
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft
File: Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft (raw, json)
Hash identifier: 43ZYkJt6QcJ2McuytVBY3d2s6Yoqa60/9biWiaetSlE=
Subject key identifier: 53:E3:AC:09:81:D4:83:2A:C9:B0:E9:BA:F8:58:1B:2B:6E:D9:1D:5B
Authority key identifier: 65:BD:CF:F7:7B:F0:60:D5:DA:12:DE:45:E2:07:2E:1C:FF:45:60:A7
Certificate issuer: /CN=65bdcff77bf060d5da12de45e2072e1cff4560a7
Certificate serial: 019A52D297F383EF628B904B42F3B33080B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft
Manifest number: 171D
Signing time: Wed 05 Nov 2025 07:02:04 +0000
Manifest this update: Wed 05 Nov 2025 07:02:04 +0000
Manifest next update: Thu 06 Nov 2025 07:02:04 +0000
Files and hashes: 1: 3LyGnKUrtS-bd3Yu3eH07LtQYR8.roa (hash: 5NomKYbD4FvnokbGtOTNPOIwbgTTBvKVyFQCl7SiC8k=)
2: 9OAY-jOw3emNDTJkwHz_aLBHU-o.roa (hash: Ah56S4YsKlRsIR5ZtCQAkBkQPPjwEJPdV91cqnHgQHo=)
3: JdgLX_rDpFXbn3g6ck-3xVrnTaU.roa (hash: TOSlGfMktZDLi6DZuPyngZmNUQUQKAMWa3FBKS2yrIU=)
4: PFJiD8MLfnakL2mkAANmOoeHGUU.roa (hash: a0vpttSq3cgxQGvU/dz1eOxNhQQQu/dzUi1jCTAXGlI=)
5: RVJ3nIJEBcWZXpWb3MnSUCFA2iY.roa (hash: M8lbfWsAGSkoDl5BWQQZtTG7pQkMrZk5UuquwmgmkYY=)
6: XlUV47Af6RgAqHn9dKADpSmWXow.roa (hash: DZ3ovpHgXP4fdA9+Ev+RMAFLM7kbC/ZH4RHrYqXrnFs=)
7: Zb3P93vwYNXaEt5F4gcuHP9FYKc.crl (hash: SpHkHZTg/lzktVtKn3/sr8lj/YNZNB489/R/FKAOt18=)
8: Zf59mhwN1S3gDhITine9rGoU1mI.roa (hash: ItAmoJjJI8759vV0N2ep7BAGBNMWntj11jBxYRrpcMA=)
9: qSRUcx1mNfKDgalh8O503kQbSt8.roa (hash: +4A/h9qJjo7DqqpmkiX09AgpoyXjjM+9hCnj8Lt2uqI=)
10: r6uPDA9vlEWT9sYoVFzM7GHgFa8.roa (hash: t27IhHRMBSQR6oORXFY/8Mn45oNpwsdletkYrs42U2g=)
11: ttd53oOqNzSh1Mtdf5yOWTGPq-E.roa (hash: EumygL53WWGsQCEg1Lem1grWf0oIkvDK9ERz5W1pGI8=)
12: u8s9HEkKaDRnfwCA4Fp1WEQGANU.roa (hash: D38pH0rgh3xNzyToMjwZsTzhvLlwYeEp9O/fE2rpcks=)
13: zNNg038UFfEY9NFH791kAGkTEyQ.roa (hash: DPthEHZwIWuER39PoW1q82KX77P15O59a2/uPQsrelg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d2:97:f3:83:ef:62:8b:90:4b:42:f3:b3:30:80:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65bdcff77bf060d5da12de45e2072e1cff4560a7
Validity
Not Before: Nov 5 07:02:04 2025 GMT
Not After : Nov 6 07:02:04 2025 GMT
Subject: CN=53e3ac0981d4832ac9b0e9baf8581b2b6ed91d5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:35:33:30:af:41:df:47:21:5a:0b:46:f7:5a:
a8:d3:b7:49:46:81:4a:e9:70:72:40:a0:f4:89:de:
8a:e3:ff:58:e2:d4:33:3d:2d:c9:56:03:06:d1:f6:
b7:e8:79:d1:c4:ad:05:1e:09:42:bb:ea:8d:25:64:
44:29:87:43:86:f4:61:fb:c2:b0:d2:65:b5:5d:7e:
30:32:05:28:87:1d:34:d0:64:62:f7:0b:bf:c9:3c:
99:a9:a7:27:f2:8b:fc:7f:a7:0c:89:eb:17:08:c7:
93:56:b2:47:f5:1a:35:18:f1:8f:7e:2a:0c:c8:4b:
fe:02:5b:0e:43:05:0b:aa:60:66:eb:86:fa:64:28:
80:94:55:e4:22:2b:a3:9b:75:b1:9e:cd:c8:03:08:
6b:68:30:a6:29:a5:53:d9:a3:d9:e1:bf:02:77:f3:
4b:bf:49:1d:41:e3:04:fe:1f:9b:ce:98:56:c3:8d:
0e:f5:44:d6:9d:fd:2d:f4:5a:b7:8d:6b:24:1b:1d:
27:f7:a0:20:5c:27:ec:c8:92:28:a2:27:8c:3f:08:
a4:c6:c3:31:f6:3e:2f:55:f6:16:e7:6a:15:fa:cc:
a4:7e:62:d5:1b:5e:00:f8:1b:3c:88:e0:e4:1f:85:
8b:61:f8:9d:0e:83:5d:5a:2c:39:69:1c:1d:58:7c:
b6:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:E3:AC:09:81:D4:83:2A:C9:B0:E9:BA:F8:58:1B:2B:6E:D9:1D:5B
X509v3 Authority Key Identifier:
keyid:65:BD:CF:F7:7B:F0:60:D5:DA:12:DE:45:E2:07:2E:1C:FF:45:60:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:a6:f5:a7:29:2d:a7:fb:40:65:c7:23:9c:03:fd:6f:3f:f6:
53:50:a4:e4:7e:6e:b1:af:1c:63:49:40:d7:35:0e:5e:10:1b:
88:92:e6:b7:26:0e:4f:ef:67:1a:6a:59:a4:6c:29:8a:83:a7:
75:e2:86:f4:7e:e5:de:a3:af:51:58:8d:c3:8f:ac:aa:05:95:
6a:04:96:72:df:74:93:6e:c3:bd:be:d8:c8:17:96:2b:93:29:
c8:dd:4e:0b:4e:c2:b4:02:30:e2:8d:a7:44:98:9b:9f:eb:81:
2f:0b:4e:dc:d8:2c:5f:5b:3a:99:ba:90:5d:82:73:e7:ab:12:
cd:27:a0:d9:67:a3:76:f7:0e:82:67:80:3b:f3:0e:59:7c:1a:
f6:2c:d1:7a:f3:f1:83:12:13:48:87:71:55:79:3f:6e:8b:f3:
46:de:f9:24:d0:a0:05:2d:67:35:83:13:78:39:74:a3:ff:04:
b9:e1:05:ba:be:cc:23:d6:fb:94:2f:3e:32:41:5d:46:78:a8:
b7:8a:19:e0:6e:f3:66:31:dc:41:01:05:60:af:c2:d9:ee:92:
6b:24:a5:4d:23:f9:72:e4:92:32:cc:43:ed:c3:52:e7:b6:7c:
07:4f:ce:5a:2d:f1:8f:f6:3c:ae:35:2d:a9:bc:65:14:83:a0:
52:70:aa:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:45:34 2025 by rpki-client