Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/86d2ae-7c37-4344-a1e6-e8edf29245c0/1/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.mft
File: ZwR7mHvpdCeFuo6LM6wHe_nHoiI.mft (raw, json)
Hash identifier: /pT35nqSz2xI+BVT3o/O8Umfe5r6GBt1h9qci0VNRXY=
Subject key identifier: 8A:30:08:E7:A7:3C:B8:F5:0E:A0:54:45:19:13:B8:41:CE:36:55:92
Authority key identifier: 67:04:7B:98:7B:E9:74:27:85:BA:8E:8B:33:AC:07:7B:F9:C7:A2:22
Certificate issuer: /CN=67047b987be9742785ba8e8b33ac077bf9c7a222
Certificate serial: 019A4EF56B45D4B47D401B50B43BFE4FCB59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/86d2ae-7c37-4344-a1e6-e8edf29245c0/1/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.mft
Manifest number: 0EA8
Signing time: Tue 04 Nov 2025 13:01:37 +0000
Manifest this update: Tue 04 Nov 2025 13:01:37 +0000
Manifest next update: Wed 05 Nov 2025 13:01:37 +0000
Files and hashes: 1: ZwR7mHvpdCeFuo6LM6wHe_nHoiI.crl (hash: /9RLMkmxaOdZt31DxeOK/mg/pRV70VVd9t7bPpgb3qA=)
2: bmxfR1YI28e9AvruScrILUTRG3I.roa (hash: cqN9qg0IAUOQT2Uuvb3v+aRnSBYZJQOZClfPWFzUISg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/86d2ae-7c37-4344-a1e6-e8edf29245c0/1/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/86d2ae-7c37-4344-a1e6-e8edf29245c0/1/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:6b:45:d4:b4:7d:40:1b:50:b4:3b:fe:4f:cb:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67047b987be9742785ba8e8b33ac077bf9c7a222
Validity
Not Before: Nov 4 13:01:37 2025 GMT
Not After : Nov 5 13:01:37 2025 GMT
Subject: CN=8a3008e7a73cb8f50ea054451913b841ce365592
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fd:1b:4e:82:6e:3e:97:c1:2a:55:03:85:b1:
3a:05:ad:c1:a3:69:d8:ac:16:70:0b:21:64:c8:19:
62:c8:0a:43:57:9e:82:0c:c1:a5:da:57:51:d0:b1:
35:21:87:3e:2d:bb:47:3c:98:29:4c:79:83:5b:b8:
d9:3c:49:29:6b:c8:0c:4e:5d:7c:73:ca:34:16:80:
dd:70:0b:03:b3:95:73:e9:39:31:54:0d:5b:4d:89:
7e:2a:6e:d9:74:f0:73:cf:b0:ee:57:3e:5b:23:cd:
90:10:35:2e:a8:0b:72:73:f4:0e:ad:2b:87:f3:d0:
e0:01:e2:d0:85:cc:7b:ac:f6:76:1e:da:d8:63:d9:
6f:4a:86:50:17:2f:ee:cd:2e:14:f0:6a:5d:a1:49:
dd:ad:00:ac:b1:bd:cf:a3:61:66:5b:31:4b:5c:c2:
1d:0a:32:04:c1:cb:e8:83:8f:95:50:83:d7:e7:8f:
c7:d7:ac:45:c5:17:44:98:2a:06:04:7d:b2:c0:be:
50:fa:1a:fc:30:96:66:86:09:43:91:2b:8e:0a:2a:
ac:e2:1d:0c:d3:c7:82:f1:3f:44:04:3b:8e:00:65:
64:df:6f:f1:a2:a5:b9:6e:52:cb:08:8f:20:88:ce:
67:1f:5c:94:46:ba:b4:6d:1a:bb:11:0b:43:1b:b2:
f7:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:30:08:E7:A7:3C:B8:F5:0E:A0:54:45:19:13:B8:41:CE:36:55:92
X509v3 Authority Key Identifier:
keyid:67:04:7B:98:7B:E9:74:27:85:BA:8E:8B:33:AC:07:7B:F9:C7:A2:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/86d2ae-7c37-4344-a1e6-e8edf29245c0/1/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/86d2ae-7c37-4344-a1e6-e8edf29245c0/1/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:f3:0e:d4:3a:47:38:ba:1e:08:77:a2:f7:2c:76:a2:08:bd:
01:57:f8:a7:f7:e0:c4:d2:a9:90:39:c1:3a:78:11:76:b7:a7:
06:c8:07:59:56:2c:dc:95:16:ec:fe:91:2e:eb:a5:2d:6f:f6:
ac:eb:ab:94:84:34:e8:e7:53:ac:ce:5a:4f:d4:5b:8c:f7:c1:
fc:c2:b8:1b:3b:87:62:f7:20:cf:40:00:0f:f5:e9:d9:c6:bf:
ea:9e:be:7a:03:ec:c1:a8:e7:1f:21:1e:6b:cd:19:e4:42:0c:
24:b5:0a:98:84:60:39:8d:bb:bb:8d:7e:74:24:59:a3:ff:ae:
18:df:4f:cc:3f:b2:53:6a:51:e3:b0:97:a9:c7:2e:5c:79:cf:
1a:68:96:4e:83:0f:18:c4:49:c5:2a:f5:42:4c:34:64:26:3c:
f3:00:07:c1:ec:78:d3:35:9a:bc:54:f2:49:1a:97:27:6b:89:
00:60:c1:f4:b6:74:bf:11:3d:9c:f9:5e:b9:a6:b1:9a:eb:33:
c2:ff:af:2b:40:69:f2:83:cd:ad:f7:0a:9f:21:14:8b:15:a0:
4f:74:5a:27:b2:52:6b:34:de:c6:d2:fd:03:4c:ec:f0:89:f7:
33:78:85:88:31:32:cc:61:b8:90:3b:41:98:09:d0:16:df:7e:
66:2c:34:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:42:46 2025 by rpki-client