Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/bcb3fd-a96e-4c00-aa11-5db63bab9460/1/ZNhLXxm2IEiyKmED0J-E2BU8dVY.mft
File: ZNhLXxm2IEiyKmED0J-E2BU8dVY.mft (raw, json)
Hash identifier: JJrE+qDHWLq57ZwoVqcpRQK2MAv/kwa28LtQC0mSVCg=
Subject key identifier: 34:8F:BF:82:7A:FF:8D:BD:2D:C1:8C:E5:76:06:4E:C3:F9:D9:0A:D1
Authority key identifier: 64:D8:4B:5F:19:B6:20:48:B2:2A:61:03:D0:9F:84:D8:15:3C:75:56
Certificate issuer: /CN=64d84b5f19b62048b22a6103d09f84d8153c7556
Certificate serial: 019A4EF5DDB17CC2C6C2DD54FE4D3A6D2012
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZNhLXxm2IEiyKmED0J-E2BU8dVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/bcb3fd-a96e-4c00-aa11-5db63bab9460/1/ZNhLXxm2IEiyKmED0J-E2BU8dVY.mft
Manifest number: 07FC
Signing time: Tue 04 Nov 2025 13:02:07 +0000
Manifest this update: Tue 04 Nov 2025 13:02:07 +0000
Manifest next update: Wed 05 Nov 2025 13:02:07 +0000
Files and hashes: 1: ZNhLXxm2IEiyKmED0J-E2BU8dVY.crl (hash: pUgWKdPl3ao74VgwwmrbPTkuW6o4ULhOsLK8iUbYgOg=)
2: mhg5tcfc8zTLY1L3UB7WoiOaiSs.roa (hash: hMa9fvero/jvRHGFY757SYKGm5IxN7CAX+N4uzSWh9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/bcb3fd-a96e-4c00-aa11-5db63bab9460/1/ZNhLXxm2IEiyKmED0J-E2BU8dVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/bcb3fd-a96e-4c00-aa11-5db63bab9460/1/ZNhLXxm2IEiyKmED0J-E2BU8dVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZNhLXxm2IEiyKmED0J-E2BU8dVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:dd:b1:7c:c2:c6:c2:dd:54:fe:4d:3a:6d:20:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64d84b5f19b62048b22a6103d09f84d8153c7556
Validity
Not Before: Nov 4 13:02:07 2025 GMT
Not After : Nov 5 13:02:07 2025 GMT
Subject: CN=348fbf827aff8dbd2dc18ce576064ec3f9d90ad1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:06:72:0b:eb:5b:97:60:04:54:55:41:b0:e8:
d6:ce:0f:59:41:8c:49:60:4e:a8:cd:1d:ae:82:46:
4c:24:a2:6e:61:46:82:b2:d5:d4:b0:05:d8:d0:34:
74:2b:51:07:25:6a:f5:a6:72:45:19:ae:d1:58:e1:
21:27:47:0d:17:04:1a:51:d9:5c:04:f5:1c:f0:3a:
0a:54:25:3d:c9:3e:32:d0:e2:c1:5c:05:8b:e6:86:
88:82:10:b5:f9:be:a3:72:82:c7:7c:c0:0f:57:ee:
89:33:16:c5:58:db:07:49:b2:68:dd:3b:8e:c1:cb:
32:a9:8c:7b:f2:0a:54:51:66:cf:72:9b:f3:9f:1c:
f4:3e:29:08:55:e8:80:4a:73:99:68:f9:47:67:c1:
ec:a9:6f:13:d2:d9:47:b8:4e:21:a5:33:43:cc:7f:
db:29:06:b9:06:e8:e8:b3:5c:ea:9c:21:5b:fb:78:
5a:e7:b8:ba:4d:2e:77:25:e7:dd:31:bb:21:d6:b8:
36:c9:ac:77:a1:c8:2d:47:f5:29:e7:1e:af:95:45:
49:2d:d1:90:6d:a0:e2:0f:3d:cf:cf:6c:37:cf:6b:
e2:81:2c:78:fd:b5:99:b0:3c:be:8c:76:37:4c:d2:
8b:da:ed:c6:0d:a3:53:e8:91:3a:c5:84:0b:b5:6c:
93:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:8F:BF:82:7A:FF:8D:BD:2D:C1:8C:E5:76:06:4E:C3:F9:D9:0A:D1
X509v3 Authority Key Identifier:
keyid:64:D8:4B:5F:19:B6:20:48:B2:2A:61:03:D0:9F:84:D8:15:3C:75:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNhLXxm2IEiyKmED0J-E2BU8dVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bcb3fd-a96e-4c00-aa11-5db63bab9460/1/ZNhLXxm2IEiyKmED0J-E2BU8dVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bcb3fd-a96e-4c00-aa11-5db63bab9460/1/ZNhLXxm2IEiyKmED0J-E2BU8dVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:ee:45:94:3e:2f:fd:24:a4:aa:cd:a6:57:23:99:7f:36:0f:
01:4e:97:7e:55:70:66:2b:c7:6f:cd:8b:5b:46:0b:74:77:20:
04:a5:f5:a7:87:58:c1:7c:31:be:14:6e:5f:5e:ac:7e:a4:f9:
57:e6:34:8d:4a:c9:34:e1:a9:07:ae:c1:0d:a6:c2:f2:2e:71:
99:fa:36:bb:be:a4:45:35:75:73:eb:ad:98:ee:6c:b3:3a:d5:
b6:2c:a1:6d:92:44:b3:41:57:71:3b:60:b8:0d:fe:e7:4f:7b:
e1:23:4c:cf:e8:ba:66:e0:02:aa:c1:87:68:ac:36:1e:61:ab:
28:e4:ea:b5:e1:b9:3d:16:7b:74:3e:d2:d1:b4:c5:15:21:94:
e2:1f:57:50:a6:e3:e9:dc:49:f3:aa:2a:2d:c0:86:d4:ba:78:
62:ec:de:2b:6c:3d:c6:14:77:a7:b5:6c:b5:42:f7:53:ab:14:
82:92:80:e9:7f:77:c4:b0:5f:05:3e:16:dd:bb:d4:b5:61:3d:
dd:b0:d9:f8:c8:55:ac:da:1f:d1:1a:71:72:47:d9:d7:7e:32:
51:35:ab:72:c5:06:44:74:88:bf:93:d0:a9:15:9e:87:6d:c0:
b4:01:57:03:4d:05:9f:5c:3c:77:84:fe:06:73:dd:8f:00:21:
24:2b:54:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:36:37 2025 by rpki-client