Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/064fac-eddd-4903-a13d-0b9c76c0d91c/1/ZX7W9bumM9VSaf3QVrz2DGjHsrg.mft
File: ZX7W9bumM9VSaf3QVrz2DGjHsrg.mft (raw, json)
Hash identifier: mXYlzOEFvsUdRRW6rcNDM0/7AvUxad2vFs2Za7YK7Cw=
Subject key identifier: C4:97:6A:25:17:DB:49:F4:02:8D:CF:BA:3B:9B:A2:3C:2C:12:57:DE
Authority key identifier: 65:7E:D6:F5:BB:A6:33:D5:52:69:FD:D0:56:BC:F6:0C:68:C7:B2:B8
Certificate issuer: /CN=657ed6f5bba633d55269fdd056bcf60c68c7b2b8
Certificate serial: 019A4D06AB33DCEA4D2DE1B1DA2BA72E5A26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZX7W9bumM9VSaf3QVrz2DGjHsrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/064fac-eddd-4903-a13d-0b9c76c0d91c/1/ZX7W9bumM9VSaf3QVrz2DGjHsrg.mft
Manifest number: 1711
Signing time: Tue 04 Nov 2025 04:01:13 +0000
Manifest this update: Tue 04 Nov 2025 04:01:13 +0000
Manifest next update: Wed 05 Nov 2025 04:01:13 +0000
Files and hashes: 1: Wi8TeX6HlCf6UscTIz-eiQunz20.roa (hash: iC2va1BTrYFKnldJrvaufKukdaOfozas1t65U+xf85Q=)
2: ZX7W9bumM9VSaf3QVrz2DGjHsrg.crl (hash: u2riF2TcYE5QygXRIOjD5AS4IrOHIW0ggX8LMqvHp+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/064fac-eddd-4903-a13d-0b9c76c0d91c/1/ZX7W9bumM9VSaf3QVrz2DGjHsrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/064fac-eddd-4903-a13d-0b9c76c0d91c/1/ZX7W9bumM9VSaf3QVrz2DGjHsrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZX7W9bumM9VSaf3QVrz2DGjHsrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:06:ab:33:dc:ea:4d:2d:e1:b1:da:2b:a7:2e:5a:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=657ed6f5bba633d55269fdd056bcf60c68c7b2b8
Validity
Not Before: Nov 4 04:01:13 2025 GMT
Not After : Nov 5 04:01:13 2025 GMT
Subject: CN=c4976a2517db49f4028dcfba3b9ba23c2c1257de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:83:50:2c:f6:d1:27:96:78:c9:b0:ad:b7:b9:
d3:86:cf:89:8f:1e:a8:31:38:a8:80:6a:f1:6e:7f:
ae:dd:af:ee:c3:ba:87:b9:05:af:2d:8d:ef:04:d2:
ea:ac:5a:e2:4f:c5:bf:70:01:94:09:53:2d:40:3e:
7f:4a:98:52:1c:44:67:9e:6b:03:71:b9:7a:8f:4d:
34:be:64:67:3b:ec:53:7a:2b:87:8d:b7:da:ba:12:
fd:b2:e4:06:68:17:5b:f4:80:d5:5f:82:cb:84:a0:
6a:a6:3d:07:ee:98:29:1e:21:ab:cc:12:3a:e9:b8:
f2:96:7f:f3:d4:b6:e1:ea:3e:71:33:4b:5e:54:8a:
26:82:f1:8c:05:51:82:1a:c0:2a:58:cf:5f:64:43:
ab:98:8f:48:99:fc:8b:1e:0a:1f:24:3a:b2:65:ca:
f8:e3:fc:9e:ff:bc:4e:c9:34:5d:74:38:e5:e0:58:
50:ed:f2:e6:ee:9d:f7:d0:62:83:e6:0e:e4:c9:57:
d7:af:56:7e:a9:b5:9f:31:5a:86:53:61:ca:49:bb:
01:a7:7f:5b:bd:9a:35:07:72:a1:46:38:d8:d0:db:
7d:a5:76:5b:d4:72:b6:5a:31:21:11:94:f5:db:7d:
96:df:4c:19:eb:5a:87:f1:4c:e1:70:22:1c:8f:e7:
f3:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:97:6A:25:17:DB:49:F4:02:8D:CF:BA:3B:9B:A2:3C:2C:12:57:DE
X509v3 Authority Key Identifier:
keyid:65:7E:D6:F5:BB:A6:33:D5:52:69:FD:D0:56:BC:F6:0C:68:C7:B2:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZX7W9bumM9VSaf3QVrz2DGjHsrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/064fac-eddd-4903-a13d-0b9c76c0d91c/1/ZX7W9bumM9VSaf3QVrz2DGjHsrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/064fac-eddd-4903-a13d-0b9c76c0d91c/1/ZX7W9bumM9VSaf3QVrz2DGjHsrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:9b:ce:9a:61:ac:67:56:13:0d:10:cc:af:c3:b8:a1:ae:b1:
a7:92:ee:d5:47:d7:a9:90:83:73:d5:2d:33:1b:3d:c0:91:80:
9e:66:fc:1b:59:34:dd:7f:e4:48:05:ab:cb:70:15:8b:fd:18:
a5:9a:7b:21:53:fc:6a:02:7a:2a:23:73:b9:88:3c:2c:c3:c4:
d5:c1:87:44:a8:ae:5f:87:f7:e8:52:06:ac:20:41:17:86:93:
51:ca:1c:7c:ae:44:77:8f:ba:eb:12:fb:2b:f4:e2:67:3e:68:
96:3e:67:25:e2:8d:98:ca:f2:e2:f4:5c:03:97:19:7c:c6:ca:
13:12:75:15:a7:a1:63:da:52:90:de:74:17:ef:93:4d:60:ae:
b9:86:01:c8:02:40:e8:cb:44:11:0e:e4:15:eb:f1:38:02:77:
85:cb:6c:83:dc:c7:fc:78:76:d7:6b:ee:06:99:9c:d8:3b:c0:
c5:27:c2:81:2b:ce:d6:32:64:45:1b:a0:77:95:76:9e:9e:3e:
8e:ca:fb:8c:50:72:83:4a:54:7d:79:fd:be:32:ab:83:bb:15:
0e:2b:e4:a6:f8:60:84:29:01:c1:a8:61:d2:5a:4f:6f:1e:a7:
e5:b9:0e:3e:77:c6:f8:08:7e:7c:d3:f6:c9:ba:82:e4:4b:8e:
15:90:f1:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:55:32 2025 by rpki-client