Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/e2f9ff-c460-40a2-a357-77ef87a73e13/1/t_ZG3kFAcvwat2sbLJ4Iub0hqEM.mft
File: t_ZG3kFAcvwat2sbLJ4Iub0hqEM.mft (raw, json)
Hash identifier: nXCZkSf/aBv/tL2J8qzMfDsh52rssx9V2Jp2mpWGjmg=
Subject key identifier: 8E:D6:1C:5E:20:E6:80:3F:C1:F2:14:D8:2A:16:28:BA:D5:5F:DC:B6
Authority key identifier: B7:F6:46:DE:41:40:72:FC:1A:B7:6B:1B:2C:9E:08:B9:BD:21:A8:43
Certificate issuer: /CN=b7f646de414072fc1ab76b1b2c9e08b9bd21a843
Certificate serial: 019A4F98F899AE0FC5F7514759B01C546FFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t_ZG3kFAcvwat2sbLJ4Iub0hqEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/e2f9ff-c460-40a2-a357-77ef87a73e13/1/t_ZG3kFAcvwat2sbLJ4Iub0hqEM.mft
Manifest number: 0B5F
Signing time: Tue 04 Nov 2025 16:00:16 +0000
Manifest this update: Tue 04 Nov 2025 16:00:16 +0000
Manifest next update: Wed 05 Nov 2025 16:00:16 +0000
Files and hashes: 1: t_ZG3kFAcvwat2sbLJ4Iub0hqEM.crl (hash: CJ9z6bkFu3tR8fDDto39gUGPl/vxi1td1sMPFIjvQS8=)
2: tyPwFquST_QYpMOQ15p0kPwIfBE.roa (hash: pgj4wMLIuT+JDsLGd7CH6ihopHeyqUjAH/pXaSBmiXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/e2f9ff-c460-40a2-a357-77ef87a73e13/1/t_ZG3kFAcvwat2sbLJ4Iub0hqEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/e2f9ff-c460-40a2-a357-77ef87a73e13/1/t_ZG3kFAcvwat2sbLJ4Iub0hqEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/t_ZG3kFAcvwat2sbLJ4Iub0hqEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:98:f8:99:ae:0f:c5:f7:51:47:59:b0:1c:54:6f:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7f646de414072fc1ab76b1b2c9e08b9bd21a843
Validity
Not Before: Nov 4 16:00:16 2025 GMT
Not After : Nov 5 16:00:16 2025 GMT
Subject: CN=8ed61c5e20e6803fc1f214d82a1628bad55fdcb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ea:f0:0f:9a:ea:36:1c:6c:92:73:bf:a1:ff:
a7:9f:89:19:8b:69:c0:dc:7d:3b:09:67:c7:88:df:
c0:f8:67:3f:dc:df:39:97:5c:b3:04:d7:c9:5c:03:
9e:a2:be:2b:e4:90:ed:8d:31:b2:a6:1f:01:b8:1c:
b7:f6:72:14:6d:ac:7a:6b:8e:4b:84:96:10:4e:c5:
28:80:85:ce:e7:29:1d:af:16:f6:17:ba:52:92:0f:
44:ce:6e:2c:ff:b2:06:ea:bd:21:48:d1:6b:36:9f:
36:cf:ea:ee:33:07:b2:c0:5a:3b:80:ad:14:54:f9:
ff:87:d2:31:5e:f6:b1:2f:4c:84:55:e9:b8:b8:9f:
38:cb:dc:17:8e:ee:78:44:e2:f8:92:75:de:36:6e:
f7:aa:fa:09:1b:d0:db:0f:ba:b4:00:f0:e5:31:72:
fb:34:73:dd:42:64:f1:9c:83:7e:13:37:6f:ee:9e:
2e:4c:96:62:eb:64:71:8e:dd:62:d5:c2:b2:b1:7a:
45:60:a2:cc:d1:51:4f:cd:42:0b:8a:6c:7e:32:04:
71:17:85:9c:44:68:f9:24:63:1d:4c:66:2a:40:a6:
08:8b:71:29:69:d3:f9:62:e6:84:e7:78:a8:e2:2b:
b0:b4:8a:7b:dc:00:cd:ff:e1:39:7f:68:38:5c:7b:
c4:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:D6:1C:5E:20:E6:80:3F:C1:F2:14:D8:2A:16:28:BA:D5:5F:DC:B6
X509v3 Authority Key Identifier:
keyid:B7:F6:46:DE:41:40:72:FC:1A:B7:6B:1B:2C:9E:08:B9:BD:21:A8:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t_ZG3kFAcvwat2sbLJ4Iub0hqEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e2f9ff-c460-40a2-a357-77ef87a73e13/1/t_ZG3kFAcvwat2sbLJ4Iub0hqEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e2f9ff-c460-40a2-a357-77ef87a73e13/1/t_ZG3kFAcvwat2sbLJ4Iub0hqEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:ae:d6:17:69:f5:0b:a4:e6:3b:fc:df:e4:5d:c1:f7:b4:69:
1c:52:a6:ae:84:46:df:28:2b:32:04:27:b3:66:eb:63:c9:e3:
88:37:d1:27:11:6e:ec:99:95:14:88:6e:d8:5e:04:03:8b:ba:
c7:c0:d0:0e:fa:3e:78:fa:f2:1f:b4:b2:8b:a0:40:6d:67:66:
41:5f:44:c8:bc:96:6e:3d:8d:89:f0:cd:eb:d2:e6:02:69:db:
a3:82:a8:35:c5:3d:c6:7f:1f:d1:71:36:e4:08:95:f9:0d:50:
20:00:46:2c:eb:ed:9c:88:7f:4d:55:d6:88:e2:85:d1:d3:45:
a5:27:62:37:91:e7:80:df:fe:eb:44:19:20:3d:1d:fc:3d:8e:
66:76:d7:cf:be:cb:26:4b:05:a3:a1:92:6d:12:42:b9:5e:42:
0f:1d:ab:50:a6:17:8b:7a:88:5a:40:2e:d2:ed:fc:60:a4:48:
87:90:18:74:e3:14:d4:8b:13:68:29:4c:fa:5d:ba:b7:5c:71:
94:2e:e5:bc:e2:b9:53:ea:ff:44:e6:ff:a0:2a:0a:e2:16:aa:
69:67:ce:19:60:b3:9c:03:3a:5f:6d:cf:2c:c4:14:44:98:fe:
00:10:fe:5d:f4:3b:69:96:b9:3e:29:73:f3:22:a2:f0:12:20:
15:4b:76:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:01:31 2025 by rpki-client