Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/384d03-f479-4bb2-a8ad-ad510e05da92/1/ZnKfnQeG9ooezVxakrw5LYaRl14.mft
File: ZnKfnQeG9ooezVxakrw5LYaRl14.mft (raw, json)
Hash identifier: 1d0BWaw+llKt3UXrKMJUzh3Vy2m61xpjMkWm9uKHgNE=
Subject key identifier: AB:D9:5C:C8:C2:B9:CB:AF:89:AE:16:5D:BF:7F:01:B5:25:56:66:F3
Authority key identifier: 66:72:9F:9D:07:86:F6:8A:1E:CD:5C:5A:92:BC:39:2D:86:91:97:5E
Certificate issuer: /CN=66729f9d0786f68a1ecd5c5a92bc392d8691975e
Certificate serial: 019A4EF5D1FE223944CAE342AA12481BCA29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZnKfnQeG9ooezVxakrw5LYaRl14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/384d03-f479-4bb2-a8ad-ad510e05da92/1/ZnKfnQeG9ooezVxakrw5LYaRl14.mft
Manifest number: 12F0
Signing time: Tue 04 Nov 2025 13:02:04 +0000
Manifest this update: Tue 04 Nov 2025 13:02:04 +0000
Manifest next update: Wed 05 Nov 2025 13:02:04 +0000
Files and hashes: 1: 8P_S0IiROCk_5OYQ6mxMJ_E_ykg.roa (hash: hKXKA4mluIkjfh1vqK/elg6N0eojlwBUTy51lDcZmFo=)
2: ZnKfnQeG9ooezVxakrw5LYaRl14.crl (hash: UU6BNWzbuH5wIb2rbtuF1K2Nx+oxRuqXijdjsHMzYzw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/384d03-f479-4bb2-a8ad-ad510e05da92/1/ZnKfnQeG9ooezVxakrw5LYaRl14.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/384d03-f479-4bb2-a8ad-ad510e05da92/1/ZnKfnQeG9ooezVxakrw5LYaRl14.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZnKfnQeG9ooezVxakrw5LYaRl14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:d1:fe:22:39:44:ca:e3:42:aa:12:48:1b:ca:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66729f9d0786f68a1ecd5c5a92bc392d8691975e
Validity
Not Before: Nov 4 13:02:04 2025 GMT
Not After : Nov 5 13:02:04 2025 GMT
Subject: CN=abd95cc8c2b9cbaf89ae165dbf7f01b5255666f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:bf:a7:2d:60:56:70:b8:be:4a:b3:64:b2:10:
63:b9:9c:b7:52:4f:b1:c6:71:15:38:e4:94:54:66:
7c:e2:de:70:bb:e5:0b:a4:3c:ec:83:7c:c7:6b:b7:
09:4f:26:0f:a7:1e:c9:ec:fb:7b:2f:6e:a4:ae:fa:
ec:0a:32:16:82:e6:68:dc:6c:a5:00:aa:cb:a1:cb:
10:83:a4:98:8b:bd:32:6c:a4:9a:1c:d9:d6:2c:a0:
af:31:d8:2a:00:aa:f7:0f:93:04:e7:32:b0:95:ef:
7d:c0:f3:52:69:a8:69:f0:cd:38:9d:ce:2c:87:f0:
29:e0:9e:a2:ef:9e:28:51:48:cc:89:5f:15:9d:72:
5e:3b:f1:1c:a2:a8:8e:35:43:ac:7f:10:0d:4c:77:
e2:a3:5d:82:80:c1:97:6d:8a:b2:ec:f8:93:de:ea:
e0:e6:cb:e9:f5:d9:49:c2:1d:0b:37:85:f7:39:a0:
34:8e:f9:8c:03:2b:5a:90:68:77:ce:82:bf:4d:e8:
92:07:8d:43:0f:28:12:59:fe:8b:0e:e0:fe:53:75:
34:5d:25:51:0a:35:71:90:ed:60:9f:63:47:f7:93:
65:7a:0c:55:8f:82:61:b5:2f:27:c6:bb:c7:46:20:
dd:ec:85:bc:11:6a:57:ba:5d:71:df:69:aa:1d:69:
cf:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:D9:5C:C8:C2:B9:CB:AF:89:AE:16:5D:BF:7F:01:B5:25:56:66:F3
X509v3 Authority Key Identifier:
keyid:66:72:9F:9D:07:86:F6:8A:1E:CD:5C:5A:92:BC:39:2D:86:91:97:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZnKfnQeG9ooezVxakrw5LYaRl14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/384d03-f479-4bb2-a8ad-ad510e05da92/1/ZnKfnQeG9ooezVxakrw5LYaRl14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/384d03-f479-4bb2-a8ad-ad510e05da92/1/ZnKfnQeG9ooezVxakrw5LYaRl14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:ca:22:63:df:9d:c8:74:98:cd:ee:7e:0a:17:ae:db:b6:6d:
84:20:bf:37:a5:a8:92:a6:90:1a:76:c1:73:d2:6d:e2:e8:1d:
87:2d:e9:9c:4b:ee:44:c0:c9:b9:6b:0b:4d:1b:e6:13:71:80:
08:97:d1:7f:30:5f:f2:e7:13:f9:b0:8c:8a:cd:4e:ab:82:31:
0f:f1:0d:b5:08:0f:a6:b1:2e:d8:58:f8:bf:22:89:97:b7:13:
68:f1:bd:b9:a5:d4:d3:ae:6e:81:bc:ac:33:07:85:e4:26:4f:
f3:d4:e2:ed:16:13:88:d8:57:8b:e6:01:12:04:e2:2e:d0:79:
9e:ed:ea:42:66:0e:6b:dd:83:3a:89:6f:09:5b:0c:02:c5:02:
3a:fa:44:12:d4:16:40:ee:a9:80:77:79:9b:7f:35:8c:28:29:
d1:17:11:0c:52:74:14:6a:d3:b4:44:73:e3:2f:e5:f4:d0:1e:
dd:0c:cd:d4:96:d6:14:5f:a4:ef:5e:dc:2d:c4:b1:dc:7c:57:
74:ab:6d:1e:37:e2:dd:94:2c:8f:d0:9a:3e:0f:4d:1e:8e:6f:
05:cb:8d:fe:bf:53:dc:4c:e6:85:7f:7f:b5:a6:ca:ad:16:8c:
ff:f0:83:02:c8:c3:8f:86:d6:01:4d:cc:21:7c:e1:21:48:3e:
66:61:b1:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:01:54 2025 by rpki-client