d:81:75:69:e2:0f:
52:cf:66:de:08:64:e5:9c:61:de:86:76:37:8f:c3:61:a0:2c:
a2:62:fb:dc:40:83:f0:0b:8c:b8:22:77:d2:82:d4:2f:31:19:
88:01:a7:58:1b:c6:15:fd:05:23:f1:21:16:a7:b9:86:5c:b6:
d5:3c:65:6e:1b:ac:0d:53:61:6a:99:f1:e5:b4:bb:c2:cd:f4:
52:2e:08:0e:35:d0:46:73:0b:2d:40:0d:f8:fe:bb:87:f4:2a:
96:a9:55:e8:72:18:a7:ff:6e:fd:d3:e5:38:da:06:d1:7e:73:
53:66:40:06:38:8f:ec:ba:3f:0b:41:5b:bd:f1:f1:b4:fc:70:
5b:5d:7d:9c:61:e9:0f:b8:f1:0e:d2:8a:1b:7d:cd:12:d8:a9:
a2:cc:1d:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 19:59:48 2025 by rpki-client