Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/02b357-abf7-408b-8b09-0d59d9d11505/1/Zf_wATbIP1OjisPurJcQp5k2skw.mft
File: Zf_wATbIP1OjisPurJcQp5k2skw.mft (raw, json)
Hash identifier: 3LR+18UBvXiSbah9VFSIwWTS+84QK0K+tSHv96UsGZc=
Subject key identifier: 7D:84:E2:C7:EC:12:E5:E8:77:EC:6E:D8:AF:B2:1F:28:AB:EA:AA:38
Authority key identifier: 65:FF:F0:01:36:C8:3F:53:A3:8A:C3:EE:AC:97:10:A7:99:36:B2:4C
Certificate issuer: /CN=65fff00136c83f53a38ac3eeac9710a79936b24c
Certificate serial: 019A4DAA6C6FB9C83AAD6B50F60095AC68DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zf_wATbIP1OjisPurJcQp5k2skw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/02b357-abf7-408b-8b09-0d59d9d11505/1/Zf_wATbIP1OjisPurJcQp5k2skw.mft
Manifest number: 0604
Signing time: Tue 04 Nov 2025 07:00:05 +0000
Manifest this update: Tue 04 Nov 2025 07:00:05 +0000
Manifest next update: Wed 05 Nov 2025 07:00:05 +0000
Files and hashes: 1: Zf_wATbIP1OjisPurJcQp5k2skw.crl (hash: izhKfHSeVNUy68Nu9GnPYGAsxsZQItM8YtouGhbY6o4=)
2: qV1VADgnM-UwMyvnzX700wlOQrY.roa (hash: fchq7gmgdQ6iV6UqjjJyNU6Y7myn1bicxh9WArTx5O4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/02b357-abf7-408b-8b09-0d59d9d11505/1/Zf_wATbIP1OjisPurJcQp5k2skw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/02b357-abf7-408b-8b09-0d59d9d11505/1/Zf_wATbIP1OjisPurJcQp5k2skw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zf_wATbIP1OjisPurJcQp5k2skw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:6c:6f:b9:c8:3a:ad:6b:50:f6:00:95:ac:68:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65fff00136c83f53a38ac3eeac9710a79936b24c
Validity
Not Before: Nov 4 07:00:05 2025 GMT
Not After : Nov 5 07:00:05 2025 GMT
Subject: CN=7d84e2c7ec12e5e877ec6ed8afb21f28abeaaa38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:af:07:39:ef:05:39:53:1e:b2:b0:9a:79:e1:
8f:4c:0c:97:0c:66:5a:95:b8:0d:3a:a7:33:82:12:
54:8f:cd:f5:95:63:f7:4e:a8:00:5d:6c:18:be:16:
ad:a9:f1:50:24:30:e5:41:bb:c6:cb:05:29:cd:60:
85:51:e3:32:6c:6d:35:dd:a3:ae:7d:89:5f:1a:c1:
f3:96:80:97:83:1d:19:0d:16:1f:08:91:45:e0:36:
3b:d0:77:e4:fe:48:42:5d:20:95:db:48:d7:54:04:
ef:c8:d0:8d:d4:dd:44:8b:7e:6d:1f:f4:04:30:26:
6d:12:4f:a2:30:bd:82:b9:f3:0d:17:3d:16:ca:ed:
0e:e6:a0:07:4d:f2:c0:ac:c5:3a:ee:b5:3d:76:6e:
46:e1:1c:d7:a3:77:6e:82:03:a4:ab:6d:b4:63:7b:
bd:08:8c:17:b9:b1:4a:ca:76:f2:e7:3c:89:0e:8d:
a9:ec:11:25:7e:d9:a6:55:6e:06:60:15:ea:11:ed:
1a:c6:62:01:b2:22:4e:b6:8a:0c:7a:13:45:b6:be:
4a:34:4b:38:77:70:1b:cd:4a:b8:c4:47:8e:bf:20:
79:a5:8c:09:e2:c1:f6:86:64:32:9e:c0:65:72:36:
85:3b:23:df:96:70:f3:f6:d2:0d:95:92:7b:62:cf:
1e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:84:E2:C7:EC:12:E5:E8:77:EC:6E:D8:AF:B2:1F:28:AB:EA:AA:38
X509v3 Authority Key Identifier:
keyid:65:FF:F0:01:36:C8:3F:53:A3:8A:C3:EE:AC:97:10:A7:99:36:B2:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zf_wATbIP1OjisPurJcQp5k2skw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/02b357-abf7-408b-8b09-0d59d9d11505/1/Zf_wATbIP1OjisPurJcQp5k2skw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/02b357-abf7-408b-8b09-0d59d9d11505/1/Zf_wATbIP1OjisPurJcQp5k2skw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:11:a4:d6:26:fa:7b:20:d9:05:a9:11:b0:56:8e:42:a4:16:
02:45:1e:a9:b6:c7:3e:af:cc:62:03:cd:3c:bd:a5:33:1c:33:
2c:62:b7:c5:1c:47:49:9e:43:f6:59:e2:2e:89:42:d7:cd:e1:
99:04:b4:81:da:f5:47:ff:00:89:52:f7:e4:42:c1:99:4c:59:
d6:37:ef:32:72:ce:c2:39:12:02:0b:6e:33:a6:14:9a:2b:b5:
4a:df:70:a8:d6:e5:41:1d:86:a1:07:77:d0:e5:b8:3c:fe:c4:
5c:21:8c:51:dc:44:7e:f9:1e:9f:cc:4b:85:2a:84:78:bf:85:
6a:d3:5e:ab:06:f1:5e:e5:9d:57:5d:45:79:1e:3e:17:81:9d:
45:ec:19:42:d6:4e:53:bb:59:e7:70:77:69:e9:9b:a0:d5:09:
b9:df:0a:5a:bf:83:58:9c:bb:e8:8b:db:5a:e5:7a:e6:de:82:
2d:a5:f3:c3:4d:c0:aa:78:f3:d0:fe:bf:2d:ce:25:d3:ef:00:
dc:bb:ae:43:79:57:e7:a9:f7:14:89:95:0a:7e:2c:1d:3a:63:
c8:2c:52:86:eb:f5:10:72:31:cf:96:a4:e1:b0:94:03:41:18:
e1:16:ba:40:83:00:39:a5:0c:e9:74:2e:af:fd:fa:04:d3:97:
d2:37:db:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:53:50 2025 by rpki-client