Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e66afe-6e0b-4dbd-8d0d-ce6915b4736f/1/Zpb6P-QM93CFHIOtyvr7ekEHZ48.mft
File: Zpb6P-QM93CFHIOtyvr7ekEHZ48.mft (raw, json)
Hash identifier: V8IQutF1tCbXoM4lf+B0UdYnR3TTD98ZFp4DkkFouVk=
Subject key identifier: A0:EA:11:87:75:3D:13:92:25:CB:52:DB:D9:56:59:06:7F:1A:20:E2
Authority key identifier: 66:96:FA:3F:E4:0C:F7:70:85:1C:83:AD:CA:FA:FB:7A:41:07:67:8F
Certificate issuer: /CN=6696fa3fe40cf770851c83adcafafb7a4107678f
Certificate serial: 019A4DE1917BD2A37839FF2C900D20225BAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zpb6P-QM93CFHIOtyvr7ekEHZ48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e66afe-6e0b-4dbd-8d0d-ce6915b4736f/1/Zpb6P-QM93CFHIOtyvr7ekEHZ48.mft
Manifest number: 0531
Signing time: Tue 04 Nov 2025 08:00:19 +0000
Manifest this update: Tue 04 Nov 2025 08:00:19 +0000
Manifest next update: Wed 05 Nov 2025 08:00:19 +0000
Files and hashes: 1: Zpb6P-QM93CFHIOtyvr7ekEHZ48.crl (hash: txs5xeS28NPlkEld4WYLbLdcAE/YNYEMNvgnLfjgqn8=)
2: f6tkx1veLJXtyksaflVzc1YMN2w.roa (hash: WlrwpYaQcrfGXKf9ZwidLgROLAib30SWtSAT3qSkZJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/e66afe-6e0b-4dbd-8d0d-ce6915b4736f/1/Zpb6P-QM93CFHIOtyvr7ekEHZ48.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/e66afe-6e0b-4dbd-8d0d-ce6915b4736f/1/Zpb6P-QM93CFHIOtyvr7ekEHZ48.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zpb6P-QM93CFHIOtyvr7ekEHZ48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:91:7b:d2:a3:78:39:ff:2c:90:0d:20:22:5b:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6696fa3fe40cf770851c83adcafafb7a4107678f
Validity
Not Before: Nov 4 08:00:19 2025 GMT
Not After : Nov 5 08:00:19 2025 GMT
Subject: CN=a0ea1187753d139225cb52dbd95659067f1a20e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ff:2a:1e:f2:f6:25:45:ae:87:74:89:da:20:
ee:9d:df:4f:8c:d8:96:ac:c0:fb:7b:77:c8:e1:f9:
ab:b0:59:18:c8:53:38:a5:9b:a6:1f:d8:9c:f8:57:
5f:18:13:37:8d:bf:48:ce:5f:9a:9b:7d:3d:e1:fc:
a7:14:90:db:cb:a9:97:22:c4:3a:17:cf:d4:60:9b:
27:05:5f:f3:66:68:8c:dc:9c:8e:23:ef:c4:84:32:
d0:fa:d1:43:e3:6b:8d:e5:77:b8:de:f2:f6:66:1e:
08:00:cd:f8:37:49:1a:44:e9:ed:97:ce:f3:e4:eb:
74:a6:7b:b2:f5:ff:e2:d0:03:9a:4b:29:19:3c:29:
7c:0e:d6:fc:ad:55:77:ad:f0:29:50:97:7c:24:17:
1f:1c:1c:d9:4e:60:96:1f:c1:a6:92:10:21:27:10:
1e:6a:d9:71:51:eb:b5:2f:4d:e1:2e:50:cd:31:97:
9a:cf:a4:bf:bc:a4:4b:36:8b:3b:82:31:27:b0:82:
ae:e4:90:7f:2e:b7:41:60:dd:bd:4f:14:5a:81:1c:
84:3a:80:89:a5:be:b1:fb:97:98:02:bf:e9:74:b9:
76:3b:5d:3c:1c:f7:f7:bf:bb:7e:2d:8d:a3:fd:1a:
b5:58:38:0b:7d:a3:75:b8:e6:15:ed:e8:38:70:ab:
65:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:EA:11:87:75:3D:13:92:25:CB:52:DB:D9:56:59:06:7F:1A:20:E2
X509v3 Authority Key Identifier:
keyid:66:96:FA:3F:E4:0C:F7:70:85:1C:83:AD:CA:FA:FB:7A:41:07:67:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zpb6P-QM93CFHIOtyvr7ekEHZ48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e66afe-6e0b-4dbd-8d0d-ce6915b4736f/1/Zpb6P-QM93CFHIOtyvr7ekEHZ48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e66afe-6e0b-4dbd-8d0d-ce6915b4736f/1/Zpb6P-QM93CFHIOtyvr7ekEHZ48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:e0:4d:88:5b:b8:b5:a7:27:88:a7:92:9d:dd:2c:30:73:d4:
51:66:1c:4f:f9:8c:7c:9d:41:17:7a:7e:a2:80:1b:56:1e:61:
86:fb:6d:72:b3:84:05:0a:5b:c4:a4:71:da:ce:ca:87:39:02:
3f:22:b0:55:9a:b8:97:59:01:b8:bb:2e:e4:0d:d8:c0:20:f4:
8c:6f:9e:8f:7c:d3:bc:4a:51:0e:c8:60:5f:fc:f1:22:50:6e:
72:ee:f4:30:c2:22:f5:77:1e:f1:83:1f:ed:57:07:92:79:d5:
bb:9f:a8:f6:1b:3e:a3:94:c0:7a:21:69:45:5c:a3:24:48:63:
74:1f:5c:12:cf:f0:54:55:46:28:28:fd:e1:40:49:c6:7b:d3:
1e:48:8b:e2:9b:4b:b3:0b:d0:6e:f1:be:4a:5e:40:f2:9a:d4:
be:e4:24:3a:61:31:fb:61:04:49:3b:58:ba:2c:93:7a:a3:37:
d4:ea:56:9d:3f:d7:3c:08:32:9f:2f:2f:51:d5:d1:78:6b:13:
51:d1:c7:18:dc:43:a0:b5:5b:32:89:53:17:56:25:16:3f:7a:
88:5c:ea:43:cc:8c:bb:e4:d5:c8:21:cb:37:60:73:d5:1c:11:
81:a3:25:42:a5:de:97:be:05:fd:9d:bc:24:1c:52:c7:8c:1e:
5e:d7:69:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:59:50 2025 by rpki-client