Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.mft
File: ZhGlfSoDtwZfqMF7MTc1vc2jkOk.mft (raw, json)
Hash identifier: /S47H7x/Hw6ypZz7qcAuMKdYMC0mFYmeVV98nYbR2Pc=
Subject key identifier: 9C:A8:8D:D8:FF:E5:7B:66:83:48:AD:12:2D:54:28:DC:7C:75:14:A3
Authority key identifier: 66:11:A5:7D:2A:03:B7:06:5F:A8:C1:7B:31:37:35:BD:CD:A3:90:E9
Certificate issuer: /CN=6611a57d2a03b7065fa8c17b313735bdcda390e9
Certificate serial: 019A511982CC07757E8A2CDEDC2B49DA664F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.mft
Manifest number: 16A2
Signing time: Tue 04 Nov 2025 23:00:17 +0000
Manifest this update: Tue 04 Nov 2025 23:00:17 +0000
Manifest next update: Wed 05 Nov 2025 23:00:17 +0000
Files and hashes: 1: ZhGlfSoDtwZfqMF7MTc1vc2jkOk.crl (hash: woLFHKozZoiRRkMm1RmGItU1xF8MujfOe3Y9AAqsEqg=)
2: nh2jj_LSbHbo6dOlRaW604QLuxE.roa (hash: ajpkQ8o6WuSUyO59iQdi5/jQGtK2O9XCwMuhD9aQ4wY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:19:82:cc:07:75:7e:8a:2c:de:dc:2b:49:da:66:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6611a57d2a03b7065fa8c17b313735bdcda390e9
Validity
Not Before: Nov 4 23:00:17 2025 GMT
Not After : Nov 5 23:00:17 2025 GMT
Subject: CN=9ca88dd8ffe57b668348ad122d5428dc7c7514a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5c:0a:7e:d6:c5:69:6d:09:f1:e9:83:b6:f9:
e0:9d:9e:77:2d:bc:9a:ab:fd:30:6c:84:f1:a3:ce:
b0:32:40:cb:c4:27:81:88:da:b7:80:45:c9:38:9d:
4d:aa:70:6a:53:ca:b5:40:a2:52:f3:77:43:90:20:
56:c9:a7:0b:67:4c:58:aa:72:d7:cf:3f:4c:f3:85:
9a:8b:db:40:47:fd:07:75:d8:c0:da:37:ef:d4:14:
51:10:35:cd:69:82:76:e4:f2:44:37:5e:30:f1:0b:
48:43:9e:66:c9:3b:c5:f0:40:b3:02:54:24:b1:36:
b7:17:9c:0d:45:f0:8e:fc:b4:9c:8e:67:1a:50:c5:
36:7d:70:a6:d5:87:64:ec:24:d2:c7:bf:5b:11:cc:
2b:11:44:a4:c8:74:5f:b0:a2:df:9c:7d:8b:13:08:
69:d8:0b:9e:cc:87:ce:bb:93:83:d0:68:60:df:a0:
28:5f:3f:fd:d6:2b:8b:66:6a:01:dc:a6:f1:eb:fc:
3d:73:66:9c:50:79:41:59:cf:da:e4:9d:5e:80:0c:
33:75:fb:56:f8:a1:dc:b1:ab:eb:e0:9e:f9:a7:c0:
a7:ef:92:89:36:01:16:2f:9b:a9:6b:5b:58:07:81:
a8:f9:a0:42:09:32:00:3c:b3:e9:7e:44:90:ce:1a:
65:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:A8:8D:D8:FF:E5:7B:66:83:48:AD:12:2D:54:28:DC:7C:75:14:A3
X509v3 Authority Key Identifier:
keyid:66:11:A5:7D:2A:03:B7:06:5F:A8:C1:7B:31:37:35:BD:CD:A3:90:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:0f:20:b7:9f:b7:b1:c5:0f:c3:d8:95:09:1d:63:dc:da:2c:
86:77:03:ae:cd:7c:b0:56:d9:ec:b7:33:00:c1:87:4c:93:83:
43:a9:41:ad:be:e3:a3:1c:88:7c:3b:42:14:d2:d3:be:3b:49:
4d:50:bf:c0:80:46:38:0c:1b:63:79:17:4c:8d:69:95:b6:e2:
3c:e1:9f:75:b7:0a:a6:e2:30:9f:a4:16:f2:49:8d:ce:48:9f:
fc:9f:bd:9d:78:d3:41:20:de:8c:8f:6a:b4:42:40:1e:91:a7:
bb:6c:68:e8:2a:1f:9a:ba:81:88:24:f5:42:91:49:5a:ac:a9:
9e:11:93:bf:dd:da:99:56:4a:2e:8d:df:c4:f7:a7:bf:e0:fa:
bd:6b:11:b7:24:8f:b2:0f:a6:5b:d4:fb:fa:66:12:cb:e9:c5:
87:2e:e5:ea:7e:c6:5a:c1:5c:9f:48:41:80:9a:ee:10:47:f8:
bf:77:46:15:a5:9d:fd:b3:8c:a9:b7:ac:b5:62:d9:04:2c:fc:
2a:7e:39:d1:0a:86:66:68:25:ee:fb:29:39:b0:20:82:54:34:
a8:9b:51:c2:c2:b9:27:fd:36:02:01:ee:24:77:55:e2:48:e9:
da:e7:ea:2c:b8:9e:22:4c:45:4e:a0:92:9c:fd:14:4f:f3:2e:
e3:3e:d3:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:46:40 2025 by rpki-client