Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.mft
File: ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.mft (raw, json)
Hash identifier: B4zshrOJbhu7CL0VbhGUYRDnwRY2kOjWL64s0GUIq/I=
Subject key identifier: 54:10:73:DD:50:6B:9C:9F:A6:19:D2:43:7A:5E:39:FD:09:25:3D:26
Authority key identifier: 64:1C:78:FC:17:48:BD:CC:6A:6C:88:C6:7D:28:3E:1D:02:D9:DC:C8
Certificate issuer: /CN=641c78fc1748bdcc6a6c88c67d283e1d02d9dcc8
Certificate serial: 019A4EF456822CC1EF516C43147E269B1D41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.mft
Manifest number: 0FC2
Signing time: Tue 04 Nov 2025 13:00:27 +0000
Manifest this update: Tue 04 Nov 2025 13:00:27 +0000
Manifest next update: Wed 05 Nov 2025 13:00:27 +0000
Files and hashes: 1: 7KyvX2ge4BVj5LFVdOXXXemAkCg.roa (hash: Hc/1xIYUTBtB+16ukbbri4uoGukybMhi3rtoBVu7s8I=)
2: 8k4-DaJSUcckd3W12t-LKgUPXOY.roa (hash: FEgAXATsq5yqV5pU5s6y/DGmTndCuBZeOPWD+L+m2zs=)
3: ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.crl (hash: ynjjOcwL4OX77G07WDRygsebuBdrSoPPJypdqtrG9y0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:56:82:2c:c1:ef:51:6c:43:14:7e:26:9b:1d:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=641c78fc1748bdcc6a6c88c67d283e1d02d9dcc8
Validity
Not Before: Nov 4 13:00:27 2025 GMT
Not After : Nov 5 13:00:27 2025 GMT
Subject: CN=541073dd506b9c9fa619d2437a5e39fd09253d26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:30:18:33:57:84:39:f6:22:76:15:9e:2b:4d:
69:6a:fb:56:b6:df:8f:10:6d:63:de:54:82:dd:dd:
2d:8e:50:ab:5c:02:c4:19:7f:e6:b2:29:65:32:24:
62:18:45:d4:6c:9c:87:90:45:ed:c8:06:36:d7:3a:
67:0f:90:d6:4a:ef:f9:09:f9:69:0e:47:9c:6c:83:
cc:11:50:80:ac:b3:1d:68:70:59:ee:20:a6:56:0a:
cc:db:cb:13:a2:0e:f3:cc:3b:75:eb:74:bc:dd:91:
ee:fe:ad:3e:05:b0:c3:fa:1e:96:76:b1:0d:33:cc:
7b:5c:c3:90:41:52:5f:dc:de:56:72:b7:b1:96:3b:
5d:af:3b:a3:c1:e3:c5:e3:b7:2d:c2:8d:08:d2:67:
03:54:6f:19:41:38:00:f3:50:d0:05:50:ba:7a:32:
b5:c6:51:31:c4:e1:a7:8a:c2:69:42:5d:83:de:6a:
48:19:fc:6c:7e:17:04:99:ce:3b:b0:e8:ed:25:92:
30:44:78:79:a3:5e:94:c1:c2:5d:83:6f:78:ee:ba:
29:cd:26:8f:be:27:e1:7a:e9:c6:8c:98:40:5b:a9:
a2:cc:73:af:6e:23:7e:ae:53:ea:10:a9:ac:15:95:
5e:f0:2f:ae:a9:64:60:2c:2c:51:b7:63:77:31:f8:
2f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:10:73:DD:50:6B:9C:9F:A6:19:D2:43:7A:5E:39:FD:09:25:3D:26
X509v3 Authority Key Identifier:
keyid:64:1C:78:FC:17:48:BD:CC:6A:6C:88:C6:7D:28:3E:1D:02:D9:DC:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:94:de:ce:49:9c:c3:68:8c:fe:4a:a9:35:d4:bf:61:c2:9b:
50:0b:1e:7a:fe:8b:68:a9:08:21:b5:df:ed:28:ff:11:53:26:
79:3b:33:d2:76:5a:9b:8c:9a:87:b9:c1:33:dc:af:51:cc:61:
a3:81:8d:9c:7b:d7:b3:80:18:02:d8:1d:c8:18:fa:ae:35:b5:
9b:5b:22:30:a0:72:47:92:f9:e8:d9:42:a6:e2:b8:1f:da:0f:
3a:36:39:3d:64:ef:eb:ae:12:b3:04:6d:36:e2:03:98:c2:6a:
68:22:f9:b6:cf:8f:e1:f1:d7:8f:68:81:79:3b:47:40:95:4d:
01:d1:32:17:c7:71:7f:5a:e4:64:18:bf:5a:5a:7c:b3:34:27:
72:4b:93:d5:67:a0:34:50:61:a3:f7:e6:c6:8a:6b:a0:eb:35:
34:bc:aa:c0:dc:8a:3c:97:8a:76:62:91:20:83:c5:38:ee:d4:
e4:cf:a5:48:2b:5e:07:c4:38:ec:9a:4b:aa:47:5a:fd:d4:e2:
45:56:5d:85:16:10:66:e4:64:a2:a7:b6:d2:33:22:6c:56:b0:
5d:2f:7d:a6:53:ea:95:14:a7:2d:cd:c3:a3:82:3c:08:e2:25:
e8:8e:9a:3b:c7:03:c1:88:4c:f9:e4:fd:26:7e:16:10:da:90:
96:fd:c6:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:46:35 2025 by rpki-client