Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.mft
File: ZVnPNNTPxZZAhi0eS3nUjZ5Njns.mft (raw, json)
Hash identifier: I7B5oZajd/rs5ZBdtpLK1FzYsm4/f5fVl2brhbfBITQ=
Subject key identifier: A5:49:56:CD:A2:9D:4B:9D:16:1A:50:11:12:BD:5D:7B:F7:A6:30:A8
Authority key identifier: 65:59:CF:34:D4:CF:C5:96:40:86:2D:1E:4B:79:D4:8D:9E:4D:8E:7B
Certificate issuer: /CN=6559cf34d4cfc59640862d1e4b79d48d9e4d8e7b
Certificate serial: 019A4FD07B6284A58B28E060EA896868A2B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.mft
Manifest number: 0464
Signing time: Tue 04 Nov 2025 17:00:54 +0000
Manifest this update: Tue 04 Nov 2025 17:00:54 +0000
Manifest next update: Wed 05 Nov 2025 17:00:54 +0000
Files and hashes: 1: 9JlOX8sBl__Qf5ZEztj3xRoWT0w.roa (hash: yFMJTSvXNN5G3iWxcUQycJKuWi+/CwtiHhA9xSKG2JY=)
2: ZVnPNNTPxZZAhi0eS3nUjZ5Njns.crl (hash: KiFeAVqolCcr5s1YOeur8BHMer+FYf5sX8HO0hoj/vo=)
3: uJJnjUiM_NZxiukKj0SMAuEZu9s.roa (hash: rKuDWrBp0PYOBRz7NFxaGHHnL+VoADNHakfLXL6TQaA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:7b:62:84:a5:8b:28:e0:60:ea:89:68:68:a2:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6559cf34d4cfc59640862d1e4b79d48d9e4d8e7b
Validity
Not Before: Nov 4 17:00:54 2025 GMT
Not After : Nov 5 17:00:54 2025 GMT
Subject: CN=a54956cda29d4b9d161a501112bd5d7bf7a630a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:7f:ca:9a:86:01:c7:97:17:2d:9e:b9:a9:01:
ab:00:dd:20:64:b1:53:67:12:62:b5:98:fe:46:72:
1a:1c:1f:4b:0f:ec:bb:ec:fe:a9:33:68:61:60:f0:
e2:f3:b7:c1:52:32:05:3a:86:c9:f0:c3:a7:37:1c:
89:74:b4:28:b7:74:65:6d:95:a6:82:61:1d:65:01:
87:ac:4e:99:97:ed:ce:4d:22:1c:b8:c3:18:ab:3b:
a1:aa:9f:d4:c2:65:71:78:07:bb:dd:73:e8:00:17:
1e:b1:fd:e2:5a:9b:7e:46:7f:1c:ce:97:cb:14:a9:
25:d0:cd:2f:a8:62:ec:b8:31:a8:dc:66:82:17:fd:
4f:cf:b2:3b:f2:77:82:5c:86:20:58:02:70:a1:bf:
46:b4:c6:ec:87:e5:0e:d6:85:01:46:69:8c:4a:dd:
d0:73:b6:e8:94:7f:36:70:51:d8:7a:9c:ef:f6:e1:
97:56:d9:9b:85:9e:5e:44:f3:38:22:ca:e1:5e:36:
93:70:78:82:34:49:35:49:26:47:49:63:d2:bd:74:
33:6b:61:5a:61:0a:6a:56:df:10:0f:8c:28:78:0c:
ec:73:d1:ae:d7:60:84:39:23:a3:c9:ff:3d:87:f5:
27:f6:77:f7:98:89:43:f2:43:bf:df:d3:33:80:72:
9a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:49:56:CD:A2:9D:4B:9D:16:1A:50:11:12:BD:5D:7B:F7:A6:30:A8
X509v3 Authority Key Identifier:
keyid:65:59:CF:34:D4:CF:C5:96:40:86:2D:1E:4B:79:D4:8D:9E:4D:8E:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:0a:47:78:b0:db:f0:a1:18:dc:c1:60:97:4a:3a:9c:a9:81:
18:7e:a0:db:c6:e1:c7:58:5f:d2:25:3a:5e:70:6d:85:0d:6c:
b3:d4:49:18:75:d5:e3:5c:4a:ca:9e:73:a5:34:77:94:f6:ac:
e2:4d:69:3e:1f:30:89:51:e6:57:63:6f:dd:47:76:6e:40:83:
e6:d5:c0:6d:e3:13:2c:29:af:56:e4:77:2a:a3:66:db:b8:c3:
d0:90:59:cb:46:eb:6d:ec:43:57:c2:b2:68:3c:a9:06:b0:f0:
4d:ff:cd:6b:92:50:67:b9:24:6d:50:a9:18:2c:2e:0b:5c:1c:
59:ac:d8:ce:7e:fc:36:ba:9b:60:85:a8:00:9d:e9:6a:cd:71:
ac:e1:72:0c:df:58:28:02:70:4e:50:ee:5c:66:68:3b:c8:ee:
8e:83:54:55:e5:b0:f3:15:cc:7f:60:d0:b7:7b:6e:d5:ca:af:
c4:7a:ca:b8:9e:78:7e:b4:08:5a:14:ce:58:33:45:66:ce:58:
0f:5b:32:d1:00:c7:b8:2b:66:6d:70:54:3c:f1:c2:bf:aa:14:
f3:e0:06:d1:b0:3e:a6:dd:de:cd:fd:3e:94:67:ac:b6:94:ea:
79:2a:e6:87:57:d7:61:5a:f7:9c:8b:f3:be:4f:52:71:8c:87:
ca:bc:81:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:10:16 2025 by rpki-client