Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/b8d400-e6e8-41ef-ad24-55c3a28e62c3/1/ZgwymWrhJGGJciLi2cwJOTCSfd0.mft
File: ZgwymWrhJGGJciLi2cwJOTCSfd0.mft (raw, json)
Hash identifier: /wIP4UgVD6Bu3t3+Cl5E/SUSKfBXxXSg20BZIfMF8ww=
Subject key identifier: 3E:60:50:51:EC:C8:0A:F6:30:DA:D3:51:11:BC:07:95:E2:42:FD:4B
Authority key identifier: 66:0C:32:99:6A:E1:24:61:89:72:22:E2:D9:CC:09:39:30:92:7D:DD
Certificate issuer: /CN=660c32996ae12461897222e2d9cc093930927ddd
Certificate serial: 019A503DE6AA74D87D7F30C9386BB83706A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZgwymWrhJGGJciLi2cwJOTCSfd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/b8d400-e6e8-41ef-ad24-55c3a28e62c3/1/ZgwymWrhJGGJciLi2cwJOTCSfd0.mft
Manifest number: 1712
Signing time: Tue 04 Nov 2025 19:00:25 +0000
Manifest this update: Tue 04 Nov 2025 19:00:25 +0000
Manifest next update: Wed 05 Nov 2025 19:00:25 +0000
Files and hashes: 1: ZgwymWrhJGGJciLi2cwJOTCSfd0.crl (hash: 3c3/lYaRHoK/Lavgz6P8AN+NfxbzH5gzUf609aa54Tw=)
2: eTKPP1Wu3aoon8pt_QrTkfCfijI.roa (hash: 40MqBGQjbWUX+1wVm2enGIIcrfvo/5OK7+JG7rETf4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/b8d400-e6e8-41ef-ad24-55c3a28e62c3/1/ZgwymWrhJGGJciLi2cwJOTCSfd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/b8d400-e6e8-41ef-ad24-55c3a28e62c3/1/ZgwymWrhJGGJciLi2cwJOTCSfd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZgwymWrhJGGJciLi2cwJOTCSfd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3d:e6:aa:74:d8:7d:7f:30:c9:38:6b:b8:37:06:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=660c32996ae12461897222e2d9cc093930927ddd
Validity
Not Before: Nov 4 19:00:25 2025 GMT
Not After : Nov 5 19:00:25 2025 GMT
Subject: CN=3e605051ecc80af630dad35111bc0795e242fd4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:9d:42:01:3c:8b:87:7d:f0:a2:bc:39:40:88:
fd:6a:7c:11:69:80:85:e0:39:07:49:26:d6:be:ec:
08:74:2a:e3:ea:0b:5d:34:89:aa:a2:d9:0b:43:b9:
ab:38:d7:5f:9a:01:f6:48:7b:ec:28:56:f1:57:6a:
19:8b:78:4a:d2:76:70:6d:be:ec:c2:0d:a2:51:81:
1d:ad:44:34:2f:54:a4:a8:3c:a5:c6:41:19:50:9e:
99:b3:92:49:25:73:3e:2d:2d:4c:4c:20:d3:8e:9c:
1b:8c:1c:d4:ad:5b:95:65:42:58:b9:1f:4f:87:cb:
11:e3:58:ff:f9:f7:d5:f9:fb:8b:35:5b:3b:da:30:
db:35:9d:1d:79:39:6b:85:73:f9:aa:63:99:b6:41:
ae:ed:86:a2:72:db:8c:cc:d3:d8:e3:a8:b8:84:1b:
ae:c0:0e:1a:19:bb:13:2f:e1:da:79:b6:d5:6a:43:
90:95:82:da:a1:7c:c1:0d:bc:ed:29:59:1c:69:6a:
67:8a:8b:86:c3:74:a6:3a:d2:7c:d7:b9:35:66:bc:
0d:a0:83:b2:20:6a:ab:80:77:ee:cd:26:29:83:6e:
f9:29:12:68:9b:ff:41:af:d5:5e:bd:7e:9b:e7:1e:
59:5c:33:f9:7f:ab:b0:65:be:20:3c:08:37:5d:7d:
fa:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:60:50:51:EC:C8:0A:F6:30:DA:D3:51:11:BC:07:95:E2:42:FD:4B
X509v3 Authority Key Identifier:
keyid:66:0C:32:99:6A:E1:24:61:89:72:22:E2:D9:CC:09:39:30:92:7D:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZgwymWrhJGGJciLi2cwJOTCSfd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b8d400-e6e8-41ef-ad24-55c3a28e62c3/1/ZgwymWrhJGGJciLi2cwJOTCSfd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b8d400-e6e8-41ef-ad24-55c3a28e62c3/1/ZgwymWrhJGGJciLi2cwJOTCSfd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:7f:19:35:14:8c:bb:6b:26:82:2d:45:3d:92:12:18:3d:fc:
ce:79:69:9b:fe:85:5f:e2:62:e5:4e:b5:03:6c:8f:40:fa:41:
02:75:25:de:18:77:62:73:c2:26:b2:2d:40:3f:79:55:8d:1e:
ba:fa:20:aa:f4:31:d6:00:96:07:d3:8d:bc:d5:52:11:93:42:
4a:d3:94:e1:84:d8:db:f6:c0:e7:aa:ea:7b:41:56:ca:d1:90:
b9:08:93:53:5b:65:97:1e:4e:c4:f7:a9:99:6f:ec:00:b4:9f:
66:28:d6:b0:38:14:16:d5:a2:bb:59:f9:ed:19:e0:01:14:dc:
cd:94:96:9f:99:45:c4:4d:51:b0:b8:fd:b0:dd:fa:50:27:04:
7f:17:f8:f5:70:86:92:8b:8c:73:14:ad:80:f4:e1:05:61:46:
1d:4c:3d:c0:c3:91:08:14:8b:ad:04:c4:7f:6b:fd:3b:1d:2f:
83:dc:fd:7c:be:38:20:6e:a7:92:aa:fc:07:c7:99:56:bd:24:
78:3b:6b:14:ad:59:03:55:96:a3:3d:1a:08:ae:81:13:23:2c:
00:23:d9:3f:20:41:d2:43:b5:30:fc:64:46:18:2a:ea:da:eb:
f4:09:48:a8:95:2e:1c:e4:d8:04:66:80:9c:11:58:af:db:59:
1d:1b:9e:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:34:12 2025 by rpki-client