Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/925ea2-fff8-4095-9d96-01cd47b6ca0d/1/ZJek5qz7ctUdKe5hpig29mBgl6Y.mft
File: ZJek5qz7ctUdKe5hpig29mBgl6Y.mft (raw, json)
Hash identifier: doBW/j7R1Q7HqGw27/48eFbqRL0rlHIGpsZfAb8BS94=
Subject key identifier: 18:94:F2:0F:32:B0:28:E1:F7:5C:80:3C:ED:F2:BB:E3:81:1B:F6:84
Authority key identifier: 64:97:A4:E6:AC:FB:72:D5:1D:29:EE:61:A6:28:36:F6:60:60:97:A6
Certificate issuer: /CN=6497a4e6acfb72d51d29ee61a62836f6606097a6
Certificate serial: 019A54F676DC47C8250DF8D6F5722ACBC76C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZJek5qz7ctUdKe5hpig29mBgl6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/925ea2-fff8-4095-9d96-01cd47b6ca0d/1/ZJek5qz7ctUdKe5hpig29mBgl6Y.mft
Manifest number: 058B
Signing time: Wed 05 Nov 2025 17:00:29 +0000
Manifest this update: Wed 05 Nov 2025 17:00:29 +0000
Manifest next update: Thu 06 Nov 2025 17:00:29 +0000
Files and hashes: 1: ZJek5qz7ctUdKe5hpig29mBgl6Y.crl (hash: tQoiXMO1wUzOjaSXapujITzJe6KWDCyx34V59AIUr6I=)
2: p-RJNh9JzuTGAbonv6SiHIGo-Zs.roa (hash: CnUaaNmND1hlUYpUdj93kk7BQgZTe17usUCZnw2w4sE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/925ea2-fff8-4095-9d96-01cd47b6ca0d/1/ZJek5qz7ctUdKe5hpig29mBgl6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/925ea2-fff8-4095-9d96-01cd47b6ca0d/1/ZJek5qz7ctUdKe5hpig29mBgl6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZJek5qz7ctUdKe5hpig29mBgl6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:f6:76:dc:47:c8:25:0d:f8:d6:f5:72:2a:cb:c7:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6497a4e6acfb72d51d29ee61a62836f6606097a6
Validity
Not Before: Nov 5 17:00:29 2025 GMT
Not After : Nov 6 17:00:29 2025 GMT
Subject: CN=1894f20f32b028e1f75c803cedf2bbe3811bf684
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:85:10:bf:04:5e:d9:0d:1e:b3:12:c4:3e:73:
fa:1e:92:9f:72:d9:40:ea:50:c4:67:23:66:2f:3d:
7c:72:de:d6:8a:33:7f:36:c1:8e:39:d9:ca:77:e7:
37:6a:17:2f:cc:0d:bb:3c:ba:58:25:e7:57:10:7f:
7d:1d:1a:2e:70:2e:2e:3d:7f:0c:11:7e:4e:ca:be:
8d:25:3d:68:37:15:1f:10:cf:80:88:4f:03:7f:67:
19:7a:2e:66:9f:05:56:54:96:d8:ac:50:cb:d5:0b:
f3:8a:bd:0c:da:2c:ed:cb:ca:6a:67:03:cb:e0:bf:
a5:ac:f9:5e:c1:09:dc:c0:54:28:7e:2f:3d:c1:ec:
31:9c:22:00:c9:f8:09:7e:63:ae:e6:93:ca:88:35:
e4:27:bb:f9:39:dc:2b:31:a1:4d:89:36:3d:f6:51:
2e:ba:c3:69:82:3d:17:c3:08:a6:60:4d:90:c2:0b:
4b:68:fa:cc:73:eb:cb:26:6c:ad:6f:34:5e:ac:f1:
96:54:89:6c:ed:4d:7c:df:1a:a4:81:78:10:4a:f2:
e3:61:10:ba:8a:bd:97:d1:06:9c:4e:3b:c0:6d:b7:
e9:99:ef:a5:db:6a:9c:44:00:18:d7:84:62:17:e5:
b7:6c:3d:40:57:90:f5:d5:8b:0d:86:3c:47:66:08:
0d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:94:F2:0F:32:B0:28:E1:F7:5C:80:3C:ED:F2:BB:E3:81:1B:F6:84
X509v3 Authority Key Identifier:
keyid:64:97:A4:E6:AC:FB:72:D5:1D:29:EE:61:A6:28:36:F6:60:60:97:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZJek5qz7ctUdKe5hpig29mBgl6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/925ea2-fff8-4095-9d96-01cd47b6ca0d/1/ZJek5qz7ctUdKe5hpig29mBgl6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/925ea2-fff8-4095-9d96-01cd47b6ca0d/1/ZJek5qz7ctUdKe5hpig29mBgl6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:f5:ca:78:98:5d:00:ba:b0:80:ab:64:9d:5a:46:34:d7:3a:
78:a5:ef:bd:68:7d:e3:53:cd:0b:f6:b8:5e:40:8a:34:73:40:
6d:04:5a:d6:7c:42:fd:e9:a8:07:b5:c2:d3:db:ed:32:89:4a:
5b:94:11:e3:a9:fc:7b:e1:96:e2:37:c2:51:e2:21:3f:41:fe:
91:9a:1e:03:d9:f6:b7:66:ff:07:74:6d:0b:a4:0c:25:95:09:
ff:42:2d:22:b0:c0:4b:b4:8d:c4:b7:09:87:31:a7:58:b1:5b:
63:09:dc:66:e3:10:60:db:38:ed:62:19:65:74:04:86:f1:cb:
89:13:ec:be:fb:7d:24:b2:ab:84:14:7a:72:7e:fe:43:52:b3:
38:1e:1a:7e:16:03:a5:56:bb:5e:cb:a4:d9:e0:30:e0:d1:3f:
be:78:b5:c7:01:29:31:91:92:02:ae:00:2b:6a:99:4a:2e:d3:
31:43:5c:a5:97:46:53:c6:05:e0:d3:3d:a8:9b:14:ab:30:71:
71:0c:38:b6:c9:59:4f:85:a9:0a:29:e0:80:4c:7f:d5:b0:e6:
43:a9:1e:f1:0f:d1:b9:4d:c5:00:9b:b8:06:e0:67:7b:16:7d:
c9:ef:39:55:51:81:0d:b3:51:d8:4d:2a:c9:4e:b2:cb:f8:43:
2c:70:00:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:53:24 2025 by rpki-client