Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/763592-a480-444f-a881-402e62c54d32/1/ZrB43tN1kjDKLho76QZjjRMGuQg.mft
File: ZrB43tN1kjDKLho76QZjjRMGuQg.mft (raw, json)
Hash identifier: A0k5D5NL7zujVvpxhMsXbgtUxluosJDkJcXwhDohRIM=
Subject key identifier: DA:DC:91:7A:CE:38:18:38:E8:FB:E4:DC:0F:EA:91:34:15:90:22:D4
Authority key identifier: 66:B0:78:DE:D3:75:92:30:CA:2E:1A:3B:E9:06:63:8D:13:06:B9:08
Certificate issuer: /CN=66b078ded3759230ca2e1a3be906638d1306b908
Certificate serial: 019A51F5C938578A7974423E53FDFC6308EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZrB43tN1kjDKLho76QZjjRMGuQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/763592-a480-444f-a881-402e62c54d32/1/ZrB43tN1kjDKLho76QZjjRMGuQg.mft
Manifest number: 0A55
Signing time: Wed 05 Nov 2025 03:00:53 +0000
Manifest this update: Wed 05 Nov 2025 03:00:53 +0000
Manifest next update: Thu 06 Nov 2025 03:00:53 +0000
Files and hashes: 1: ZrB43tN1kjDKLho76QZjjRMGuQg.crl (hash: BKg4FeH4k9SqbSAEGTy04vK+fXcgr4UYXxoivXlUuf0=)
2: mHxy9rJdZpH5hrd46ZQbudzuLF8.roa (hash: xwokQPLLEdy+DbSgYqJ8Dht6nsu849d5eiNxGGm9TUs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/763592-a480-444f-a881-402e62c54d32/1/ZrB43tN1kjDKLho76QZjjRMGuQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/763592-a480-444f-a881-402e62c54d32/1/ZrB43tN1kjDKLho76QZjjRMGuQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZrB43tN1kjDKLho76QZjjRMGuQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:c9:38:57:8a:79:74:42:3e:53:fd:fc:63:08:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66b078ded3759230ca2e1a3be906638d1306b908
Validity
Not Before: Nov 5 03:00:53 2025 GMT
Not After : Nov 6 03:00:53 2025 GMT
Subject: CN=dadc917ace381838e8fbe4dc0fea9134159022d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:cc:cc:6e:84:58:f9:71:fb:da:31:46:92:e8:
f6:20:db:ba:05:e7:1a:ab:4e:98:84:37:3a:1f:db:
87:ab:07:6f:77:34:b1:48:9c:87:af:a0:37:25:6e:
3d:3f:27:04:5b:20:0d:64:17:f8:e9:02:42:eb:ab:
c8:77:4b:e7:37:9b:17:72:ec:8e:25:5b:06:e6:ff:
ad:8f:ca:f4:e8:e1:63:84:83:e1:f6:4b:99:fc:fc:
6e:54:1b:10:3d:af:dc:bf:1e:88:fc:be:b4:7a:5b:
c0:df:85:49:a1:be:7f:c1:1a:76:4d:af:e7:dc:5f:
6e:5b:c3:b7:c4:52:f2:8f:9e:a1:12:f1:42:e1:e2:
a2:29:70:99:4d:0d:9a:8e:78:b4:e3:34:3e:9c:a8:
4c:b1:57:d8:10:09:31:af:66:e9:01:04:ed:e0:02:
0d:a0:db:ea:6c:53:d8:75:86:35:cf:dc:7f:37:8c:
c1:6a:4e:2a:ad:da:8f:8a:3b:88:b9:c2:36:d5:3b:
62:e4:a3:d8:00:d1:f6:d7:bd:e6:9b:08:a7:92:bb:
da:77:5d:42:18:f2:f6:ed:6e:23:0b:22:ad:c8:e6:
24:a1:fd:ea:c4:f7:33:1f:77:70:64:4f:af:4e:9f:
11:a3:fb:5a:f0:f4:f5:98:c8:83:e3:05:c8:cc:f3:
45:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:DC:91:7A:CE:38:18:38:E8:FB:E4:DC:0F:EA:91:34:15:90:22:D4
X509v3 Authority Key Identifier:
keyid:66:B0:78:DE:D3:75:92:30:CA:2E:1A:3B:E9:06:63:8D:13:06:B9:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZrB43tN1kjDKLho76QZjjRMGuQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/763592-a480-444f-a881-402e62c54d32/1/ZrB43tN1kjDKLho76QZjjRMGuQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/763592-a480-444f-a881-402e62c54d32/1/ZrB43tN1kjDKLho76QZjjRMGuQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:ea:e3:26:2b:bc:ac:ba:42:e7:61:e2:d5:fa:4f:31:34:72:
0b:f2:c7:43:24:10:c1:22:d5:22:ba:1e:0f:8e:fb:9e:c2:a6:
b4:29:a2:44:26:68:8c:a3:e3:91:b0:82:a4:bc:7a:0b:50:8b:
fc:f9:e0:80:a3:a8:ef:35:9d:80:df:14:e1:81:53:45:86:d5:
ca:72:a5:a0:13:8e:01:e8:b1:02:1e:48:7c:5c:55:8f:37:7d:
0d:08:f2:64:f9:c7:35:eb:1f:35:33:d2:b0:cb:22:ce:6c:50:
f2:f5:69:43:e5:f4:85:1f:d5:70:70:b5:61:ce:90:6a:4a:82:
8d:ac:88:95:82:fc:59:56:96:c8:ae:d6:ec:2e:96:aa:10:f9:
9c:da:8e:77:ea:3a:6a:ef:85:63:03:4e:66:e0:4a:a8:ae:b5:
91:06:2f:5a:d4:f5:97:bd:77:6d:e5:f8:17:6f:f6:d7:58:b1:
49:e4:9e:f0:6b:15:1d:fc:8b:f1:fe:82:af:b1:3f:27:15:b4:
4d:9b:96:1b:53:75:2a:8a:16:e0:51:3c:5d:25:ce:19:c5:61:
1e:52:26:ae:99:d6:1b:45:d0:46:63:8c:a6:5f:5b:fa:93:d3:
71:3f:90:f0:3b:05:4c:99:c9:c4:ae:2d:b8:8b:d5:7d:f0:5c:
ef:92:c9:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:42:04 2025 by rpki-client