Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/736a4a-39e0-4119-b4cb-082d924c2f33/1/ZctPbNhIn93Rc5cKDvRNThVHpAU.mft
File: ZctPbNhIn93Rc5cKDvRNThVHpAU.mft (raw, json)
Hash identifier: pvhur9cPGCP/UZ+pSoR9YNIV0RlLbGYgVragMhS4w8E=
Subject key identifier: 1A:97:C8:07:87:30:CD:D2:FB:F0:BD:95:46:E8:5D:E9:2C:60:BE:8F
Authority key identifier: 65:CB:4F:6C:D8:48:9F:DD:D1:73:97:0A:0E:F4:4D:4E:15:47:A4:05
Certificate issuer: /CN=65cb4f6cd8489fddd173970a0ef44d4e1547a405
Certificate serial: 019A51BEA537E9489B86366D67EEF4E9094A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZctPbNhIn93Rc5cKDvRNThVHpAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/736a4a-39e0-4119-b4cb-082d924c2f33/1/ZctPbNhIn93Rc5cKDvRNThVHpAU.mft
Manifest number: 0E75
Signing time: Wed 05 Nov 2025 02:00:39 +0000
Manifest this update: Wed 05 Nov 2025 02:00:39 +0000
Manifest next update: Thu 06 Nov 2025 02:00:39 +0000
Files and hashes: 1: 23ACakt78guGwZL3RTi3BKpWsN0.roa (hash: ghjCo7Sw3s2bis0gLmZ8QzY5m7KOd3dJNA0mX218fws=)
2: ZctPbNhIn93Rc5cKDvRNThVHpAU.crl (hash: lhMV+AVciq9tNl8jLkEOJ/EJ1YL1rvC2YjRR24zUhiA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/736a4a-39e0-4119-b4cb-082d924c2f33/1/ZctPbNhIn93Rc5cKDvRNThVHpAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/736a4a-39e0-4119-b4cb-082d924c2f33/1/ZctPbNhIn93Rc5cKDvRNThVHpAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZctPbNhIn93Rc5cKDvRNThVHpAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:a5:37:e9:48:9b:86:36:6d:67:ee:f4:e9:09:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65cb4f6cd8489fddd173970a0ef44d4e1547a405
Validity
Not Before: Nov 5 02:00:39 2025 GMT
Not After : Nov 6 02:00:39 2025 GMT
Subject: CN=1a97c8078730cdd2fbf0bd9546e85de92c60be8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fd:50:6c:4b:82:c5:7a:0c:f6:80:b5:55:a6:
a3:f1:b5:9e:0e:26:59:5f:a6:1a:c9:c9:11:61:ce:
de:13:3a:4a:af:84:8b:95:82:ef:34:36:e1:5b:4e:
e0:c2:08:d0:b0:81:e1:bc:91:66:88:d9:d7:cd:53:
b7:d2:34:55:cd:f9:1a:9e:1c:11:86:8d:80:0b:11:
f0:67:82:b1:05:b9:8d:5a:05:19:bc:9d:d9:76:34:
2b:5c:f7:5d:da:58:f8:c7:f6:c5:37:db:dd:32:51:
58:af:6b:fe:62:46:f7:39:03:4a:6b:36:72:0d:6b:
34:53:c6:95:ac:6b:1c:e6:f9:e1:c6:89:bc:54:ce:
90:cd:25:72:50:13:2b:f7:3b:94:5d:40:1c:c6:ef:
76:61:6f:2c:71:df:1e:9e:a3:99:e5:5e:dc:69:3f:
3a:84:d5:8f:52:2e:49:e7:52:e0:5f:71:7f:b5:f7:
87:71:37:c1:ea:94:69:b3:3c:57:dd:1e:05:43:88:
22:7e:4e:20:40:08:fe:20:32:51:14:28:a9:c1:61:
d8:16:e7:1c:de:44:b2:cf:5b:af:55:9a:20:6d:9f:
fe:a8:bc:3b:19:50:97:a1:7d:af:27:81:02:54:e0:
f8:a1:87:f6:f7:cd:c1:e7:c0:fc:a1:e8:56:dd:d1:
9b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:97:C8:07:87:30:CD:D2:FB:F0:BD:95:46:E8:5D:E9:2C:60:BE:8F
X509v3 Authority Key Identifier:
keyid:65:CB:4F:6C:D8:48:9F:DD:D1:73:97:0A:0E:F4:4D:4E:15:47:A4:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZctPbNhIn93Rc5cKDvRNThVHpAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/736a4a-39e0-4119-b4cb-082d924c2f33/1/ZctPbNhIn93Rc5cKDvRNThVHpAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/736a4a-39e0-4119-b4cb-082d924c2f33/1/ZctPbNhIn93Rc5cKDvRNThVHpAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:66:30:8b:e1:23:08:fd:cf:cf:bd:bf:50:30:f3:62:98:3a:
60:d3:c5:c4:5c:5f:46:46:a8:b3:18:e7:94:5e:84:9d:e4:b6:
d7:ff:02:2a:d0:7a:39:1a:36:8c:55:3a:db:80:1d:97:4d:11:
15:26:02:7a:24:6e:09:44:ea:2e:bf:0c:08:6e:f9:d7:21:9c:
f7:86:fd:6d:97:d0:33:9f:ca:97:44:c3:26:54:31:ce:54:a9:
55:0a:8e:82:d9:a5:25:62:06:42:81:9f:28:1e:80:17:c1:5f:
bf:02:6e:92:58:34:a5:b6:40:2e:f3:52:65:97:d2:7f:6c:76:
23:7d:32:21:67:f4:56:23:e5:b0:a2:48:21:2c:2a:fb:bc:18:
74:5f:56:9f:f9:4a:c1:42:59:e1:99:8e:8e:ce:d0:1f:dc:da:
8f:df:95:5b:a3:29:c3:cc:58:02:60:01:b9:7b:be:32:a5:75:
cf:a4:96:23:10:07:73:95:7f:5d:fa:4e:84:c5:e5:56:15:8c:
3a:cf:36:2e:28:94:a3:c2:89:83:c5:de:c5:be:21:27:d4:5a:
ca:bc:ea:99:fd:c8:95:1b:54:42:0d:a5:46:36:cc:a8:82:78:
17:4e:84:7e:79:e1:00:b4:8c:de:fc:7d:10:f6:24:00:41:be:
b6:8a:52:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:48:57 2025 by rpki-client