Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/2a981d-67f5-484e-be1b-ff64a9ba597c/1/ZoKJC37SM0dHjU1l2wlIw9sj6-c.mft
File: ZoKJC37SM0dHjU1l2wlIw9sj6-c.mft (raw, json)
Hash identifier: fuRuKvY1cEE8a7olITLNt/vyqMQy84erh2ToaAyVe2A=
Subject key identifier: B0:1E:A4:B0:40:B2:5B:DB:19:E4:A4:2A:66:17:EF:1E:8D:11:F0:6A
Authority key identifier: 66:82:89:0B:7E:D2:33:47:47:8D:4D:65:DB:09:48:C3:DB:23:EB:E7
Certificate issuer: /CN=6682890b7ed23347478d4d65db0948c3db23ebe7
Certificate serial: 019A5150CBD2DA3FAD94611608BD5683A823
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZoKJC37SM0dHjU1l2wlIw9sj6-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/2a981d-67f5-484e-be1b-ff64a9ba597c/1/ZoKJC37SM0dHjU1l2wlIw9sj6-c.mft
Manifest number: 1710
Signing time: Wed 05 Nov 2025 00:00:40 +0000
Manifest this update: Wed 05 Nov 2025 00:00:40 +0000
Manifest next update: Thu 06 Nov 2025 00:00:40 +0000
Files and hashes: 1: 0eFE803oL-x-2UtW8hW4h_oGSOQ.roa (hash: 1/pEIXtNgxj6Ggb1H5PZs612B1gxk22zRzlXx7oVu5s=)
2: ZoKJC37SM0dHjU1l2wlIw9sj6-c.crl (hash: iCrHZIc6j7JlPqiB1JvtTASQjA/es7rqNSj5l1UbSLI=)
3: e2qB4esbK6h3v26XFDC4VZBc5KY.roa (hash: j1cRIZ5v+8OJ2fmGwhM51DYmzvrib+oAKJLnWq3m2pg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/2a981d-67f5-484e-be1b-ff64a9ba597c/1/ZoKJC37SM0dHjU1l2wlIw9sj6-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/2a981d-67f5-484e-be1b-ff64a9ba597c/1/ZoKJC37SM0dHjU1l2wlIw9sj6-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZoKJC37SM0dHjU1l2wlIw9sj6-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:cb:d2:da:3f:ad:94:61:16:08:bd:56:83:a8:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6682890b7ed23347478d4d65db0948c3db23ebe7
Validity
Not Before: Nov 5 00:00:40 2025 GMT
Not After : Nov 6 00:00:40 2025 GMT
Subject: CN=b01ea4b040b25bdb19e4a42a6617ef1e8d11f06a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:22:30:c6:74:79:3b:d2:7f:01:ec:c3:99:6a:
62:4f:db:f3:61:0f:46:14:cf:8a:21:08:1d:9a:60:
20:ea:4a:de:34:ee:9a:cd:0e:ca:24:d8:ce:f0:d1:
21:fc:44:a5:60:65:84:d4:fd:df:5e:fe:fe:ed:3a:
83:c2:17:eb:82:4a:48:ca:86:6a:59:65:98:be:c7:
e4:cf:54:cc:fd:b1:00:9a:7b:80:2f:32:dd:ae:87:
6f:4f:97:6d:25:fd:25:36:fc:0f:0c:57:8a:27:37:
d1:38:6d:f2:89:f4:42:29:9f:61:2f:3a:30:4d:42:
b1:7d:3e:f4:27:8f:61:ca:7b:ae:5a:df:f9:08:2e:
4f:0a:48:16:3e:c7:43:f3:15:51:db:f9:5d:37:85:
77:53:98:91:16:4e:a8:c6:c5:63:26:fc:70:f0:b6:
90:07:5c:ac:43:03:6d:e5:c5:ab:a2:0c:24:7a:88:
34:2f:27:68:1a:36:b2:c6:27:8e:e0:f3:b3:54:7f:
2e:b4:80:7b:ee:51:64:7e:fe:e2:49:ec:a4:1e:9c:
76:05:ba:bc:54:9a:91:df:28:e9:4e:27:d0:ec:94:
53:72:6f:6a:77:5c:22:c0:07:54:de:1c:e0:85:cc:
31:1f:e5:aa:09:82:44:1e:3b:d9:ae:00:95:31:ff:
34:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:1E:A4:B0:40:B2:5B:DB:19:E4:A4:2A:66:17:EF:1E:8D:11:F0:6A
X509v3 Authority Key Identifier:
keyid:66:82:89:0B:7E:D2:33:47:47:8D:4D:65:DB:09:48:C3:DB:23:EB:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZoKJC37SM0dHjU1l2wlIw9sj6-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2a981d-67f5-484e-be1b-ff64a9ba597c/1/ZoKJC37SM0dHjU1l2wlIw9sj6-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2a981d-67f5-484e-be1b-ff64a9ba597c/1/ZoKJC37SM0dHjU1l2wlIw9sj6-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:d5:53:c7:cc:22:55:2a:67:2f:6d:59:13:0e:6e:db:48:7a:
a4:13:93:b0:f9:14:ed:0f:06:dc:33:26:c9:90:d0:de:97:b9:
ad:72:01:ff:f2:5e:99:6b:ba:c8:57:b0:b7:39:bf:79:ce:30:
79:f6:68:15:f1:39:43:a7:02:89:56:d5:5f:a3:8a:ab:9e:e1:
06:f8:71:33:83:3c:95:96:5c:d8:c4:18:07:b5:70:52:f4:08:
1e:37:0c:0f:88:fa:04:1a:08:36:59:32:7d:99:6a:4b:17:26:
9b:86:df:d5:b1:b1:2f:e4:65:53:fa:6e:c9:3a:5d:80:ea:ce:
01:9d:b4:20:9a:98:59:d2:92:c9:8d:fb:58:4d:1f:61:d9:17:
3c:93:f5:e1:56:d0:eb:69:b4:da:a4:a4:0b:6a:7f:60:ba:94:
9e:c2:c1:69:8f:a4:2a:90:6d:f1:02:d0:70:fc:10:a6:ed:44:
04:47:a2:e1:da:26:50:aa:f8:72:77:b5:ef:a2:4e:b3:94:f9:
3f:b7:70:ba:bd:26:91:da:17:a3:af:9d:aa:38:9b:9d:48:62:
9a:ab:13:3b:12:ad:25:8e:67:bf:14:f1:aa:db:f0:41:50:58:
0b:d2:50:ab:f0:ce:6d:83:17:e9:c1:48:8b:fa:bc:af:93:b4:
ba:92:9c:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:40:49 2025 by rpki-client