Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.mft
File: ZE8DP3gurzKrCQiHddZKxLlLWxE.mft (raw, json)
Hash identifier: KLwMW1Lounyn2y3gO9tC95mA9kQCYLVz/FxceuCkXag=
Subject key identifier: 77:F9:14:25:04:9C:0A:AF:3F:8F:1D:F9:8A:12:20:91:EB:FF:2C:2F
Authority key identifier: 64:4F:03:3F:78:2E:AF:32:AB:09:08:87:75:D6:4A:C4:B9:4B:5B:11
Certificate issuer: /CN=644f033f782eaf32ab09088775d64ac4b94b5b11
Certificate serial: 019A4E191088AD1C6C83F9A9EDB6DD8A5541
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZE8DP3gurzKrCQiHddZKxLlLWxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.mft
Manifest number: 0C57
Signing time: Tue 04 Nov 2025 09:00:56 +0000
Manifest this update: Tue 04 Nov 2025 09:00:56 +0000
Manifest next update: Wed 05 Nov 2025 09:00:56 +0000
Files and hashes: 1: 0XSnGPN4ZFxk8_lhcPN-rPm0S40.roa (hash: 0ucYwJNSE17Uoa0pbkg3UfaLHULdDrli5vO57ag/Rro=)
2: 2eYoGLpYtYZxhv1MZN6vX2qdP5g.roa (hash: VgvyWftKXOdFJhTLD/7iPW28qCLdqt68A9FKNT0Kf7w=)
3: APnx_8mfcxrFZN4OeamIRjyf60s.roa (hash: LqDkg2crI+HJCMm5gdlU8GtHUckBwruDxKVGT27c+3Q=)
4: ZE8DP3gurzKrCQiHddZKxLlLWxE.crl (hash: wXT002QoXLkNE9LINwcTKCHLpCnhNL77e3803SI+yXg=)
5: da-rbdUwvdK-EaEtMFVJ4ALqn7g.roa (hash: AiZ5cHYaXgbmcSlAY4kq0VLaSsmy8Eu/WyjQzyBskpg=)
6: izFiBce-GnGDYR4txZafIHP1iLk.roa (hash: 6ASOVWTNVRRVxuY9ayMGRUVJ1id7JkowncNxWBHtm+M=)
7: k-ezMHwur8MdZRQR3hE_e0BhJJw.roa (hash: P4qrs0pkvJINK01RPHPSPt0K8P0Ok49T8HWuoZXmVYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZE8DP3gurzKrCQiHddZKxLlLWxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:19:10:88:ad:1c:6c:83:f9:a9:ed:b6:dd:8a:55:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=644f033f782eaf32ab09088775d64ac4b94b5b11
Validity
Not Before: Nov 4 09:00:56 2025 GMT
Not After : Nov 5 09:00:56 2025 GMT
Subject: CN=77f91425049c0aaf3f8f1df98a122091ebff2c2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:97:42:96:62:31:53:83:92:9b:ce:da:b0:97:
c7:18:fc:2d:ed:7c:bd:1c:50:9c:16:ec:23:89:2d:
41:d2:34:f9:e1:2f:49:4d:d1:24:7f:56:0e:17:41:
e2:a8:75:64:e5:52:6f:e7:d6:09:2c:a5:4d:3d:2b:
5a:d0:e5:67:1d:1e:82:83:83:e7:9b:71:30:b9:da:
1c:29:bc:c9:05:42:2d:74:5c:09:1c:41:57:79:ca:
5e:02:49:7f:5e:a3:65:e4:87:29:83:8e:66:4c:24:
72:7a:23:75:d1:02:b9:2f:a9:2b:97:ee:1a:b4:2f:
84:f6:30:24:3b:0b:db:fb:e8:63:11:eb:14:4a:1e:
78:74:4d:18:35:0e:6c:af:5c:95:b5:d4:e4:cb:90:
e9:67:95:61:b7:1d:f5:20:b2:23:06:10:af:af:75:
3b:d2:16:83:ef:50:a1:c3:05:d1:7c:3a:dd:6f:c3:
ad:98:7a:81:66:88:af:57:d6:8e:2f:4c:17:eb:26:
96:eb:a4:b0:f0:fe:1c:c5:a0:2f:a3:e2:1f:8c:84:
22:c7:1d:f8:4d:1d:a7:48:1b:7d:36:b0:09:0f:9f:
fc:20:d7:64:8e:f7:14:ef:b7:31:23:77:91:8b:f1:
af:24:1c:43:6d:74:48:dc:5a:fa:31:61:94:33:4e:
ec:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:F9:14:25:04:9C:0A:AF:3F:8F:1D:F9:8A:12:20:91:EB:FF:2C:2F
X509v3 Authority Key Identifier:
keyid:64:4F:03:3F:78:2E:AF:32:AB:09:08:87:75:D6:4A:C4:B9:4B:5B:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZE8DP3gurzKrCQiHddZKxLlLWxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:95:b1:65:d7:99:3f:ff:52:07:d9:7e:3d:e5:31:3f:84:37:
06:6c:f5:d4:84:8c:4a:90:4b:8f:b2:67:a4:44:5d:31:67:b4:
42:fe:61:8d:37:32:62:b6:1f:0b:73:51:30:7f:77:7f:68:70:
a3:f5:41:b4:91:25:ef:ee:07:35:49:aa:f7:fa:d1:f1:63:6f:
56:c6:12:0a:a4:2f:6b:e6:bd:2d:fa:eb:c1:78:52:0f:82:6d:
ca:31:bd:64:55:a0:2d:2f:fc:95:6e:ec:90:f3:9a:d6:f9:8c:
cd:73:82:7e:3d:56:25:4e:fe:e5:f6:1a:6d:da:5f:eb:d1:e2:
07:cd:2f:e0:5d:22:65:87:2e:1f:7c:dc:62:26:a4:71:c0:23:
22:42:88:b6:3a:92:fd:ce:57:8e:04:a3:ea:09:2a:1a:46:e5:
ef:34:3d:fa:0c:c6:81:60:cd:da:20:48:52:e5:34:5c:81:f4:
3b:c3:c5:51:d9:77:6c:81:3d:65:88:6c:08:26:7e:12:51:0b:
ce:d9:34:d0:5b:b5:12:fb:7d:75:57:af:93:9d:9a:c2:e2:e9:
df:47:81:7c:46:31:bd:aa:b5:31:96:65:3a:e8:86:42:95:e0:
8a:1b:c6:25:6a:32:a6:d1:35:b7:53:00:8d:64:ac:c2:25:a3:
10:c5:de:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:54:04 2025 by rpki-client