Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.mft
File: ZboV1Huk9EgnZEctjZcUah67v4Y.mft (raw, json)
Hash identifier: 9CWkz78c9Fy0Q92UxvtUIaOOO1oedhYOr5hBGh0qZMo=
Subject key identifier: 3B:04:E9:DB:EB:9A:E4:B2:BB:B5:B2:EE:75:51:24:F8:98:75:C5:47
Authority key identifier: 65:BA:15:D4:7B:A4:F4:48:27:64:47:2D:8D:97:14:6A:1E:BB:BF:86
Certificate issuer: /CN=65ba15d47ba4f4482764472d8d97146a1ebbbf86
Certificate serial: 019A54BF7924FB3B4184B93EAC9178494FDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZboV1Huk9EgnZEctjZcUah67v4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.mft
Manifest number: 1717
Signing time: Wed 05 Nov 2025 16:00:25 +0000
Manifest this update: Wed 05 Nov 2025 16:00:25 +0000
Manifest next update: Thu 06 Nov 2025 16:00:25 +0000
Files and hashes: 1: 4rAAYUq5t1ihC75pRZ-8BYtmpQo.roa (hash: 188bZwTUrt3prH8kliJVWf+ZzLbMtaC8U5VcRX/YSdk=)
2: 6To_-SlMxz3YG0ptLY8TCmc3uqU.roa (hash: uJB/UZHKN4C9IojJMtedYn8sR+djAWZ0k/CyzWBoJ6E=)
3: ZboV1Huk9EgnZEctjZcUah67v4Y.crl (hash: Z+S6yopjtHvFxKeu2sy2nFT9MnColaXYbO9nOoZcVVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZboV1Huk9EgnZEctjZcUah67v4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:bf:79:24:fb:3b:41:84:b9:3e:ac:91:78:49:4f:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65ba15d47ba4f4482764472d8d97146a1ebbbf86
Validity
Not Before: Nov 5 16:00:25 2025 GMT
Not After : Nov 6 16:00:25 2025 GMT
Subject: CN=3b04e9dbeb9ae4b2bbb5b2ee755124f89875c547
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:cb:67:65:f6:e8:76:0d:87:3b:b7:6e:59:9a:
3b:8a:26:68:9b:b4:8b:ff:d0:e6:18:c5:7e:b7:cf:
c8:01:78:ab:02:22:35:66:f6:d9:25:c9:0a:de:0d:
6d:d5:25:4f:34:bd:dc:f9:a8:a6:01:4b:77:ac:96:
90:6d:f1:4b:a3:ce:19:df:c1:a5:62:3a:14:2d:38:
18:b2:45:0b:7f:98:df:e8:e1:c5:c1:cf:80:13:f3:
4d:16:3f:cd:e7:39:7b:9d:d7:7c:88:ef:1d:f0:2a:
37:d8:ab:a0:94:84:1e:ae:d9:2b:0a:87:38:d0:c2:
a7:c1:cc:67:dd:dd:07:e3:ac:46:09:04:ec:67:a3:
d6:ac:80:9b:cb:69:17:80:b7:25:71:dc:de:db:86:
81:ba:12:f8:1f:e5:09:1a:00:f8:0a:55:fe:74:18:
4c:46:79:53:af:6b:55:c0:45:02:ac:e5:3c:fa:29:
4e:57:a7:c8:46:c2:97:42:68:22:91:35:cd:cb:e3:
6c:eb:ad:e2:4f:fd:b5:66:a0:62:c3:4e:2a:15:3d:
ca:54:11:21:d3:4c:ff:57:c0:07:11:c0:40:6b:41:
f4:64:04:82:fc:25:b1:63:94:ba:3a:c6:49:e4:0e:
b6:70:91:d1:9e:88:99:57:87:4e:b0:c3:48:bc:20:
39:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:04:E9:DB:EB:9A:E4:B2:BB:B5:B2:EE:75:51:24:F8:98:75:C5:47
X509v3 Authority Key Identifier:
keyid:65:BA:15:D4:7B:A4:F4:48:27:64:47:2D:8D:97:14:6A:1E:BB:BF:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZboV1Huk9EgnZEctjZcUah67v4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:e1:7c:76:e0:9e:28:19:e7:38:93:75:51:43:fa:62:0a:90:
e6:e6:71:3a:3c:f4:2e:13:c8:9d:b4:48:d3:9e:9b:ac:57:94:
15:c1:49:8a:1b:62:e9:1e:e2:55:da:5a:ef:bd:c3:f9:23:cd:
27:01:1c:a0:92:15:01:53:49:b4:85:c9:71:3f:04:d3:3b:df:
3c:9f:eb:d1:a7:8c:87:8c:d5:41:48:ba:d6:75:38:c6:72:c4:
cb:8a:e8:33:5c:3f:dc:28:1d:32:8d:6f:a0:82:2c:ea:74:fd:
5d:f7:bb:33:6e:a0:c7:43:ee:87:96:72:93:ca:f3:80:1f:4e:
20:78:aa:05:f7:61:17:9e:5a:b6:0f:cc:3a:f4:8c:0a:67:76:
80:4f:29:15:e7:74:6b:6b:55:fb:38:3f:ee:96:a6:0f:3d:13:
12:58:82:61:c4:5b:b7:35:cc:98:2e:7f:48:b9:05:3e:4a:0d:
4e:35:84:c0:ff:74:58:fa:21:b6:a4:d1:e7:ab:2f:65:20:69:
e1:64:66:80:f3:dd:2d:db:93:7c:3b:82:c3:9b:74:66:8b:cd:
33:17:38:43:80:2d:a7:f1:2f:7a:ff:9a:ac:64:1a:85:f5:c7:
55:1c:32:b9:4b:82:48:6b:e9:83:84:a2:36:79:6a:c7:ae:cb:
d7:3b:58:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:48:20 2025 by rpki-client