Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/07bf29-07d1-4daf-b3bb-cbfb2c7fbadd/1/zxhBQM0aIj9ji3mW9UifSF2O5ic.mft
File: zxhBQM0aIj9ji3mW9UifSF2O5ic.mft (raw, json)
Hash identifier: 82FvCxJn92veav0h6/RZi2HwZ6ppcJCg8bFDsxHD+I8=
Subject key identifier: 67:6A:3D:FC:53:C1:87:28:74:CF:81:40:38:C8:17:58:21:E2:52:57
Authority key identifier: CF:18:41:40:CD:1A:22:3F:63:8B:79:96:F5:48:9F:48:5D:8E:E6:27
Certificate issuer: /CN=cf184140cd1a223f638b7996f5489f485d8ee627
Certificate serial: 019A4DE1E256BB3593F9681896DC5A9DA59F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zxhBQM0aIj9ji3mW9UifSF2O5ic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/07bf29-07d1-4daf-b3bb-cbfb2c7fbadd/1/zxhBQM0aIj9ji3mW9UifSF2O5ic.mft
Manifest number: 067E
Signing time: Tue 04 Nov 2025 08:00:40 +0000
Manifest this update: Tue 04 Nov 2025 08:00:40 +0000
Manifest next update: Wed 05 Nov 2025 08:00:40 +0000
Files and hashes: 1: FnA6f4DOd265nGzqUSApRurvL20.roa (hash: CKai/Ita+qQk4qWCNkCUXx6BxPFuVd8UKoy7z8Mf368=)
2: zxhBQM0aIj9ji3mW9UifSF2O5ic.crl (hash: tog3q88qjv3vYyF00SYscbq3NBFm+Z704xDALhfyZU0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/07bf29-07d1-4daf-b3bb-cbfb2c7fbadd/1/zxhBQM0aIj9ji3mW9UifSF2O5ic.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/07bf29-07d1-4daf-b3bb-cbfb2c7fbadd/1/zxhBQM0aIj9ji3mW9UifSF2O5ic.mft
rsync://rpki.ripe.net/repository/DEFAULT/zxhBQM0aIj9ji3mW9UifSF2O5ic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:e2:56:bb:35:93:f9:68:18:96:dc:5a:9d:a5:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf184140cd1a223f638b7996f5489f485d8ee627
Validity
Not Before: Nov 4 08:00:40 2025 GMT
Not After : Nov 5 08:00:40 2025 GMT
Subject: CN=676a3dfc53c1872874cf814038c8175821e25257
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:de:c0:c6:1a:4c:b2:0a:41:3f:a1:04:91:b4:
17:b5:aa:e0:fd:bd:85:0f:9c:63:01:14:d8:03:f9:
18:9a:16:01:a4:e6:d0:90:dc:d3:ba:c8:b0:b8:f7:
d9:39:df:73:1c:83:d9:bb:0f:ed:17:3d:f2:67:65:
95:f0:36:1c:83:67:ad:14:bc:dc:12:c8:33:38:6a:
6d:4f:67:73:26:26:61:2f:5e:6f:16:5b:b3:74:ea:
c0:ab:1c:73:6b:c6:1f:d8:26:a4:7c:1f:76:5d:d7:
f9:9f:55:da:79:2b:28:cd:f3:e5:9a:e7:95:93:70:
f5:44:fc:3c:5a:87:ab:ed:10:c9:9c:5a:b8:d5:a6:
50:b5:09:22:27:91:35:cd:60:89:d3:21:96:97:f6:
69:d3:9a:07:44:38:06:1b:7d:cf:03:3f:96:74:35:
e5:d4:9d:28:2d:9e:c8:c8:5c:58:38:34:13:b5:f5:
59:c9:d5:e9:8c:bb:43:fb:c6:ce:65:eb:66:f3:de:
39:b5:23:81:5e:d8:13:74:42:e1:ea:3d:d1:61:d4:
60:23:06:4a:be:b0:2e:d9:91:8f:8d:25:63:d8:1d:
dd:f2:f2:03:44:55:0a:b8:f2:54:b4:44:ea:57:e5:
ad:bf:52:11:3e:e9:7c:c6:8f:a4:8e:c1:1e:62:75:
fb:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:6A:3D:FC:53:C1:87:28:74:CF:81:40:38:C8:17:58:21:E2:52:57
X509v3 Authority Key Identifier:
keyid:CF:18:41:40:CD:1A:22:3F:63:8B:79:96:F5:48:9F:48:5D:8E:E6:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zxhBQM0aIj9ji3mW9UifSF2O5ic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/07bf29-07d1-4daf-b3bb-cbfb2c7fbadd/1/zxhBQM0aIj9ji3mW9UifSF2O5ic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/07bf29-07d1-4daf-b3bb-cbfb2c7fbadd/1/zxhBQM0aIj9ji3mW9UifSF2O5ic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:9e:8a:7e:6c:60:48:f6:59:51:70:a2:c1:68:c6:1e:e0:a0:
a5:40:3a:b7:29:3d:ff:1a:51:97:70:3d:e5:87:c9:e7:25:15:
e1:32:ac:3a:dd:32:f7:77:09:7b:5c:cf:1a:b9:60:88:44:6c:
74:63:9a:72:75:65:aa:7e:1f:ec:b1:99:af:5c:dc:14:1a:54:
4b:85:d6:2e:b5:c2:b6:e5:bb:34:68:6b:b3:f7:5e:26:5d:a1:
7c:fc:05:75:ff:a2:7c:3b:ac:a2:71:89:05:e4:fb:55:83:3d:
24:a8:53:00:de:05:6e:0b:f8:25:43:fb:f0:11:e1:82:3c:a0:
a4:f6:ad:97:42:68:27:b4:27:6b:80:2f:89:71:16:8c:21:fe:
12:7e:6b:db:75:06:59:16:90:04:67:05:e8:75:52:9c:31:d6:
13:3b:c0:a8:f9:63:b4:a1:62:f1:c6:2f:22:0d:c2:5c:2f:00:
63:59:2d:21:cc:4f:67:ed:04:16:30:60:84:08:81:1c:ef:31:
a9:2c:3e:d2:a5:34:80:38:58:3e:31:70:41:73:f5:a0:2d:1d:
f2:ae:54:4b:5f:c9:5c:3b:95:fc:63:f0:57:78:d5:3c:8e:90:
2a:4c:86:31:a0:48:65:bc:39:02:65:63:57:f2:db:70:0c:ca:
3b:c7:03:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:00:35 2025 by rpki-client