Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/ZiWd6j6crm6BlYjFyRPwLUQQOYs.mft
File: ZiWd6j6crm6BlYjFyRPwLUQQOYs.mft (raw, json)
Hash identifier: 8KmAvMplNMf3lmKNNKltUOc39/5wkNzI/9DZ079t1DQ=
Subject key identifier: B3:9C:D4:42:E5:59:9B:95:3D:86:DC:85:99:58:08:56:01:44:93:0A
Authority key identifier: 66:25:9D:EA:3E:9C:AE:6E:81:95:88:C5:C9:13:F0:2D:44:10:39:8B
Certificate issuer: /CN=66259dea3e9cae6e819588c5c913f02d4410398b
Certificate serial: 019A4EF5E9524A0288C1A87237529AA12B76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZiWd6j6crm6BlYjFyRPwLUQQOYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/ZiWd6j6crm6BlYjFyRPwLUQQOYs.mft
Manifest number: 155D
Signing time: Tue 04 Nov 2025 13:02:10 +0000
Manifest this update: Tue 04 Nov 2025 13:02:10 +0000
Manifest next update: Wed 05 Nov 2025 13:02:10 +0000
Files and hashes: 1: 64PcT-ttV59tp4M6SLzIc1B2y1U.roa (hash: DimP9lf8Wwvo3/homuogbrevUAd8aPNUrD6/T7BCGD0=)
2: ZiWd6j6crm6BlYjFyRPwLUQQOYs.crl (hash: NifHB4MyBWtI9paiM58lZUBtVP5Q8XhHlSMtBvDq/y4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/ZiWd6j6crm6BlYjFyRPwLUQQOYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/ZiWd6j6crm6BlYjFyRPwLUQQOYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZiWd6j6crm6BlYjFyRPwLUQQOYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:e9:52:4a:02:88:c1:a8:72:37:52:9a:a1:2b:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66259dea3e9cae6e819588c5c913f02d4410398b
Validity
Not Before: Nov 4 13:02:10 2025 GMT
Not After : Nov 5 13:02:10 2025 GMT
Subject: CN=b39cd442e5599b953d86dc85995808560144930a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:08:8c:28:d9:3b:65:c3:01:6c:df:cb:2b:26:
12:16:29:1f:21:b3:18:08:a1:31:1e:67:1c:9f:7f:
a9:0f:7a:a5:92:51:f0:e4:8d:63:a0:2f:e2:7d:73:
ec:61:cc:e3:3a:98:13:b1:51:fe:14:53:00:f9:3d:
35:e6:6e:62:f1:2f:83:08:15:11:ff:23:82:c3:0b:
a6:37:78:aa:47:d4:84:72:ad:22:f0:6f:56:e2:12:
d8:cf:02:27:d1:86:ce:e3:ed:70:51:0f:75:4a:6d:
76:8e:2e:a1:1d:28:8b:9e:28:3a:a8:fb:e6:b6:06:
1a:11:bb:6f:db:1e:1d:17:f1:f0:f8:d7:d4:e3:0b:
5f:1c:b6:9a:b7:ba:11:58:8d:34:0c:5a:5a:88:5d:
10:09:d8:75:2e:9e:21:33:f7:a1:52:a5:25:35:5b:
45:7a:0f:18:64:61:99:89:bc:6a:e8:cb:78:68:ed:
84:09:37:fc:5c:4e:a3:44:7f:15:2a:92:28:1c:8b:
79:1e:e2:be:46:74:50:7a:87:4f:68:25:8a:00:4c:
ed:2e:26:87:a6:b7:ec:b2:2f:f3:ae:96:54:15:f5:
d5:8e:fb:f1:9b:f9:dc:42:5d:3a:dd:48:fe:d1:ae:
88:31:7d:40:21:2f:d9:d6:6c:55:d9:d9:19:56:b4:
86:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:9C:D4:42:E5:59:9B:95:3D:86:DC:85:99:58:08:56:01:44:93:0A
X509v3 Authority Key Identifier:
keyid:66:25:9D:EA:3E:9C:AE:6E:81:95:88:C5:C9:13:F0:2D:44:10:39:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZiWd6j6crm6BlYjFyRPwLUQQOYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/ZiWd6j6crm6BlYjFyRPwLUQQOYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/ZiWd6j6crm6BlYjFyRPwLUQQOYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:69:6a:8a:42:c8:a9:bf:5e:66:d2:6f:25:4b:ea:ae:9d:4a:
55:ba:e8:0b:3d:cf:0c:ec:c8:54:0b:31:9f:88:71:41:48:f9:
4a:6b:45:45:31:51:21:28:7f:03:be:9c:95:2c:39:74:24:e5:
80:e4:76:f5:d7:3c:25:ab:75:87:d2:8b:53:8d:cf:f8:24:d9:
ad:67:b9:b4:9d:36:3d:0a:9b:8c:5e:53:fb:f0:cc:52:0b:cc:
d7:cd:66:41:d6:83:27:b9:8c:da:d6:87:1e:28:bc:fc:d3:39:
7a:c7:6c:92:e4:31:0c:f3:3a:21:19:cf:1e:dc:ac:bd:40:d9:
b4:7a:75:22:f8:00:f7:78:07:fd:6f:05:b1:a4:34:29:98:6b:
20:05:b5:bd:9e:1b:22:85:c3:0a:e8:c0:5c:1c:a8:a7:1c:80:
45:aa:39:4d:ed:32:42:8f:e2:57:75:83:17:12:bc:f5:b3:5a:
4e:11:57:40:55:ca:27:7f:b4:ae:45:a6:47:82:14:21:d8:27:
80:74:eb:b2:b0:67:53:c7:0d:9e:a9:af:44:59:9b:22:80:89:
87:6c:a5:d2:9d:b6:78:22:f4:94:37:ed:8c:98:5b:99:9e:34:
93:a6:60:cb:9f:a1:a1:23:cc:cd:9c:fb:fc:a7:0d:8e:cb:17:
86:e0:21:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:31:27 2025 by rpki-client