Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/d6d569-f491-43f1-94f2-0656d0b34b24/1/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.mft
File: ZFSQOrSFsWzKhi0V5tk_ug5N3gE.mft (raw, json)
Hash identifier: wKoD9P2k7bIB6QqApnrsf9p739IgOJka3J0TNEQVdew=
Subject key identifier: B2:EB:BB:EF:32:97:CD:62:09:28:90:45:ED:A7:6B:23:F4:E0:24:85
Authority key identifier: 64:54:90:3A:B4:85:B1:6C:CA:86:2D:15:E6:D9:3F:BA:0E:4D:DE:01
Certificate issuer: /CN=6454903ab485b16cca862d15e6d93fba0e4dde01
Certificate serial: 019A522CA72FFE1A2CCE7C0DC39F7F628777
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/d6d569-f491-43f1-94f2-0656d0b34b24/1/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.mft
Manifest number: 02AE
Signing time: Wed 05 Nov 2025 04:00:49 +0000
Manifest this update: Wed 05 Nov 2025 04:00:49 +0000
Manifest next update: Thu 06 Nov 2025 04:00:49 +0000
Files and hashes: 1: GFCwLYZ1iVeKH5Z8sR6pOUA3Lm8.roa (hash: cER4WH5eXS4Lm/LZABdPjot9dROZgtRCRJnalyX5t/M=)
2: ZFSQOrSFsWzKhi0V5tk_ug5N3gE.crl (hash: Nx0AdUysJz+Lf8tq/6ZWewUCrXVdnCHfAASv4n6FqMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/d6d569-f491-43f1-94f2-0656d0b34b24/1/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/d6d569-f491-43f1-94f2-0656d0b34b24/1/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:a7:2f:fe:1a:2c:ce:7c:0d:c3:9f:7f:62:87:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6454903ab485b16cca862d15e6d93fba0e4dde01
Validity
Not Before: Nov 5 04:00:49 2025 GMT
Not After : Nov 6 04:00:49 2025 GMT
Subject: CN=b2ebbbef3297cd6209289045eda76b23f4e02485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b5:a6:84:1c:e9:26:fe:50:b6:0f:93:72:52:
62:eb:6a:79:fc:e9:22:06:62:51:45:70:69:d8:cd:
e6:ca:21:cc:f1:e6:dc:09:49:af:77:c4:2d:52:d1:
a9:36:c5:8b:80:fb:27:db:db:33:65:ab:ee:ea:05:
0f:20:b0:9f:e4:13:c7:90:43:0b:69:16:f6:27:fe:
e6:20:cd:c4:4d:51:97:ca:01:0e:97:d9:d3:3b:1f:
6a:5d:b0:11:d1:77:4b:63:45:ea:9b:18:21:36:f5:
9a:a6:75:3f:ac:45:da:66:3c:a7:88:95:cf:68:63:
06:1a:25:17:eb:a0:17:44:7a:90:6d:d6:fd:5c:da:
ae:d6:ae:ec:86:f6:84:b5:ef:ff:47:82:74:d2:f7:
b1:18:ce:49:42:55:62:9c:8c:ea:80:43:8e:b4:7d:
2b:13:18:ba:a1:f9:dc:f5:03:b8:05:c8:b8:bf:27:
59:15:83:3b:df:e3:ab:ed:70:a1:09:f0:f6:13:11:
1c:c1:a4:38:2c:24:3a:52:01:d7:7d:06:71:2f:fc:
f4:7e:86:10:68:60:33:85:7f:ea:d0:77:9e:b9:b0:
85:77:bf:a9:c6:93:2f:87:74:49:5e:67:2a:d4:b7:
40:ba:f9:44:c5:61:31:11:df:88:24:95:61:81:4b:
e8:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:EB:BB:EF:32:97:CD:62:09:28:90:45:ED:A7:6B:23:F4:E0:24:85
X509v3 Authority Key Identifier:
keyid:64:54:90:3A:B4:85:B1:6C:CA:86:2D:15:E6:D9:3F:BA:0E:4D:DE:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d6d569-f491-43f1-94f2-0656d0b34b24/1/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d6d569-f491-43f1-94f2-0656d0b34b24/1/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:e7:93:14:da:4c:9b:ac:fb:c8:be:44:63:98:a5:d5:b2:f3:
b4:c5:a8:03:21:3c:8d:2b:91:1f:f6:61:2b:fc:1e:63:04:75:
f1:b3:8a:c8:a1:06:6c:a5:45:9a:00:b3:76:1e:15:a0:f2:2a:
c4:54:6c:99:85:57:a7:33:52:5f:74:00:cb:cd:98:53:ff:70:
ff:db:f8:fd:05:48:c0:8d:9d:1b:ca:97:49:73:90:61:70:e0:
a7:7d:51:5d:b0:59:31:ac:4d:f1:af:d9:8c:a1:bf:84:96:4f:
ea:47:55:6d:7d:6c:c8:4b:2c:72:20:4a:39:8f:fd:1b:13:3e:
6c:03:fa:1b:23:aa:d2:9d:23:12:67:74:0d:36:cd:d3:4a:d9:
a5:32:02:c5:5a:0c:ba:39:0d:2d:52:ac:94:16:2d:6f:ee:3a:
de:84:75:ca:c6:60:39:c5:dc:4b:0b:ff:cf:bf:33:ec:dc:6e:
6c:a2:b6:10:cd:fb:a2:1a:cd:81:04:ba:19:aa:91:31:28:73:
ac:16:11:83:90:7f:dc:03:25:65:af:99:e7:2e:a6:82:4a:fb:
e6:37:2b:6b:f5:19:d7:c8:1b:55:8b:20:02:74:c2:b4:90:d8:
c9:08:fc:ba:01:88:58:6f:2f:1c:84:54:f9:15:a3:ab:63:f4:
36:e0:a5:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:46:10 2025 by rpki-client