Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/7be02f-28f5-4209-935a-82d8ebe99424/1/Ze3JFheq3wwsx_H115bb237YWQ0.mft
File: Ze3JFheq3wwsx_H115bb237YWQ0.mft (raw, json)
Hash identifier: b98p7oRTqcKHigi9SLIM3PWMDYMKFrobVRpapoKyrtw=
Subject key identifier: 8F:95:31:94:03:E4:02:A5:20:8A:3D:41:45:0F:56:62:86:AB:D1:12
Authority key identifier: 65:ED:C9:16:17:AA:DF:0C:2C:C7:F1:F5:D7:96:DB:DB:7E:D8:59:0D
Certificate issuer: /CN=65edc91617aadf0c2cc7f1f5d796dbdb7ed8590d
Certificate serial: 019A503DED388FF518C909EDAB320B382AC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ze3JFheq3wwsx_H115bb237YWQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/7be02f-28f5-4209-935a-82d8ebe99424/1/Ze3JFheq3wwsx_H115bb237YWQ0.mft
Manifest number: 06D8
Signing time: Tue 04 Nov 2025 19:00:26 +0000
Manifest this update: Tue 04 Nov 2025 19:00:26 +0000
Manifest next update: Wed 05 Nov 2025 19:00:26 +0000
Files and hashes: 1: C0Em9awMYVhNg2sMId10Ef0_Qvw.roa (hash: nirBzQQ6k8BEyGM3hSdFnZ+pftgQMVbe2wljIKMV4wk=)
2: Ze3JFheq3wwsx_H115bb237YWQ0.crl (hash: 6oZxZWC868HarD+ro/scMyA2oPYTf+QcE2Hqr8g/GsI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/7be02f-28f5-4209-935a-82d8ebe99424/1/Ze3JFheq3wwsx_H115bb237YWQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/7be02f-28f5-4209-935a-82d8ebe99424/1/Ze3JFheq3wwsx_H115bb237YWQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ze3JFheq3wwsx_H115bb237YWQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3d:ed:38:8f:f5:18:c9:09:ed:ab:32:0b:38:2a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65edc91617aadf0c2cc7f1f5d796dbdb7ed8590d
Validity
Not Before: Nov 4 19:00:26 2025 GMT
Not After : Nov 5 19:00:26 2025 GMT
Subject: CN=8f95319403e402a5208a3d41450f566286abd112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ab:c8:c9:ed:d5:97:cc:53:54:f4:1b:d9:d5:
df:13:7e:2c:6a:e4:ff:2b:85:30:67:61:ca:08:ae:
0a:4d:84:e4:c1:8f:81:cd:f1:54:b8:00:65:30:b0:
f9:30:fc:4a:b1:07:54:cd:82:bf:97:f2:0c:0c:c1:
9d:3e:0a:1a:b3:31:3b:99:7b:97:4e:7b:e8:38:ae:
91:31:54:0e:9c:89:8a:18:a7:5d:41:24:42:0d:e1:
4c:3e:ee:f3:2d:ac:a1:22:a0:f5:bc:49:34:75:1e:
e6:d1:a2:52:d0:52:f8:66:15:aa:8f:25:1b:d2:e1:
4d:40:8b:09:40:97:fd:03:cc:e5:75:51:b6:b0:4d:
b8:3c:31:ff:f2:8f:26:79:24:f7:84:a0:86:a7:88:
6e:f7:93:81:2a:fd:87:f7:4a:b5:24:7f:2a:ec:fd:
ec:b9:7e:96:6b:69:94:1f:55:05:16:46:c8:78:d4:
fd:d1:f0:81:2f:ae:b8:9d:13:f4:35:f1:b1:f9:e1:
0f:62:36:5d:aa:b7:f7:c6:15:9b:ff:93:fc:22:a0:
33:c4:64:f8:46:56:0c:a6:68:ea:90:85:6a:7a:b4:
74:f5:41:c9:aa:3a:56:a7:2e:0b:2e:ef:6a:fe:17:
5d:87:22:60:44:cb:5d:4e:05:4a:6d:98:e7:6e:d1:
29:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:95:31:94:03:E4:02:A5:20:8A:3D:41:45:0F:56:62:86:AB:D1:12
X509v3 Authority Key Identifier:
keyid:65:ED:C9:16:17:AA:DF:0C:2C:C7:F1:F5:D7:96:DB:DB:7E:D8:59:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ze3JFheq3wwsx_H115bb237YWQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/7be02f-28f5-4209-935a-82d8ebe99424/1/Ze3JFheq3wwsx_H115bb237YWQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/7be02f-28f5-4209-935a-82d8ebe99424/1/Ze3JFheq3wwsx_H115bb237YWQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:53:5d:37:79:84:5f:be:ff:11:c9:5f:b3:46:9b:b1:f5:bd:
fc:8e:30:25:37:7a:f3:ce:46:a5:c2:55:eb:e6:37:2e:02:29:
98:c8:87:80:11:f2:04:60:1e:ec:f7:42:f1:c4:1a:1b:48:85:
aa:7f:cc:80:50:a6:ba:a9:07:59:b6:b3:32:bc:70:12:7c:e5:
dc:29:b9:4a:f9:50:e2:1a:56:fe:26:9d:f6:f7:68:9e:6c:a1:
07:6f:68:0b:96:8d:f2:1c:61:f4:71:fc:55:6d:12:ab:20:25:
57:08:01:7c:1b:16:9a:a0:92:49:a3:80:da:dc:47:12:ab:07:
b9:61:16:df:f9:cf:32:39:a4:c9:03:27:f2:2b:84:a2:da:0e:
09:e6:0c:9b:e6:37:6e:34:b2:8c:1b:64:a0:ea:78:45:f7:21:
aa:e3:b2:5a:67:7e:5f:fb:93:65:2d:f4:2e:39:56:38:12:59:
68:5c:00:50:de:49:4d:c4:cf:6b:e8:66:fa:99:2b:8f:f6:53:
21:f4:60:5e:18:f0:13:03:18:20:35:3a:62:ac:09:73:ce:a9:
39:81:3a:7b:d5:aa:bb:94:d6:0e:56:f5:78:ed:9d:60:5e:1f:
b7:4a:e5:a4:17:cf:65:6c:97:90:8d:bd:04:e4:11:3f:de:67:
e2:9b:29:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:43:08 2025 by rpki-client