Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/cab79f-abc1-4a62-bc69-442299f412fd/1/ZOZ_frwKgQuIwKrTQMJu3LRd5l8.mft
File: ZOZ_frwKgQuIwKrTQMJu3LRd5l8.mft (raw, json)
Hash identifier: chNavatvMpgHGvo8BzpWNuwQAOvBV6KXAZJfVTXoBys=
Subject key identifier: E7:FF:9E:D6:8F:BE:48:36:42:E2:90:CD:E1:C7:F5:11:8B:8B:E4:36
Authority key identifier: 64:E6:7F:7E:BC:0A:81:0B:88:C0:AA:D3:40:C2:6E:DC:B4:5D:E6:5F
Certificate issuer: /CN=64e67f7ebc0a810b88c0aad340c26edcb45de65f
Certificate serial: 019A4E86E2083A994DF1B9441D3393D9B09C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZOZ_frwKgQuIwKrTQMJu3LRd5l8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/cab79f-abc1-4a62-bc69-442299f412fd/1/ZOZ_frwKgQuIwKrTQMJu3LRd5l8.mft
Manifest number: 1139
Signing time: Tue 04 Nov 2025 11:00:53 +0000
Manifest this update: Tue 04 Nov 2025 11:00:53 +0000
Manifest next update: Wed 05 Nov 2025 11:00:53 +0000
Files and hashes: 1: ZOZ_frwKgQuIwKrTQMJu3LRd5l8.crl (hash: nAS8tlxPXNDY5FckQYzZXzYL4r3+VlHTdDKL44SLUJU=)
2: natM_WPGOslxNGy-WWG31EWqeRQ.roa (hash: tw5Pi8YXZ8+HgAyIg5gw92v0qWpZtmlxf2AnJMSdWBA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/cab79f-abc1-4a62-bc69-442299f412fd/1/ZOZ_frwKgQuIwKrTQMJu3LRd5l8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/cab79f-abc1-4a62-bc69-442299f412fd/1/ZOZ_frwKgQuIwKrTQMJu3LRd5l8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZOZ_frwKgQuIwKrTQMJu3LRd5l8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:e2:08:3a:99:4d:f1:b9:44:1d:33:93:d9:b0:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64e67f7ebc0a810b88c0aad340c26edcb45de65f
Validity
Not Before: Nov 4 11:00:53 2025 GMT
Not After : Nov 5 11:00:53 2025 GMT
Subject: CN=e7ff9ed68fbe483642e290cde1c7f5118b8be436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ad:67:3a:7a:1c:e5:b1:48:c4:0b:9b:cb:33:
5e:99:f4:8f:c0:2a:47:8f:db:98:51:b1:f4:31:a1:
6d:1e:96:bc:14:12:a6:a4:b5:54:34:06:05:93:70:
2f:85:12:11:02:88:35:29:35:60:c0:78:24:2b:6a:
9c:c5:8e:d5:3e:4f:b0:90:ba:38:e4:db:e6:eb:05:
5a:b0:5f:1d:1f:99:eb:03:55:ae:c7:d0:39:50:48:
e4:ba:de:39:ac:ee:22:f9:f0:e8:48:3a:b5:fd:18:
c8:ad:9a:c6:56:2b:0c:43:c7:81:b8:78:e0:f5:9b:
a4:8c:0a:ba:33:fd:9d:1d:9f:67:78:81:23:df:79:
b4:d2:f3:1d:2e:e1:91:f1:a9:30:e3:b1:c0:a0:ac:
7f:cc:1a:dc:90:3f:de:f4:ca:53:bc:8c:9d:bb:cd:
67:9a:40:4a:fb:fa:f0:46:30:9e:e6:4c:88:8b:59:
53:1f:62:23:d3:4c:0e:cf:a4:75:40:6e:c5:2a:20:
d1:5a:b0:e7:fd:d1:2c:40:73:00:86:69:40:3d:f3:
45:83:77:7a:3a:e1:fc:76:33:f0:5f:1e:ca:bb:91:
94:fa:04:29:3e:27:c5:86:ef:34:a6:8f:2a:62:77:
21:5b:8a:86:d4:a9:c1:dc:ec:fb:9b:d3:82:8e:aa:
41:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:FF:9E:D6:8F:BE:48:36:42:E2:90:CD:E1:C7:F5:11:8B:8B:E4:36
X509v3 Authority Key Identifier:
keyid:64:E6:7F:7E:BC:0A:81:0B:88:C0:AA:D3:40:C2:6E:DC:B4:5D:E6:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZOZ_frwKgQuIwKrTQMJu3LRd5l8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/cab79f-abc1-4a62-bc69-442299f412fd/1/ZOZ_frwKgQuIwKrTQMJu3LRd5l8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/cab79f-abc1-4a62-bc69-442299f412fd/1/ZOZ_frwKgQuIwKrTQMJu3LRd5l8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:0d:6d:f0:30:59:d5:75:3b:a1:ef:d4:d9:26:30:a3:91:32:
3e:37:95:78:c6:b1:1a:38:b9:37:d9:00:b9:f3:02:29:9f:c8:
cd:55:a6:55:66:3a:02:cd:6b:9c:40:72:40:2a:f0:33:15:67:
81:1c:a6:85:bf:0c:d7:fd:91:2e:ad:15:ac:96:4c:41:94:13:
af:31:3d:7a:3c:2a:90:e7:13:6d:cf:cb:7c:ff:07:fe:5f:77:
b7:a1:6b:27:9b:ab:5b:54:18:39:ed:d2:28:b3:22:b8:91:ce:
d0:04:34:55:7a:dd:7a:26:c0:de:1e:f1:5b:8d:f4:a3:df:18:
b6:05:d3:14:e3:02:48:4c:f0:c0:d5:b3:bf:22:76:dc:02:a1:
52:d5:82:40:04:ef:71:d1:5f:35:bd:18:d1:9c:4b:80:85:9f:
14:76:7c:c0:11:92:10:79:95:bd:78:0e:10:d9:7b:f5:06:64:
46:50:b2:0d:88:4f:e3:b1:79:d8:3d:7b:f3:0b:3d:50:72:78:
5b:62:64:37:2b:0e:50:e8:11:19:51:0c:cc:01:31:2e:97:ed:
b7:c2:42:2d:67:7b:e8:75:ff:a3:d6:09:17:d2:fc:71:7e:fd:
5e:2c:dd:67:d7:74:68:b0:b5:ba:7a:fd:b8:e0:8a:5f:c3:fa:
7d:ef:51:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:40:40 2025 by rpki-client