Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/16afe5-a443-4237-ad7d-dab6e2c5fdd9/1/zvhOR0nMzVg_78d5fD1nsQiYoYg.mft
File: zvhOR0nMzVg_78d5fD1nsQiYoYg.mft (raw, json)
Hash identifier: uVZjNf07zowobamJThjx/cT8hZ46yp5IlYNcwsO5l0Q=
Subject key identifier: F0:67:6F:58:5F:68:60:AC:3D:85:48:92:AA:0B:D5:7C:2D:5D:73:55
Authority key identifier: CE:F8:4E:47:49:CC:CD:58:3F:EF:C7:79:7C:3D:67:B1:08:98:A1:88
Certificate issuer: /CN=cef84e4749cccd583fefc7797c3d67b10898a188
Certificate serial: 019A4DAA92DD718ECFC175623CAA3E666C20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvhOR0nMzVg_78d5fD1nsQiYoYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/16afe5-a443-4237-ad7d-dab6e2c5fdd9/1/zvhOR0nMzVg_78d5fD1nsQiYoYg.mft
Manifest number: 1175
Signing time: Tue 04 Nov 2025 07:00:15 +0000
Manifest this update: Tue 04 Nov 2025 07:00:15 +0000
Manifest next update: Wed 05 Nov 2025 07:00:15 +0000
Files and hashes: 1: jT9M2q3-JmfBGqlkvqfv7X_lK7k.roa (hash: 2EpzeWTEb3JVIFCKyCL/tj06ZaHz1YBQQFcfRdYnEzo=)
2: zvhOR0nMzVg_78d5fD1nsQiYoYg.crl (hash: kuRH5J7r74nQNmL8T0PduIYJ9xIy+JwvQM3U2kCuF0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/16afe5-a443-4237-ad7d-dab6e2c5fdd9/1/zvhOR0nMzVg_78d5fD1nsQiYoYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/16afe5-a443-4237-ad7d-dab6e2c5fdd9/1/zvhOR0nMzVg_78d5fD1nsQiYoYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/zvhOR0nMzVg_78d5fD1nsQiYoYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:92:dd:71:8e:cf:c1:75:62:3c:aa:3e:66:6c:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cef84e4749cccd583fefc7797c3d67b10898a188
Validity
Not Before: Nov 4 07:00:15 2025 GMT
Not After : Nov 5 07:00:15 2025 GMT
Subject: CN=f0676f585f6860ac3d854892aa0bd57c2d5d7355
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:a6:10:51:6e:69:78:be:82:7f:2e:52:87:fb:
02:67:43:62:f2:14:3b:9c:2b:7d:bc:69:6c:ad:f4:
43:83:d5:36:69:85:ec:b5:eb:09:e7:68:9d:1d:f3:
25:ad:8b:5e:1b:ac:45:8f:3f:e2:a5:4a:56:2d:d5:
1d:d9:f0:05:68:65:bc:24:1c:6f:24:30:a3:25:61:
28:a2:8d:df:f7:28:b4:e3:3a:b6:0b:cc:1a:77:4b:
c4:2e:76:88:2c:74:87:30:ca:18:1c:55:6a:e9:4a:
69:b2:77:0e:90:d5:49:2c:f5:e3:17:54:a6:f4:88:
50:91:e0:99:3e:d1:06:b6:6c:46:ea:30:a3:65:10:
9e:8d:6f:e0:21:f4:8f:5c:2a:a4:fc:c4:c9:43:28:
d9:f0:00:09:d0:0d:7f:37:35:98:9e:f8:12:00:3e:
3b:7f:a4:e7:a6:7d:7c:54:fc:59:08:6a:f9:7e:9d:
c9:da:4e:a4:e2:b8:6d:8d:90:a5:47:fc:49:e9:c8:
49:7b:89:16:f1:3a:ba:8c:5b:74:15:47:49:cb:74:
1a:f8:ce:49:d9:d7:b6:2f:83:1c:ce:00:38:a4:36:
0b:a1:3d:86:5c:7a:1b:bd:47:a7:02:ba:c6:a1:83:
54:03:98:4e:37:2c:d3:39:47:0c:ed:98:88:33:8d:
74:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:67:6F:58:5F:68:60:AC:3D:85:48:92:AA:0B:D5:7C:2D:5D:73:55
X509v3 Authority Key Identifier:
keyid:CE:F8:4E:47:49:CC:CD:58:3F:EF:C7:79:7C:3D:67:B1:08:98:A1:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvhOR0nMzVg_78d5fD1nsQiYoYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/16afe5-a443-4237-ad7d-dab6e2c5fdd9/1/zvhOR0nMzVg_78d5fD1nsQiYoYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/16afe5-a443-4237-ad7d-dab6e2c5fdd9/1/zvhOR0nMzVg_78d5fD1nsQiYoYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:31:48:0a:ae:2f:d7:90:e5:f6:d5:6f:69:61:3c:27:35:4b:
17:49:fb:3c:c6:8b:ce:fd:d3:44:84:a0:1c:ad:db:88:bc:ce:
34:01:77:d8:b1:48:ea:9c:f2:3f:13:40:9b:46:15:71:e8:3e:
09:df:53:cc:fa:c0:01:9f:1a:fc:ad:66:4f:ae:2f:db:13:1e:
23:db:a8:70:57:0d:52:87:bb:83:6c:d5:59:fa:3d:9c:cf:17:
d8:54:6f:f4:dc:d6:54:22:01:6e:c7:3d:2c:14:2a:cf:76:0a:
a5:4c:8b:5d:69:3b:11:95:61:ac:85:7d:ab:1a:5a:3b:65:a8:
0f:af:18:13:cf:de:38:b7:35:ae:e2:26:34:a6:a0:5e:62:4c:
b1:dc:c2:45:2c:5d:66:58:ab:da:8b:d6:62:3e:fe:e7:c7:42:
17:32:53:2c:ab:98:33:5b:39:28:02:78:0e:54:e1:0e:13:2e:
b8:46:29:bd:69:1a:a9:fe:a9:55:db:98:24:56:a1:29:eb:9d:
8e:4a:78:6d:5c:da:c0:43:be:57:d7:9a:f4:7c:8a:79:d1:77:
6b:f6:b7:89:b5:f3:40:8c:d6:04:22:87:45:95:9f:75:24:7a:
04:fc:7b:07:d1:a8:b6:19:2f:15:55:e2:c5:cb:22:b7:82:4a:
8d:33:8c:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:00:47 2025 by rpki-client