Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/6db264-73d4-43ac-a97e-590b1b2a4609/1/ZBa8chx0DBD8ew2LGzWKLTX0iLc.mft
File: ZBa8chx0DBD8ew2LGzWKLTX0iLc.mft (raw, json)
Hash identifier: PMKNHw3DsCMIgzGUwQQWehJl11hkCgHjn/4hWrJdz/Q=
Subject key identifier: F1:39:33:F5:6E:41:FE:11:50:6F:9B:FF:FE:A0:69:AE:47:C5:4E:04
Authority key identifier: 64:16:BC:72:1C:74:0C:10:FC:7B:0D:8B:1B:35:8A:2D:35:F4:88:B7
Certificate issuer: /CN=6416bc721c740c10fc7b0d8b1b358a2d35f488b7
Certificate serial: 019A4FD070E446C7914EFB3CDC43183C6839
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBa8chx0DBD8ew2LGzWKLTX0iLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/6db264-73d4-43ac-a97e-590b1b2a4609/1/ZBa8chx0DBD8ew2LGzWKLTX0iLc.mft
Manifest number: 08C2
Signing time: Tue 04 Nov 2025 17:00:51 +0000
Manifest this update: Tue 04 Nov 2025 17:00:51 +0000
Manifest next update: Wed 05 Nov 2025 17:00:51 +0000
Files and hashes: 1: Evho_cMgUimufNWmo89VlB8ZA3M.roa (hash: 2vAp0+W0OyinQ7bz3KRWYoOM0rGntzBMfgwLVb6cFF4=)
2: GmmTJrDnl5l4oNm96pmFHnUTmtw.roa (hash: pwolnRd5ZwHSnC/gP9Agf6nFawzcw4azMTiVm2n1TBU=)
3: OTa2_ClY6w9bRnknrGzz6ZpLbY0.roa (hash: auzCJAX6dLQz9Niz6mEEUMnopgCP2rrZW6Motu990Ng=)
4: ZBa8chx0DBD8ew2LGzWKLTX0iLc.crl (hash: KI4fZwEeSOfXtZKWW1RcDxiohf4hZ6sVPhHeMkMlXhA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/6db264-73d4-43ac-a97e-590b1b2a4609/1/ZBa8chx0DBD8ew2LGzWKLTX0iLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/6db264-73d4-43ac-a97e-590b1b2a4609/1/ZBa8chx0DBD8ew2LGzWKLTX0iLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZBa8chx0DBD8ew2LGzWKLTX0iLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:70:e4:46:c7:91:4e:fb:3c:dc:43:18:3c:68:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6416bc721c740c10fc7b0d8b1b358a2d35f488b7
Validity
Not Before: Nov 4 17:00:51 2025 GMT
Not After : Nov 5 17:00:51 2025 GMT
Subject: CN=f13933f56e41fe11506f9bfffea069ae47c54e04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:31:bc:69:9c:77:0d:37:81:8e:f9:44:5b:93:
6c:a2:6c:ba:f9:c2:34:b4:4e:73:76:83:8d:7a:a2:
b4:3c:b9:8b:08:05:92:21:91:76:36:30:a9:9f:02:
14:d8:08:45:98:3e:c0:66:e8:a7:ee:a3:9f:28:09:
04:19:4b:4d:e2:5d:fe:5e:a4:9b:6a:47:d1:40:41:
c9:1b:4c:ae:08:92:0e:f1:dd:cc:5c:b6:95:60:13:
ed:49:af:1a:72:6e:c2:af:b0:be:08:ee:37:54:4d:
c8:84:a2:a2:47:39:84:ba:35:4a:79:13:b8:0e:07:
73:e1:7a:8a:af:04:bf:ef:32:3e:a9:7b:ef:be:17:
82:ec:dc:2b:ab:ab:69:34:31:f1:09:63:46:75:09:
1a:9f:28:14:c9:81:61:e4:3a:f0:39:28:79:20:04:
b4:e3:b9:b0:09:d6:0b:a1:f1:43:b6:9e:00:0d:1a:
a1:9b:28:0a:71:b1:41:ac:d0:a5:91:ef:35:86:f6:
77:8c:31:36:e4:75:9f:a8:42:fc:26:cc:17:43:bf:
ba:94:6b:56:47:b3:a9:8e:fc:0f:56:e6:36:a6:b6:
88:02:fb:ff:a6:e4:09:30:c7:79:10:cb:f4:b4:6d:
65:16:c4:ba:90:0b:78:4d:19:23:9e:b4:3b:d1:af:
c9:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:39:33:F5:6E:41:FE:11:50:6F:9B:FF:FE:A0:69:AE:47:C5:4E:04
X509v3 Authority Key Identifier:
keyid:64:16:BC:72:1C:74:0C:10:FC:7B:0D:8B:1B:35:8A:2D:35:F4:88:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBa8chx0DBD8ew2LGzWKLTX0iLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/6db264-73d4-43ac-a97e-590b1b2a4609/1/ZBa8chx0DBD8ew2LGzWKLTX0iLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/6db264-73d4-43ac-a97e-590b1b2a4609/1/ZBa8chx0DBD8ew2LGzWKLTX0iLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:31:b0:11:fe:4c:90:0b:16:6d:ab:a9:b5:f5:d3:48:0f:48:
54:1c:30:26:f1:52:b4:3f:ae:85:41:1e:a1:3f:ba:9f:17:39:
62:bc:19:a8:83:43:f8:3b:67:f2:4e:3d:fd:5b:18:eb:dd:4a:
44:a7:01:40:bd:c4:f8:15:15:0e:a1:54:c6:a2:d0:58:07:9c:
a6:92:2e:99:f4:05:d5:42:89:c9:ca:f2:9e:06:dd:11:bc:f9:
e2:37:81:e1:a7:85:c2:76:60:34:60:e3:b1:dd:9a:56:d8:cb:
f4:c5:c9:59:cd:01:50:e0:2f:f6:0d:11:9e:81:8b:30:26:0c:
ef:26:e5:15:3b:6f:57:d4:26:b8:54:31:7f:12:e6:4a:21:3f:
25:57:d0:d1:34:22:8e:46:b0:22:3b:a0:be:39:d2:6a:6c:3f:
c8:e4:39:e2:64:b9:ac:de:e9:21:94:cb:3c:7c:4d:1b:c2:aa:
c8:e3:7f:87:19:60:55:5d:f8:e9:d9:22:89:6b:5a:48:98:4e:
b9:19:b5:eb:08:6e:49:f3:8f:72:1c:7a:1c:38:0a:b4:07:40:
9c:45:5e:d3:41:26:f0:e7:04:3e:86:9b:37:fd:a5:60:a8:62:
5a:8c:0e:51:b0:4c:5e:22:e2:56:17:d0:4e:8d:00:29:69:de:
ab:5c:8c:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:19:21 2025 by rpki-client