Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.mft
File: ZboV1Huk9EgnZEctjZcUah67v4Y.mft (raw, json)
Hash identifier: 7GtYONMXii1LhUTagXEztH7Ehzbn6FdeqhIkOZRu84k=
Subject key identifier: D5:A3:9F:CC:25:E5:42:D1:70:A0:0D:94:11:2A:46:18:2F:EF:B5:BB
Authority key identifier: 65:BA:15:D4:7B:A4:F4:48:27:64:47:2D:8D:97:14:6A:1E:BB:BF:86
Certificate issuer: /CN=65ba15d47ba4f4482764472d8d97146a1ebbbf86
Certificate serial: 019A52D2900C10284A068168C40071FC8A20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZboV1Huk9EgnZEctjZcUah67v4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.mft
Manifest number: 1716
Signing time: Wed 05 Nov 2025 07:02:02 +0000
Manifest this update: Wed 05 Nov 2025 07:02:02 +0000
Manifest next update: Thu 06 Nov 2025 07:02:02 +0000
Files and hashes: 1: 4rAAYUq5t1ihC75pRZ-8BYtmpQo.roa (hash: 188bZwTUrt3prH8kliJVWf+ZzLbMtaC8U5VcRX/YSdk=)
2: 6To_-SlMxz3YG0ptLY8TCmc3uqU.roa (hash: uJB/UZHKN4C9IojJMtedYn8sR+djAWZ0k/CyzWBoJ6E=)
3: ZboV1Huk9EgnZEctjZcUah67v4Y.crl (hash: L9GlGYzwRChYZIUfugxC5CDogBI1zIEXK/3hkACmW4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZboV1Huk9EgnZEctjZcUah67v4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 07:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d2:90:0c:10:28:4a:06:81:68:c4:00:71:fc:8a:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65ba15d47ba4f4482764472d8d97146a1ebbbf86
Validity
Not Before: Nov 5 07:02:02 2025 GMT
Not After : Nov 6 07:02:02 2025 GMT
Subject: CN=d5a39fcc25e542d170a00d94112a46182fefb5bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:bf:2c:7d:43:30:f5:c3:8b:da:0a:8a:8b:5c:
78:14:eb:8a:36:d6:9a:b1:2e:b1:8d:e5:28:f3:8b:
47:6c:b0:78:7c:82:8b:3f:9b:b6:9f:b3:15:c8:4f:
19:15:83:9d:c4:16:80:29:a5:a4:df:6e:53:dc:8e:
80:f3:ae:ee:a2:6b:2a:ec:82:c8:c8:c0:74:ed:e8:
8d:a9:e5:3a:31:ac:8f:7c:b7:7f:4e:2e:0a:2c:1a:
35:06:6a:af:82:09:61:14:6e:d4:a1:51:14:f4:e5:
c6:b2:ab:45:48:c1:88:c6:95:c7:cf:b1:68:86:ff:
ad:f4:bb:5c:94:0a:eb:84:80:75:02:3c:57:d0:f1:
0d:ef:96:6a:c0:62:d9:86:c8:69:6b:69:14:71:1f:
9a:4f:22:5c:3e:d6:6c:93:40:b8:a6:78:7d:7a:be:
05:ee:f6:c5:be:ff:87:d4:02:88:16:1b:34:90:c3:
59:81:c4:4e:f2:c5:0b:f1:68:c5:d4:9d:66:07:3f:
ec:5a:ad:79:7c:ff:b3:b4:94:8c:4e:89:59:2a:a1:
09:03:f6:4d:43:fc:a0:de:3d:3c:7e:50:91:ef:c4:
6a:d8:2e:c2:1d:a3:5d:7f:7f:07:19:6f:8a:ff:b6:
06:cf:12:8b:01:25:1d:dc:37:2b:61:bd:2e:64:c6:
b9:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:A3:9F:CC:25:E5:42:D1:70:A0:0D:94:11:2A:46:18:2F:EF:B5:BB
X509v3 Authority Key Identifier:
keyid:65:BA:15:D4:7B:A4:F4:48:27:64:47:2D:8D:97:14:6A:1E:BB:BF:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZboV1Huk9EgnZEctjZcUah67v4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:40:52:a8:0f:b1:48:5b:8d:60:d0:82:fb:21:bd:cc:f3:d4:
6f:14:70:c8:9a:0e:45:4d:1f:77:3a:a9:f3:36:78:70:72:25:
ce:d6:b2:a6:eb:00:32:86:b3:70:71:cf:34:49:ac:30:0a:ac:
36:d3:da:6c:89:ef:a5:f8:97:b9:0f:07:62:b8:98:1a:49:10:
3f:85:14:db:fa:38:1e:14:aa:47:b6:49:b0:65:1d:bc:2c:74:
25:fc:ad:06:22:99:29:ef:c6:d5:9f:6e:68:8a:b7:19:0a:45:
3d:f3:42:7d:50:87:b6:29:a2:dd:2e:59:b2:b6:e9:d2:c8:8c:
55:d1:43:5b:17:4e:13:a6:85:52:fb:d7:7e:d0:80:89:27:b8:
e0:ec:a5:f8:31:41:c7:6a:a0:3c:3c:26:64:69:15:f9:24:9f:
d3:bd:80:a6:bf:35:08:af:23:93:be:83:f4:2e:fd:ea:51:cc:
f8:1f:5a:a8:68:b1:2e:ef:fa:62:85:89:13:0f:9d:76:ca:03:
be:47:87:53:96:76:5f:42:2d:6d:ca:90:50:73:a2:12:63:a8:
a7:cd:90:db:00:84:1a:22:b9:eb:b1:66:02:96:03:17:c7:1d:
e6:e8:1a:7b:c1:ec:26:cb:12:7a:1c:79:66:b3:c4:95:6e:b6:
be:c4:f0:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:03:08 2025 by rpki-client