Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.mft
File: ZmA0ymoWu9AUSr31zyRY-WixWJw.mft (raw, json)
Hash identifier: LIoiUhLgGmH6DwAgA/PDcvnq7Q0J35S1pBIy9WsOw6s=
Subject key identifier: B6:7A:36:2F:D3:AB:87:0B:A3:8F:9A:AF:A3:16:53:AA:65:E5:95:99
Authority key identifier: 66:60:34:CA:6A:16:BB:D0:14:4A:BD:F5:CF:24:58:F9:68:B1:58:9C
Certificate issuer: /CN=666034ca6a16bbd0144abdf5cf2458f968b1589c
Certificate serial: 019A56400391FA20DE80D86E4040E700310A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZmA0ymoWu9AUSr31zyRY-WixWJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.mft
Manifest number: 0BCB
Signing time: Wed 05 Nov 2025 23:00:26 +0000
Manifest this update: Wed 05 Nov 2025 23:00:26 +0000
Manifest next update: Thu 06 Nov 2025 23:00:26 +0000
Files and hashes: 1: 5bucpm77LtnXjK7o-jpiDW291Yw.roa (hash: S2CYvpEr7FdqvUdlAxqrDbEjDQNF8pYqq1mftWv1ZPE=)
2: 81yN31-IxQXIZI5PlY-trqqNIno.roa (hash: v9l8y9I+7ljSUfpIaDADoFiNw5hBtJQ72MRZ64GdbyQ=)
3: ZmA0ymoWu9AUSr31zyRY-WixWJw.crl (hash: TM5U6niBlQJ040x/mSdd7x4hw3i34rJi7EhVa28Cguo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZmA0ymoWu9AUSr31zyRY-WixWJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 21:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:56:40:03:91:fa:20:de:80:d8:6e:40:40:e7:00:31:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=666034ca6a16bbd0144abdf5cf2458f968b1589c
Validity
Not Before: Nov 5 23:00:26 2025 GMT
Not After : Nov 6 23:00:26 2025 GMT
Subject: CN=b67a362fd3ab870ba38f9aafa31653aa65e59599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7a:34:9b:45:ed:69:bf:ae:01:69:dd:24:d3:
79:bb:14:d6:64:39:61:62:3c:74:8f:43:91:53:2b:
43:33:d8:76:fd:ff:92:89:13:09:3b:40:e0:d7:ed:
8b:c3:04:df:e0:69:5f:9a:92:d0:2b:7d:6d:42:a9:
ba:b0:60:d6:ab:78:6b:f2:a3:db:81:60:b6:f3:41:
e9:f4:d8:2c:bc:53:68:26:a6:ba:34:4e:b8:ac:29:
42:a8:05:3d:6f:7c:14:66:30:9b:05:61:cd:08:08:
b6:35:a3:f3:14:56:bb:8f:47:fa:61:e9:aa:b5:fb:
56:c4:9f:08:a3:ae:d7:df:93:fb:2d:a9:16:a7:46:
a5:03:ef:69:27:56:38:b9:1d:25:63:39:a9:c4:6d:
6e:b0:5d:ae:c4:c8:8d:c3:3b:c9:ec:fb:cb:78:72:
33:ad:f4:e0:e5:14:1f:b6:5f:97:69:ad:a9:c3:66:
04:5c:56:22:f3:d2:0d:4a:47:80:20:ca:41:36:46:
c1:ff:b0:aa:5b:68:1e:ed:c6:8a:52:09:23:65:5b:
18:5c:22:73:70:87:5c:d8:cb:40:ed:9a:f9:5a:89:
e2:58:05:22:52:33:2d:cc:62:b3:d8:48:72:b9:63:
ea:df:9b:86:02:7a:46:67:f8:30:14:2b:c6:c2:3f:
0d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:7A:36:2F:D3:AB:87:0B:A3:8F:9A:AF:A3:16:53:AA:65:E5:95:99
X509v3 Authority Key Identifier:
keyid:66:60:34:CA:6A:16:BB:D0:14:4A:BD:F5:CF:24:58:F9:68:B1:58:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmA0ymoWu9AUSr31zyRY-WixWJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:d0:b3:ae:a4:a4:33:30:a2:73:a7:b8:bf:41:c7:09:0d:b2:
88:16:ea:c0:ff:e4:13:90:9c:ca:22:81:4b:75:65:e9:5e:87:
8d:d7:23:fe:c4:0e:fb:d7:dd:db:86:51:3f:3a:e7:06:da:5a:
2d:04:d7:58:da:40:ca:79:7b:14:7c:71:8c:77:f4:8c:13:bc:
cb:4a:b0:dc:ae:32:d2:ac:47:81:97:72:68:2d:44:e9:f7:47:
15:9d:8b:fd:88:ae:50:ba:a2:55:3b:6b:63:fc:2b:28:db:d9:
1c:97:7a:df:32:7c:6b:cb:8b:47:a0:ae:8c:33:21:4d:0b:16:
d4:d9:c1:ea:36:15:fc:db:45:39:e0:29:d5:8f:4e:54:4a:5a:
53:df:03:88:68:29:71:b1:18:ea:63:95:50:b0:b7:11:48:6f:
e8:98:48:c3:ff:89:90:f1:e7:ff:8d:36:0d:09:85:57:02:1f:
20:5f:ea:22:99:b3:54:6e:3c:7b:bf:45:95:ff:73:49:b0:ca:
4b:f2:8e:90:22:8b:3c:89:45:bd:3c:a7:9e:73:e7:3e:0b:34:
6a:96:b6:3e:61:97:98:24:7d:32:d9:91:4f:6d:0b:ad:e2:86:
62:cb:58:59:26:16:4d:d3:b1:fb:b1:f7:a3:ab:5c:52:9f:43:
7a:4b:61:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 00:09:20 2025 by rpki-client