Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/2ea928-d996-4c4d-b13b-5d596d00de9c/1/zmXC-Vin4hoxNZFu7RpNl4bgnaM.mft
File: zmXC-Vin4hoxNZFu7RpNl4bgnaM.mft (raw, json)
Hash identifier: ZLgdVIxqPZV9xXoLfsbIILsr6+HsRxq0JZ3ivJfkGl4=
Subject key identifier: A0:F8:96:6C:BF:A8:D4:0E:C7:04:40:20:E3:6E:17:B6:63:DA:B8:C8
Authority key identifier: CE:65:C2:F9:58:A7:E2:1A:31:35:91:6E:ED:1A:4D:97:86:E0:9D:A3
Certificate issuer: /CN=ce65c2f958a7e21a3135916eed1a4d9786e09da3
Certificate serial: 019A4F98FF94A025EC17E65CE0FB6FF185E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zmXC-Vin4hoxNZFu7RpNl4bgnaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/2ea928-d996-4c4d-b13b-5d596d00de9c/1/zmXC-Vin4hoxNZFu7RpNl4bgnaM.mft
Manifest number: 13CD
Signing time: Tue 04 Nov 2025 16:00:18 +0000
Manifest this update: Tue 04 Nov 2025 16:00:18 +0000
Manifest next update: Wed 05 Nov 2025 16:00:18 +0000
Files and hashes: 1: AalZ3RZGPmVBPL8EbkB-YzwV1bA.roa (hash: xQN6NagFLnVfkOh0FRJ47TszfhI1OJXGBTnKGRr5AuM=)
2: zmXC-Vin4hoxNZFu7RpNl4bgnaM.crl (hash: n3zsry3VPZAclJEdTv5FfxlHb+vthsHi8k59Tu/V2+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/2ea928-d996-4c4d-b13b-5d596d00de9c/1/zmXC-Vin4hoxNZFu7RpNl4bgnaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/2ea928-d996-4c4d-b13b-5d596d00de9c/1/zmXC-Vin4hoxNZFu7RpNl4bgnaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/zmXC-Vin4hoxNZFu7RpNl4bgnaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:98:ff:94:a0:25:ec:17:e6:5c:e0:fb:6f:f1:85:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce65c2f958a7e21a3135916eed1a4d9786e09da3
Validity
Not Before: Nov 4 16:00:18 2025 GMT
Not After : Nov 5 16:00:18 2025 GMT
Subject: CN=a0f8966cbfa8d40ec7044020e36e17b663dab8c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:98:23:75:7d:c3:15:38:93:c0:1e:05:6e:15:
8c:34:94:35:c8:8f:72:f3:5a:ad:cd:ef:50:78:54:
91:af:53:e6:b9:d8:73:71:c3:ff:02:68:5d:96:63:
55:05:bb:c0:c9:9b:67:2e:17:44:58:da:fd:f9:11:
1e:c8:a5:52:91:6a:df:44:79:41:3c:80:fe:86:9a:
fb:86:bb:fe:f3:dd:f9:73:ed:27:da:3c:c3:dd:bb:
db:dc:d7:4b:aa:7c:70:37:26:21:e3:12:d1:8f:62:
6e:dc:7f:ae:cd:07:ec:51:90:85:74:c2:58:d6:aa:
c3:e8:bf:09:9b:b0:18:2a:81:e0:cb:47:f9:d9:2d:
47:56:cf:a9:87:0e:09:b6:2b:01:4c:14:cf:2b:99:
11:39:55:4f:2e:e8:64:0d:16:e7:14:b7:03:49:3e:
b6:b2:3d:40:2e:a6:44:3c:6f:72:82:5e:16:97:56:
fa:6f:62:22:78:d7:09:f4:ca:e5:33:a7:dd:59:67:
7c:84:ca:d6:46:77:55:a9:21:d7:da:aa:3a:be:32:
33:2c:74:97:b5:fc:c4:42:12:9e:15:16:97:68:89:
fd:55:29:a5:a3:1f:d9:57:ec:94:83:d0:ce:2d:63:
cf:f1:26:ce:9f:01:1f:b7:af:1a:3f:1e:a7:7a:b2:
7c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:F8:96:6C:BF:A8:D4:0E:C7:04:40:20:E3:6E:17:B6:63:DA:B8:C8
X509v3 Authority Key Identifier:
keyid:CE:65:C2:F9:58:A7:E2:1A:31:35:91:6E:ED:1A:4D:97:86:E0:9D:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zmXC-Vin4hoxNZFu7RpNl4bgnaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2ea928-d996-4c4d-b13b-5d596d00de9c/1/zmXC-Vin4hoxNZFu7RpNl4bgnaM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2ea928-d996-4c4d-b13b-5d596d00de9c/1/zmXC-Vin4hoxNZFu7RpNl4bgnaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:2d:c2:71:e0:7b:f0:ad:b9:11:4c:59:99:12:d0:21:45:ae:
ae:ab:ea:77:f5:81:8f:97:05:3d:32:49:03:3a:a7:52:bd:b1:
8b:20:6f:b4:97:ca:19:05:64:18:cd:d5:a4:10:32:81:19:70:
7c:d2:02:03:70:47:f9:61:6e:db:61:52:8e:cc:30:b1:c9:6c:
23:5c:01:ff:dc:82:57:46:48:a9:32:06:ce:7a:2a:69:ce:86:
82:d3:13:f4:c6:f0:94:4b:8c:73:4f:84:59:1f:79:19:b9:0d:
e5:0f:1b:b3:e9:f0:c1:3c:f2:3a:ce:d6:51:65:4d:8e:51:4a:
d4:90:99:12:03:68:68:a2:a8:49:88:ac:48:34:da:a0:14:d3:
b4:27:ac:76:75:2d:2b:d1:e6:72:0a:f5:1d:14:c1:c7:db:55:
dd:44:83:50:55:af:43:1c:d4:ca:43:23:c9:bc:61:f4:12:77:
b9:3c:a6:9f:77:a2:97:e9:59:ab:6e:1c:4c:23:f6:e9:53:b7:
01:a7:15:42:fc:de:b0:be:01:c2:67:5b:94:9d:3e:82:44:3f:
5e:c4:ce:86:17:12:d4:f5:53:41:7c:2a:1e:6d:5f:6f:05:75:
81:e9:98:94:cc:48:63:8d:97:fa:2f:db:91:eb:c7:6b:47:4a:
b3:24:5c:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:10:46 2025 by rpki-client