Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/346966-069a-40b0-b143-41eaa1fde11b/1/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.mft
File: ZonDmV4kYdWlL9TxAAeC-ZpNSCI.mft (raw, json)
Hash identifier: 4x9HMpzdwzOLZbhhzHDlHVfkiZ93W235WYmbto1cZPI=
Subject key identifier: 4A:CF:72:23:79:EB:FB:5E:67:F5:8E:25:DE:6D:BE:FB:6E:B1:60:E8
Authority key identifier: 66:89:C3:99:5E:24:61:D5:A5:2F:D4:F1:00:07:82:F9:9A:4D:48:22
Certificate issuer: /CN=6689c3995e2461d5a52fd4f1000782f99a4d4822
Certificate serial: 019A4D73F97F48454DC9ED63F05BB42F4F8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/346966-069a-40b0-b143-41eaa1fde11b/1/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.mft
Manifest number: 1309
Signing time: Tue 04 Nov 2025 06:00:37 +0000
Manifest this update: Tue 04 Nov 2025 06:00:37 +0000
Manifest next update: Wed 05 Nov 2025 06:00:37 +0000
Files and hashes: 1: YINjBgqke9O6MEFg3LsttnUbivA.roa (hash: FiVOsjs04yLCv34Ov+9Fkl+VTtf648KKXDA45deG6fU=)
2: ZonDmV4kYdWlL9TxAAeC-ZpNSCI.crl (hash: Q0UyC1S/3hie/ZDUVIRNA/W39pHfNnKEie+Z66fG7BM=)
3: a48ohAuzOYw-D3deAcBdgdbuYdE.roa (hash: s6C2UNG19Y9Btn3B7Z6k8U1vX9nGyhjdM6XWlgIHyig=)
4: tGlHaeP9l4PIJg0VnS_cNRO7zcQ.roa (hash: OUc0RlEHBoBsIR+K/PErkMIbX3pRL0dEZfaQuWCuRDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/346966-069a-40b0-b143-41eaa1fde11b/1/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/346966-069a-40b0-b143-41eaa1fde11b/1/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:f9:7f:48:45:4d:c9:ed:63:f0:5b:b4:2f:4f:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6689c3995e2461d5a52fd4f1000782f99a4d4822
Validity
Not Before: Nov 4 06:00:37 2025 GMT
Not After : Nov 5 06:00:37 2025 GMT
Subject: CN=4acf722379ebfb5e67f58e25de6dbefb6eb160e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:64:0f:30:31:8b:17:c6:2e:81:3c:2d:15:9f:
ef:76:b4:9a:b9:92:0c:2c:cb:dd:a8:28:bc:be:6b:
38:e3:33:2d:e5:0a:f7:37:a7:d3:6f:de:b3:7a:db:
59:e2:d6:28:93:5d:70:3f:ec:6b:7c:cc:b0:c6:02:
88:23:13:e4:b7:37:dc:68:68:ef:b5:fb:1a:fe:9b:
dc:96:06:85:4c:6c:e3:0d:77:c4:92:64:18:ac:3b:
48:23:68:8b:70:ca:62:7c:6c:71:1d:d3:ad:2c:5b:
c2:2c:a0:41:4d:98:45:65:b0:00:53:3f:c8:16:3c:
82:97:07:f8:e7:e7:30:e9:83:e9:b0:bb:ad:8a:ac:
33:5b:dc:35:d1:1c:df:eb:80:3b:1c:6a:06:9f:38:
f4:89:bd:c2:66:e2:3b:e4:d4:4a:3d:83:1b:9b:ec:
87:22:b8:21:2c:fe:fa:2b:b2:4f:33:c9:71:29:5a:
e4:27:b0:89:24:ed:94:b1:97:90:17:fd:21:35:09:
58:d6:90:25:ba:d5:5d:ef:8c:16:2d:d5:5b:7d:63:
17:6f:5d:7f:e5:16:c5:59:d7:86:05:55:58:d1:c1:
c7:8b:03:64:0f:a7:a8:b4:5f:80:c7:4c:05:ed:70:
84:c0:40:43:a8:0e:16:1b:51:df:9e:b4:89:f7:78:
12:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:CF:72:23:79:EB:FB:5E:67:F5:8E:25:DE:6D:BE:FB:6E:B1:60:E8
X509v3 Authority Key Identifier:
keyid:66:89:C3:99:5E:24:61:D5:A5:2F:D4:F1:00:07:82:F9:9A:4D:48:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/346966-069a-40b0-b143-41eaa1fde11b/1/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/346966-069a-40b0-b143-41eaa1fde11b/1/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:b1:6c:fe:29:27:cc:e2:ab:15:ae:9e:11:0d:09:b5:e5:61:
c1:56:fa:53:56:4d:1e:5d:49:78:43:23:96:b7:f2:92:16:c5:
75:54:2a:6d:21:b1:69:29:14:d0:d8:87:e1:72:3c:ee:36:1d:
d7:90:4b:a3:13:9f:5a:46:bd:88:5f:98:f7:dd:5a:40:84:eb:
18:5e:5d:98:6d:ed:0a:ce:60:dc:ea:fe:e5:6c:97:71:f8:e3:
08:45:7e:0f:aa:2d:c1:2c:fd:38:ff:37:58:3d:cd:c2:c5:07:
e6:83:d8:c0:f7:f0:68:6e:53:30:c8:3e:5d:c3:7f:70:45:ed:
c9:a0:46:ef:d7:7e:05:c7:e1:00:35:30:1d:0f:78:1d:3d:a9:
53:cf:bc:f1:49:81:14:2d:ff:50:f8:70:81:84:78:dc:e2:76:
67:93:67:cb:79:19:ab:31:d6:06:5a:5e:36:30:21:3f:dd:e2:
a3:48:c9:00:77:ff:1f:87:cf:86:56:30:90:58:54:2a:ae:f7:
48:22:46:fa:a2:9a:d8:96:a8:e2:ce:bc:30:cf:71:6a:25:49:
ba:5e:3d:1d:71:3a:e7:0c:9f:ef:6e:54:d3:3d:44:bd:86:a7:
35:5e:82:66:70:57:ee:95:66:00:89:f2:e2:0c:f8:77:01:56:
49:88:b2:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:38:00 2025 by rpki-client