Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/86c170-2067-40ee-8923-a03ad529997c/1/zfjv0-MWboGqzxWA4vC5TaKbPbQ.mft
File: zfjv0-MWboGqzxWA4vC5TaKbPbQ.mft (raw, json)
Hash identifier: ZcF6y+iY943c4cJz019k/ksyDHziRw3RRH3k6OqviCw=
Subject key identifier: 95:6F:27:D9:8A:32:7D:9A:6F:0B:32:A3:F7:6A:3C:5B:E1:B4:38:EA
Authority key identifier: CD:F8:EF:D3:E3:16:6E:81:AA:CF:15:80:E2:F0:B9:4D:A2:9B:3D:B4
Certificate issuer: /CN=cdf8efd3e3166e81aacf1580e2f0b94da29b3db4
Certificate serial: 019A52D23104721B34BDBBB45E9833F51674
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zfjv0-MWboGqzxWA4vC5TaKbPbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/86c170-2067-40ee-8923-a03ad529997c/1/zfjv0-MWboGqzxWA4vC5TaKbPbQ.mft
Manifest number: 0122
Signing time: Wed 05 Nov 2025 07:01:38 +0000
Manifest this update: Wed 05 Nov 2025 07:01:38 +0000
Manifest next update: Thu 06 Nov 2025 07:01:38 +0000
Files and hashes: 1: t5nV1PoAdO-HNQcriDtT0k19Y0k.roa (hash: ktgVwZj6sz4wVJV68ItMtiZ3hfrl5O5Cl3g1dZAV0fs=)
2: zfjv0-MWboGqzxWA4vC5TaKbPbQ.crl (hash: KA5/xk9WG0hhLDHAWZ3xHGol44xKI46Pn0LxHln/VLw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/86c170-2067-40ee-8923-a03ad529997c/1/zfjv0-MWboGqzxWA4vC5TaKbPbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/86c170-2067-40ee-8923-a03ad529997c/1/zfjv0-MWboGqzxWA4vC5TaKbPbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/zfjv0-MWboGqzxWA4vC5TaKbPbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d2:31:04:72:1b:34:bd:bb:b4:5e:98:33:f5:16:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdf8efd3e3166e81aacf1580e2f0b94da29b3db4
Validity
Not Before: Nov 5 07:01:38 2025 GMT
Not After : Nov 6 07:01:38 2025 GMT
Subject: CN=956f27d98a327d9a6f0b32a3f76a3c5be1b438ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7a:8a:57:fd:b3:af:7d:cf:48:4e:25:01:e4:
9f:7f:de:fd:b0:a4:dd:df:b1:46:e1:10:ac:76:70:
74:b6:b3:ee:bb:44:05:d0:30:40:52:e7:c0:e2:3d:
98:86:b9:ef:9d:db:1f:bd:8f:26:4b:8d:ce:89:d9:
ea:ce:8b:67:ce:32:73:ec:60:e1:92:c0:69:12:8a:
c4:0d:70:81:f6:e7:a7:ec:97:9a:7e:4f:8f:0c:ad:
4b:01:a8:8c:41:91:0b:39:af:fb:1c:a7:79:d7:69:
56:68:ca:b0:8b:b0:e7:8e:b1:cd:10:c5:f8:47:8a:
a3:20:0d:ad:0c:fb:b4:c4:e2:a0:7d:7f:de:2d:54:
8d:e3:72:ef:3b:b9:29:2d:ef:2e:00:97:be:56:b1:
39:36:30:4b:31:69:03:0d:f5:26:ab:c7:27:bc:a0:
9f:79:c7:a5:03:82:ae:9d:3a:08:32:47:5c:41:a1:
a5:f2:57:90:df:de:d5:3c:85:d1:4e:9b:7b:ac:1b:
f0:4b:e5:36:be:3b:15:63:ce:a4:37:40:76:89:c6:
6f:4e:e7:41:cd:67:56:12:80:e5:36:3e:09:1a:ed:
78:99:64:39:c4:d4:75:8f:b7:3d:1f:43:c3:f0:d2:
b8:58:90:34:35:7a:44:cd:71:9a:53:7b:ee:ed:0e:
ce:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:6F:27:D9:8A:32:7D:9A:6F:0B:32:A3:F7:6A:3C:5B:E1:B4:38:EA
X509v3 Authority Key Identifier:
keyid:CD:F8:EF:D3:E3:16:6E:81:AA:CF:15:80:E2:F0:B9:4D:A2:9B:3D:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zfjv0-MWboGqzxWA4vC5TaKbPbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/86c170-2067-40ee-8923-a03ad529997c/1/zfjv0-MWboGqzxWA4vC5TaKbPbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/86c170-2067-40ee-8923-a03ad529997c/1/zfjv0-MWboGqzxWA4vC5TaKbPbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:c3:6a:38:65:3b:9c:87:44:94:81:0f:85:c0:be:ec:46:1b:
4e:2d:80:4f:02:90:51:0d:b9:fa:14:0b:61:48:eb:de:03:8c:
d8:49:ac:f8:bc:a8:de:09:c0:23:e2:eb:4a:06:36:3c:a0:40:
59:ef:cb:91:5d:ad:5e:6a:a5:cb:5e:cd:2a:3f:e4:ec:9a:ba:
c4:4d:6a:60:b6:04:00:69:04:c0:57:b2:83:99:d8:53:22:60:
82:b7:1d:16:40:df:8f:8f:58:ce:d7:1f:ea:c8:ca:97:6f:48:
e5:70:30:30:38:72:a9:d3:d8:38:e7:7e:f5:3d:93:33:49:4d:
bb:43:88:1b:c1:73:9f:b0:8a:e2:bd:75:2b:e8:a5:94:8d:bc:
14:d0:02:76:18:cc:2b:02:8d:d4:bc:c1:90:74:16:3d:d6:37:
d3:3e:89:e8:5e:0a:5a:5c:87:9e:dd:33:66:79:5e:6b:bf:37:
fe:a7:85:6d:f0:98:4a:ba:9a:a1:00:6b:3d:36:81:6e:2e:07:
67:2c:63:65:62:7a:dc:ef:14:9c:2e:2c:fc:6c:42:7c:56:9d:
84:cd:c5:4e:0e:d7:94:d0:d9:9a:f8:02:df:e8:bd:7e:a3:cf:
bb:23:04:93:6d:e0:15:7e:c7:80:cd:73:d5:3e:ec:8a:3f:d1:
df:ad:a1:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:24:41 2025 by rpki-client