Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/ZjokSA8E0TGL8acNq_-ksn7zLaI.mft
File: ZjokSA8E0TGL8acNq_-ksn7zLaI.mft (raw, json)
Hash identifier: fzRBWW7n08c2L68VWdMfiul7geZpVltV/YCMuehwTKs=
Subject key identifier: DB:8D:18:C5:DE:C4:33:40:A4:60:E5:8C:5D:46:4A:24:58:BB:F4:1B
Authority key identifier: 66:3A:24:48:0F:04:D1:31:8B:F1:A7:0D:AB:FF:A4:B2:7E:F3:2D:A2
Certificate issuer: /CN=663a24480f04d1318bf1a70dabffa4b27ef32da2
Certificate serial: 019A4DAAC0B819329BEF8D22122A4A0CF9F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZjokSA8E0TGL8acNq_-ksn7zLaI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/ZjokSA8E0TGL8acNq_-ksn7zLaI.mft
Manifest number: 0323
Signing time: Tue 04 Nov 2025 07:00:27 +0000
Manifest this update: Tue 04 Nov 2025 07:00:27 +0000
Manifest next update: Wed 05 Nov 2025 07:00:27 +0000
Files and hashes: 1: G8N3qTa4VczFzinJ5WzomATxm3g.roa (hash: 9nI91Hj8CyleS8L7CFcjCsRKa59524cSRX5eWMKZBYE=)
2: ZjokSA8E0TGL8acNq_-ksn7zLaI.crl (hash: 5A8eY6xZcE/NVysoryC9gTduRYNo9u+Iu+lnoXWICtc=)
3: _Y6pXHXe2mBIlsIBI_Y9Ro_HsC8.roa (hash: qOtTpTR/zqFbarpkC5ntwdGXF3sXgx9iaLwPu7BpM7Y=)
4: lh0Ymr_ga0779X3_Cx26imTai5c.roa (hash: KAwIiW82rtUV/DIsKOEYKgQfn7noiC8wAVVTIRXrLCk=)
5: mzs5lFKEy4ZtL_t-Ol870PRlztM.roa (hash: OwW8CUre3/5rikXiPneNNGHqjsl4FYJ2I/CWMA48GjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/ZjokSA8E0TGL8acNq_-ksn7zLaI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/ZjokSA8E0TGL8acNq_-ksn7zLaI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZjokSA8E0TGL8acNq_-ksn7zLaI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:c0:b8:19:32:9b:ef:8d:22:12:2a:4a:0c:f9:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=663a24480f04d1318bf1a70dabffa4b27ef32da2
Validity
Not Before: Nov 4 07:00:27 2025 GMT
Not After : Nov 5 07:00:27 2025 GMT
Subject: CN=db8d18c5dec43340a460e58c5d464a2458bbf41b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:9c:bb:b3:15:8c:54:8b:36:f1:d8:91:0d:c0:
1c:79:72:44:a8:ea:b5:e3:f8:1a:69:10:e6:83:36:
ab:38:28:87:cd:2a:ce:02:7f:cb:79:d8:00:35:5b:
6e:c7:7b:a0:9b:5a:ca:e3:2a:3f:7d:cc:8c:f9:da:
93:82:80:69:08:b9:f1:01:7a:27:5e:8c:8a:49:f8:
14:62:dc:60:11:11:a4:0e:be:89:9b:42:00:e8:e8:
9f:1f:45:b3:1f:be:ed:84:ed:19:e3:50:39:0d:48:
22:72:72:0a:19:52:f7:4b:b6:19:ba:02:89:c1:a5:
90:c6:b1:00:d0:6e:7a:1b:14:61:e8:f8:ae:51:99:
76:e8:47:2b:5c:ae:96:5f:02:b9:54:c5:fd:b5:b5:
4b:86:3b:47:66:a1:5d:e8:47:48:85:b8:9a:68:58:
1b:0f:a9:2c:19:ea:85:de:23:90:c2:8d:9c:eb:f3:
d9:18:17:df:51:2c:7b:43:33:83:16:b7:ee:fb:0e:
54:a7:9e:61:f8:4b:0a:16:10:c1:bc:b4:e6:6e:30:
e1:13:92:f0:e5:0b:86:35:ee:ce:20:e5:32:37:b1:
14:38:dd:0f:3c:b2:67:3f:f8:45:44:8d:48:c9:eb:
8c:93:5c:20:f6:c3:65:b4:55:33:66:bf:72:af:78:
f8:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:8D:18:C5:DE:C4:33:40:A4:60:E5:8C:5D:46:4A:24:58:BB:F4:1B
X509v3 Authority Key Identifier:
keyid:66:3A:24:48:0F:04:D1:31:8B:F1:A7:0D:AB:FF:A4:B2:7E:F3:2D:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZjokSA8E0TGL8acNq_-ksn7zLaI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/ZjokSA8E0TGL8acNq_-ksn7zLaI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/ZjokSA8E0TGL8acNq_-ksn7zLaI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:3c:d5:88:60:04:99:b9:42:e2:41:8c:d7:c5:68:96:62:56:
4e:e2:18:b2:7f:7e:c0:72:c9:a8:70:12:99:03:48:79:88:27:
3e:16:4f:e3:7e:86:88:7b:df:e2:1f:0c:8c:ba:f9:c9:ec:0d:
60:57:c8:60:bd:91:3e:34:ef:a2:5e:9e:49:38:3d:55:2d:96:
c9:f8:87:ce:32:39:5d:1e:cd:2e:12:0c:3d:aa:81:4a:fb:a5:
7e:ee:63:84:86:dd:df:ad:a5:08:79:a0:4c:90:2c:19:cc:d1:
5c:99:bd:1c:0d:8b:e2:fb:de:8f:cb:80:44:6b:0c:ad:41:1e:
9a:dd:e6:74:03:63:dc:28:7f:9c:7a:f4:5a:58:60:32:d2:30:
70:c4:fd:40:ad:96:93:1e:8c:f6:7b:34:53:24:a3:0d:bf:f5:
d6:74:d8:ca:a1:a0:01:dc:f1:fc:0b:01:f6:96:2a:f9:a1:e5:
2f:43:bf:88:23:40:49:47:f7:c7:4c:50:ba:9e:49:e6:85:d1:
b1:07:7e:16:51:aa:d4:ea:83:2b:c1:14:2a:0c:18:31:97:08:
26:65:fd:8e:47:9d:c2:6d:41:0f:6c:cc:47:3a:f9:d4:20:05:
ef:4b:04:9d:c2:70:66:ba:75:ea:05:17:0d:a0:be:a8:72:cc:
49:1b:6d:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:15:24 2025 by rpki-client