Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/21b69a-a117-4b6d-86d5-9a15bc0d3988/1/ZbSNCjer_DS0HS0rroxoLtI-xCY.mft
File: ZbSNCjer_DS0HS0rroxoLtI-xCY.mft (raw, json)
Hash identifier: FDKhVo2r8F2Q0ePt8oV2thXxlCmOAXBSsx2J3xkoaIs=
Subject key identifier: 5E:04:C9:8C:FE:B4:26:DD:27:B2:A9:93:08:B7:43:CC:1B:91:A0:1B
Authority key identifier: 65:B4:8D:0A:37:AB:FC:34:B4:1D:2D:2B:AE:8C:68:2E:D2:3E:C4:26
Certificate issuer: /CN=65b48d0a37abfc34b41d2d2bae8c682ed23ec426
Certificate serial: 019A4EF590C3870F74FDF70CE9B3E5F7EBBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbSNCjer_DS0HS0rroxoLtI-xCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/21b69a-a117-4b6d-86d5-9a15bc0d3988/1/ZbSNCjer_DS0HS0rroxoLtI-xCY.mft
Manifest number: 140D
Signing time: Tue 04 Nov 2025 13:01:47 +0000
Manifest this update: Tue 04 Nov 2025 13:01:47 +0000
Manifest next update: Wed 05 Nov 2025 13:01:47 +0000
Files and hashes: 1: ZbSNCjer_DS0HS0rroxoLtI-xCY.crl (hash: OA6xbTqKeTq0Ezm0uP1bsq+F84sUnLRV0W30PV8zc28=)
2: _3NEeq6GOXOiLdZdEWjfBKtdhh8.roa (hash: pTgzQ3b72uIy4BLhpeJN6uHM+SJH/WDu+3JWOoF47hQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/21b69a-a117-4b6d-86d5-9a15bc0d3988/1/ZbSNCjer_DS0HS0rroxoLtI-xCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/21b69a-a117-4b6d-86d5-9a15bc0d3988/1/ZbSNCjer_DS0HS0rroxoLtI-xCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZbSNCjer_DS0HS0rroxoLtI-xCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:90:c3:87:0f:74:fd:f7:0c:e9:b3:e5:f7:eb:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65b48d0a37abfc34b41d2d2bae8c682ed23ec426
Validity
Not Before: Nov 4 13:01:47 2025 GMT
Not After : Nov 5 13:01:47 2025 GMT
Subject: CN=5e04c98cfeb426dd27b2a99308b743cc1b91a01b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f5:4b:eb:b2:03:ff:6b:9c:58:cf:fb:21:af:
15:a0:3e:35:ef:86:35:0c:fc:29:60:e6:3f:6f:86:
08:33:d5:f1:4e:97:2b:5b:d1:fe:e6:32:6d:07:f1:
df:72:a5:06:ca:3f:d6:c8:a0:6b:6a:84:71:07:08:
d4:93:3c:81:a9:c0:f9:75:6a:9d:42:a1:ef:f4:48:
c5:e0:b1:42:79:a5:41:f1:3d:67:1f:18:04:e7:cc:
37:58:dc:0c:50:af:fa:7d:19:a9:69:7a:ac:96:66:
71:b7:38:78:96:ea:5a:39:d6:97:01:71:f5:67:95:
7a:a7:44:3c:01:cd:5e:ab:6a:0d:69:cc:fb:f0:38:
e1:c8:36:b8:0f:fa:f7:b4:de:cf:e8:82:75:ef:99:
d1:2d:96:ab:b3:c2:18:c7:98:fe:23:8c:fe:7e:4c:
92:12:54:bc:7d:bb:d7:f5:f5:ef:a8:fc:74:33:fd:
ac:2d:5b:3d:29:50:d7:07:f4:21:b5:c1:c2:83:a1:
3f:26:1c:e8:62:af:ef:fd:60:2e:90:fc:7f:78:3c:
0a:98:4b:d5:8c:8a:56:c4:85:bb:77:7a:20:2b:bb:
cc:fc:97:1d:97:63:6e:a1:fd:bb:1f:ff:47:50:2b:
62:a5:65:03:3e:63:fc:70:ad:65:be:bc:cd:09:40:
b8:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:04:C9:8C:FE:B4:26:DD:27:B2:A9:93:08:B7:43:CC:1B:91:A0:1B
X509v3 Authority Key Identifier:
keyid:65:B4:8D:0A:37:AB:FC:34:B4:1D:2D:2B:AE:8C:68:2E:D2:3E:C4:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbSNCjer_DS0HS0rroxoLtI-xCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/21b69a-a117-4b6d-86d5-9a15bc0d3988/1/ZbSNCjer_DS0HS0rroxoLtI-xCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/21b69a-a117-4b6d-86d5-9a15bc0d3988/1/ZbSNCjer_DS0HS0rroxoLtI-xCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:f5:fa:97:f7:d4:9e:20:f5:dc:79:e7:49:48:88:72:1d:01:
95:73:1a:40:c6:9b:d4:e4:2e:c7:11:ef:4f:ce:fd:62:42:53:
b3:c6:02:3f:28:78:ac:e6:6b:f9:74:e8:6e:a3:9b:d5:ed:fd:
d7:a9:97:97:bf:14:ba:d3:ec:96:ba:ab:67:a6:18:b7:36:fa:
66:d3:ba:7e:4b:59:61:43:45:f3:a6:4d:b7:fd:e8:1b:ca:24:
7a:79:a5:bf:dd:7d:30:ac:ba:c3:74:ba:ae:e7:36:d3:97:08:
2c:78:71:0d:b0:ff:fa:eb:ce:66:98:05:31:8d:84:e2:51:42:
6d:8b:5c:69:95:91:78:34:87:ab:3f:8a:78:51:3b:ed:0d:d1:
11:f4:32:c4:84:80:34:e8:2c:0c:de:c5:d4:4f:01:c3:d9:c4:
9e:69:44:4e:d0:46:54:59:44:28:45:6e:77:07:ae:dd:c1:54:
5f:26:0a:9b:5e:5e:82:a6:7d:4f:a6:5a:ca:aa:35:0a:33:4e:
32:83:07:e6:55:69:11:13:0d:64:7a:a7:e1:17:12:5a:54:72:
76:7a:03:8b:e6:b4:34:a5:ee:a2:d9:bc:34:d5:40:c0:a0:90:
5e:1b:e8:7a:46:89:eb:ff:e4:6e:0c:a8:bc:71:51:03:40:07:
4c:21:21:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:00:11 2025 by rpki-client