Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0d3b13-c4a1-41c0-a839-aede3ffa4457/1/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.mft
File: ZYKQ_pgU_LBiq3HjLsH5bamXOjM.mft (raw, json)
Hash identifier: UNfieI8HyCVQV0fSsv82X8KoGo57pWhE/i328n5FjyI=
Subject key identifier: E9:9A:03:73:2C:CE:89:98:FA:78:8B:29:B8:26:08:50:8A:AC:A2:D9
Authority key identifier: 65:82:90:FE:98:14:FC:B0:62:AB:71:E3:2E:C1:F9:6D:A9:97:3A:33
Certificate issuer: /CN=658290fe9814fcb062ab71e32ec1f96da9973a33
Certificate serial: 019A5119C6F84D4D95EA0E7193BBAA881CCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0d3b13-c4a1-41c0-a839-aede3ffa4457/1/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 23:00:34 +0000
Manifest this update: Tue 04 Nov 2025 23:00:34 +0000
Manifest next update: Wed 05 Nov 2025 23:00:34 +0000
Files and hashes: 1: CHPWlUWLkhhN8KqcQvdgSIi7nSQ.roa (hash: oTR4o/Lu/P2pP/jqKMJRfshRV5ap+zULnMucNhK6ij0=)
2: D4kPuzxI99LO9za1uzpIOKYzyZk.roa (hash: c+Ehw1XN1UBVbiuLbeIY9bu5RDnn9bT1POuqZJ3ek+g=)
3: ZYKQ_pgU_LBiq3HjLsH5bamXOjM.crl (hash: TDTmi0yHQnTSb9K9GSePGu7uifftxViU+D4mQYh3gWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/0d3b13-c4a1-41c0-a839-aede3ffa4457/1/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/0d3b13-c4a1-41c0-a839-aede3ffa4457/1/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:19:c6:f8:4d:4d:95:ea:0e:71:93:bb:aa:88:1c:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=658290fe9814fcb062ab71e32ec1f96da9973a33
Validity
Not Before: Nov 4 23:00:34 2025 GMT
Not After : Nov 5 23:00:34 2025 GMT
Subject: CN=e99a03732cce8998fa788b29b82608508aaca2d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ba:45:19:3d:41:48:b4:c2:6e:91:11:07:85:
93:65:54:94:03:40:b1:90:ad:0d:db:2d:ef:4c:d1:
53:66:72:cb:3b:39:76:7f:99:09:d7:a9:db:22:32:
48:e1:10:56:b3:d5:a5:99:30:95:37:df:83:5a:1e:
93:c8:81:71:7a:fa:39:58:bb:5a:b3:c6:4b:c5:13:
c7:74:d9:6a:ca:19:7b:39:4d:d9:16:77:85:55:50:
8b:56:5b:e8:32:71:c8:cb:07:b6:e4:26:36:74:d7:
7c:9d:a7:27:81:ee:96:f3:f8:a6:55:34:06:f1:56:
bf:a3:ea:36:52:fc:41:0e:61:a0:35:32:7a:ee:07:
43:43:5d:78:f4:04:8b:2e:ca:ed:cc:e0:49:60:f6:
e8:f2:3e:40:a1:36:e9:63:17:5b:7f:a6:d8:64:41:
27:f3:a5:85:7e:d4:90:c4:39:d0:0e:f4:d9:6c:c2:
30:14:25:65:b9:96:b9:16:2e:86:77:18:ae:b6:6c:
05:e1:72:66:a3:2e:aa:4f:79:74:97:47:03:55:bb:
88:04:71:02:02:33:ef:47:7f:ed:dc:7f:32:ea:5a:
de:eb:bb:2e:96:e4:d2:24:3d:6a:fe:de:a5:65:74:
4c:94:97:37:52:85:e9:76:05:c9:e3:ba:89:e0:5d:
12:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:9A:03:73:2C:CE:89:98:FA:78:8B:29:B8:26:08:50:8A:AC:A2:D9
X509v3 Authority Key Identifier:
keyid:65:82:90:FE:98:14:FC:B0:62:AB:71:E3:2E:C1:F9:6D:A9:97:3A:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d3b13-c4a1-41c0-a839-aede3ffa4457/1/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d3b13-c4a1-41c0-a839-aede3ffa4457/1/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:7e:96:df:a1:9f:4d:9a:0e:6f:45:30:af:d5:4a:46:67:fd:
bc:d6:cd:01:3a:5d:d0:4c:2d:34:5f:22:ec:5e:f9:14:96:c1:
4f:bd:31:cf:81:4d:72:a0:9a:1b:e0:87:ae:c9:f3:5f:aa:a9:
00:50:c2:7b:5f:60:64:a4:37:7f:e8:09:96:7c:1b:e0:06:bb:
0f:d1:c7:f7:c8:8f:a0:12:4a:ed:70:2c:25:a7:cf:5e:28:71:
51:c8:7c:57:8f:5d:c8:70:92:0e:fc:7f:7a:dc:4c:81:f6:d7:
fb:19:55:19:5e:82:3c:64:3d:ac:38:06:be:80:94:1f:d6:39:
ca:6f:ba:92:1f:6d:53:71:f4:73:67:3c:9e:12:e3:c0:e1:d2:
d7:97:8d:fa:ae:bf:64:6d:fc:dd:82:c8:d7:81:a3:3d:2a:a0:
cf:e3:25:44:31:7b:5c:66:6a:da:2b:4f:fa:cf:f8:2b:9a:9a:
9c:a8:3d:84:a4:04:8c:15:36:4d:d1:b4:7a:55:e1:a7:09:c1:
37:08:10:f4:64:4e:25:a4:8a:b0:5e:5a:92:32:44:bc:bd:43:
31:4c:af:21:14:c8:42:ed:fd:6c:f6:db:99:bb:a0:ab:da:df:
55:b8:e9:c0:b5:72:41:e3:6d:0f:cb:21:29:a3:df:4c:0e:4a:
8f:66:16:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:05:11 2025 by rpki-client