Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/6e3fba-4d3a-43cb-babf-5f2882de3ec7/1/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.mft
File: ZOkGJwIa3PpWJDQtPl-LSANaz7Q.mft (raw, json)
Hash identifier: 87nVbxlrXKZmA09NfVqUG5DkF+9XVWhoc52qWPv9KgU=
Subject key identifier: 90:1F:66:E6:DA:54:7E:74:DE:42:B0:18:2F:D1:5D:F4:09:34:6C:76
Authority key identifier: 64:E9:06:27:02:1A:DC:FA:56:24:34:2D:3E:5F:8B:48:03:5A:CF:B4
Certificate issuer: /CN=64e90627021adcfa5624342d3e5f8b48035acfb4
Certificate serial: 019A54BFA9B4E3B53E7EC9997246FA61B3F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/6e3fba-4d3a-43cb-babf-5f2882de3ec7/1/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.mft
Manifest number: 1712
Signing time: Wed 05 Nov 2025 16:00:38 +0000
Manifest this update: Wed 05 Nov 2025 16:00:38 +0000
Manifest next update: Thu 06 Nov 2025 16:00:38 +0000
Files and hashes: 1: ZOkGJwIa3PpWJDQtPl-LSANaz7Q.crl (hash: 3mCQBoCPfKU2hI98s3zDrPfAvDGfSUjuzOKfFjrCHiU=)
2: qoiJ2dkjuPKR2DINrHtiZnfckMQ.roa (hash: LgXeymWOOJplKwnla/9DQkVIgYhvAdLAg89NuJpLJ/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/6e3fba-4d3a-43cb-babf-5f2882de3ec7/1/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/6e3fba-4d3a-43cb-babf-5f2882de3ec7/1/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:bf:a9:b4:e3:b5:3e:7e:c9:99:72:46:fa:61:b3:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64e90627021adcfa5624342d3e5f8b48035acfb4
Validity
Not Before: Nov 5 16:00:38 2025 GMT
Not After : Nov 6 16:00:38 2025 GMT
Subject: CN=901f66e6da547e74de42b0182fd15df409346c76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:34:19:09:e0:4c:00:15:5c:45:f3:bb:9d:27:
5d:70:eb:8d:b0:de:45:0f:86:13:81:27:aa:69:00:
33:2c:e5:b7:7b:c3:c1:61:2c:6f:2f:52:44:68:cb:
3a:3f:28:47:ad:cc:27:48:a9:b8:5f:34:ea:9d:a9:
7a:71:ba:e1:32:aa:6a:cf:28:76:67:fe:b3:62:6a:
60:df:4b:4b:44:d0:b9:b6:ee:95:33:0e:b0:81:cc:
eb:bc:86:34:b9:fb:dd:ac:aa:24:2e:fd:b0:fb:dd:
1d:c1:d6:ad:97:ab:94:fa:40:31:d4:34:0d:ab:20:
9e:8d:6c:53:af:98:c1:8b:d8:75:32:19:38:e3:0e:
ae:4a:75:61:fb:4f:19:14:73:c4:40:8a:b0:d9:bd:
52:17:76:79:94:e8:11:a7:48:03:38:af:23:54:4a:
da:fe:69:2e:1b:e4:b4:cd:ce:d2:57:86:f1:44:c0:
db:2e:68:fc:69:b7:7d:5a:87:45:6e:7c:ac:e4:d1:
05:14:24:06:f4:54:60:cf:ab:40:12:22:73:60:47:
d9:97:80:02:77:f3:f5:54:a0:7c:60:6b:2a:d5:e8:
7c:0c:a0:67:da:62:51:39:4e:87:a7:5e:ef:0c:df:
b0:11:42:f5:b6:d3:b8:98:8f:f8:9f:e6:05:61:5f:
97:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:1F:66:E6:DA:54:7E:74:DE:42:B0:18:2F:D1:5D:F4:09:34:6C:76
X509v3 Authority Key Identifier:
keyid:64:E9:06:27:02:1A:DC:FA:56:24:34:2D:3E:5F:8B:48:03:5A:CF:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6e3fba-4d3a-43cb-babf-5f2882de3ec7/1/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6e3fba-4d3a-43cb-babf-5f2882de3ec7/1/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:72:4c:14:59:5c:dc:ba:24:0b:34:9b:7e:cc:ee:c8:a8:68:
1a:f8:89:a3:70:39:98:09:b6:b3:89:ff:aa:ec:7b:f2:d6:f6:
8d:05:41:0b:66:41:f3:4f:81:b0:0f:dd:e9:54:93:db:bc:90:
9e:45:e0:b2:38:ce:71:ce:ac:f1:ed:bd:b9:60:36:e2:27:57:
76:27:a1:05:79:a2:9f:37:0a:85:f8:2a:b2:90:c3:79:fa:29:
6d:b0:70:79:eb:a2:93:81:17:a8:0e:d2:93:75:76:78:52:f1:
3d:b7:55:57:09:1b:a2:a4:f9:47:05:6c:52:7e:fa:af:0e:42:
ee:b6:86:fa:84:69:ec:b2:15:fd:e9:9a:eb:b8:03:b1:55:ad:
f2:6d:2d:9b:2e:43:c5:e5:17:14:80:df:78:da:cd:c8:e1:27:
ca:98:f6:f6:43:13:e6:c4:2d:76:da:41:bc:44:7b:d3:3d:4c:
14:77:49:45:eb:7f:51:a7:6d:f8:ad:25:76:30:00:bb:8d:54:
e5:e6:46:0c:8d:92:c7:02:46:89:5b:ee:b8:ea:5b:e5:51:2d:
80:1a:7e:e2:21:92:f1:c0:3a:7d:8f:3e:c3:71:34:0b:08:2f:
75:be:0d:3b:2b:a1:c3:c4:13:17:c2:a5:82:e6:04:e5:02:f5:
b8:d5:c4:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 18:21:56 2025 by rpki-client