Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.mft
File: ZRaETSRdQSSiKlNrBG2oYzLQuRE.mft (raw, json)
Hash identifier: o8oBoN82qIMPNCpWsOmJUgZ1E8nrAKBc7cY1EDR6wxc=
Subject key identifier: 0C:91:70:65:8D:A2:82:B7:A7:91:A2:18:B9:82:CB:50:54:EF:7F:5E
Authority key identifier: 65:16:84:4D:24:5D:41:24:A2:2A:53:6B:04:6D:A8:63:32:D0:B9:11
Certificate issuer: /CN=6516844d245d4124a22a536b046da86332d0b911
Certificate serial: 019A51BE88492214551C854B31C191625EC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZRaETSRdQSSiKlNrBG2oYzLQuRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.mft
Manifest number: 078C
Signing time: Wed 05 Nov 2025 02:00:32 +0000
Manifest this update: Wed 05 Nov 2025 02:00:32 +0000
Manifest next update: Thu 06 Nov 2025 02:00:32 +0000
Files and hashes: 1: 59hx8MiVy0L5bbCsrmz6L5yJrmQ.roa (hash: tUrCnGXwIpcsX6KWOsldh7ImOj30jilIGBTNNVRq1UU=)
2: ZRaETSRdQSSiKlNrBG2oYzLQuRE.crl (hash: 54SmitIYEpde0jBysRKlb8lCeHKS/Ddt6Uq8dnibWAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZRaETSRdQSSiKlNrBG2oYzLQuRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 02:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:88:49:22:14:55:1c:85:4b:31:c1:91:62:5e:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6516844d245d4124a22a536b046da86332d0b911
Validity
Not Before: Nov 5 02:00:32 2025 GMT
Not After : Nov 6 02:00:32 2025 GMT
Subject: CN=0c9170658da282b7a791a218b982cb5054ef7f5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:80:70:bc:e7:fc:9b:15:87:50:7d:34:21:6d:
1f:39:3c:44:fa:c9:23:b5:c8:fe:6a:e6:e2:ae:69:
88:32:97:54:75:db:13:a1:8a:7e:f4:40:2b:2f:db:
f1:70:85:c6:58:1a:b2:ab:46:9b:e4:52:6d:ea:57:
57:ea:ff:19:50:9a:07:16:cd:b2:f8:8a:59:52:34:
19:3d:2e:35:6d:5a:1b:7f:7c:df:e8:a4:93:81:f6:
08:93:56:e0:14:b3:72:0c:14:c7:a6:42:9b:f8:9e:
f2:db:30:84:91:0a:01:45:d4:ce:b2:28:7b:e2:34:
e7:18:1e:3b:b3:32:db:bd:9f:7f:e1:fe:60:b5:e6:
fc:b3:f9:b9:5f:d3:f2:7a:4d:c5:2b:77:fd:61:74:
2c:0b:c2:c8:72:76:4c:fa:49:03:80:39:cb:12:f6:
4d:0d:1b:52:4c:4a:96:c3:94:eb:bd:17:4b:dc:db:
af:cf:d1:c9:33:fe:9a:bb:24:77:66:9b:b0:46:9f:
0b:e8:9d:c0:51:a3:c2:66:b0:13:b5:e7:46:97:2d:
67:da:e6:dc:a9:fb:48:a9:b7:73:da:d5:3f:ff:9f:
1f:97:ca:43:65:cd:dc:d5:70:0e:9e:71:34:e7:68:
a3:55:04:3c:da:b9:f8:48:70:e8:83:0e:19:55:0f:
9f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:91:70:65:8D:A2:82:B7:A7:91:A2:18:B9:82:CB:50:54:EF:7F:5E
X509v3 Authority Key Identifier:
keyid:65:16:84:4D:24:5D:41:24:A2:2A:53:6B:04:6D:A8:63:32:D0:B9:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRaETSRdQSSiKlNrBG2oYzLQuRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:0d:08:46:37:f4:43:5c:d7:fd:f4:d8:57:4e:4f:e3:eb:70:
d8:1c:3b:d4:89:f5:c9:5d:87:ed:ad:01:08:06:7b:20:78:d2:
25:77:8b:28:26:c5:f4:be:03:7d:46:e3:03:bd:01:79:80:9e:
62:f9:99:c7:94:b7:8b:4e:34:f7:2f:7b:f0:bf:47:51:68:f2:
99:a2:15:93:84:03:a5:f8:8e:57:e7:3c:a6:f0:c2:d4:9f:be:
f7:88:28:12:a1:38:63:d8:ce:f0:26:ba:ed:ca:01:37:b2:7d:
9c:73:16:a3:26:1e:ba:d1:bf:b2:d3:55:e7:de:af:37:fb:4d:
15:a5:2c:ae:46:35:dd:c6:2c:c4:3c:86:3e:8d:71:d4:d0:25:
19:a3:1c:84:59:37:4c:6d:1a:ff:2a:d2:a4:a1:67:9e:53:ee:
51:ed:72:87:1a:a1:a1:8d:00:7f:af:b7:79:a5:4d:87:cc:16:
d2:e0:80:40:b5:44:2a:a0:bb:43:51:ec:66:0b:61:da:34:6d:
22:7e:6b:22:1e:62:40:9a:31:17:2f:59:a8:0d:91:23:cb:eb:
3d:91:6a:52:06:7f:8b:3b:fb:de:47:5e:5b:80:9e:27:40:e2:
50:ad:72:c1:b3:38:00:2d:68:30:c3:f1:03:67:72:76:aa:61:
44:5f:3a:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:09:44 2025 by rpki-client