Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/26e21e-db81-46c7-955a-77d315cc16aa/1/pj_zsazNggGkEWyYdXM5I0KJgB4.mft
File: pj_zsazNggGkEWyYdXM5I0KJgB4.mft (raw, json)
Hash identifier: TJIhdARBXL0DuiFTOCjm+bgLujQFjM+jWEqJHp/sPBs=
Subject key identifier: 01:3D:B1:74:40:10:35:01:B8:F9:4D:D4:8C:4D:15:46:02:24:B4:87
Authority key identifier: A6:3F:F3:B1:AC:CD:82:01:A4:11:6C:98:75:73:39:23:42:89:80:1E
Certificate issuer: /CN=a63ff3b1accd8201a4116c98757339234289801e
Certificate serial: 019A4DE1D3A79517AF937C19F27240ACE660
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pj_zsazNggGkEWyYdXM5I0KJgB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/26e21e-db81-46c7-955a-77d315cc16aa/1/pj_zsazNggGkEWyYdXM5I0KJgB4.mft
Manifest number: 05D3
Signing time: Tue 04 Nov 2025 08:00:36 +0000
Manifest this update: Tue 04 Nov 2025 08:00:36 +0000
Manifest next update: Wed 05 Nov 2025 08:00:36 +0000
Files and hashes: 1: mbvBXE7Ze3cn1Ev3k2dL5On_YTs.roa (hash: YK3JNqfED7VqhxPOSKGy2n6p5fg+7MEO42BqGf+EejI=)
2: pj_zsazNggGkEWyYdXM5I0KJgB4.crl (hash: 30hytH3gfqknIRp7Rt1v5j+r5hLqW9JDjLplVofP05U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/26e21e-db81-46c7-955a-77d315cc16aa/1/pj_zsazNggGkEWyYdXM5I0KJgB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/26e21e-db81-46c7-955a-77d315cc16aa/1/pj_zsazNggGkEWyYdXM5I0KJgB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pj_zsazNggGkEWyYdXM5I0KJgB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:d3:a7:95:17:af:93:7c:19:f2:72:40:ac:e6:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a63ff3b1accd8201a4116c98757339234289801e
Validity
Not Before: Nov 4 08:00:36 2025 GMT
Not After : Nov 5 08:00:36 2025 GMT
Subject: CN=013db17440103501b8f94dd48c4d15460224b487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:70:1f:f1:16:4a:9c:5a:dc:c6:10:b7:ef:db:
1f:b3:35:c5:92:3c:8d:ea:cc:9a:e6:a0:17:77:f2:
3e:e3:4f:e0:d8:f1:ed:d8:a8:e5:d9:e9:4f:17:ec:
ff:f0:01:98:db:4a:09:80:61:e8:cc:62:e0:fe:9b:
f6:58:b4:e2:2e:e8:8e:8b:d4:bd:c1:7a:08:a1:bd:
58:51:2a:e8:e4:55:16:6e:96:9b:fd:65:7a:f6:30:
6d:fc:b2:0b:9f:01:4d:54:8f:4f:7d:54:6a:92:ee:
93:ac:ed:ce:28:df:94:97:13:8e:9c:9c:ca:b6:b4:
4f:e1:b7:d0:2a:d8:a8:92:ea:cc:00:fa:84:ce:94:
f1:f2:64:0c:bc:4e:20:1f:f9:68:02:9e:d7:17:2c:
74:19:be:74:05:2c:18:a8:25:3a:6e:b9:1e:d1:72:
0d:ea:12:1d:45:bc:c9:34:99:36:42:15:4e:1a:fa:
43:dc:41:a3:1e:66:44:9b:83:48:82:ce:21:26:0b:
b3:2d:01:39:3c:20:b7:f9:73:dd:b6:ca:9a:e6:2a:
28:06:bd:f8:b4:54:8f:fc:0d:da:3b:d1:8b:67:26:
6c:0f:c5:0d:c8:0c:46:6d:0c:1d:4e:39:1d:9c:b6:
d6:6d:7e:56:a3:aa:71:67:4f:c0:fd:5a:c6:aa:f6:
b3:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:3D:B1:74:40:10:35:01:B8:F9:4D:D4:8C:4D:15:46:02:24:B4:87
X509v3 Authority Key Identifier:
keyid:A6:3F:F3:B1:AC:CD:82:01:A4:11:6C:98:75:73:39:23:42:89:80:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pj_zsazNggGkEWyYdXM5I0KJgB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/26e21e-db81-46c7-955a-77d315cc16aa/1/pj_zsazNggGkEWyYdXM5I0KJgB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/26e21e-db81-46c7-955a-77d315cc16aa/1/pj_zsazNggGkEWyYdXM5I0KJgB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:98:82:1d:dd:c8:26:b8:d9:e7:9f:e2:bb:88:bc:30:5c:12:
40:56:c1:f6:a2:94:ad:62:85:b9:ed:e5:72:ee:26:a8:b4:49:
99:eb:eb:c2:5e:53:fc:40:94:f5:e2:7f:01:f2:f8:41:a4:9b:
0b:b5:09:49:11:44:b5:db:0b:13:66:1d:8f:3b:c7:b2:de:21:
f7:d5:dd:f1:03:50:98:b4:6a:78:3a:f9:07:26:19:ca:63:85:
9a:66:e5:fe:f7:92:01:7f:dd:58:56:d9:96:02:9b:cb:8d:37:
51:b1:07:b1:9f:01:89:e5:4e:1a:e9:b5:7b:85:bc:1b:25:63:
b1:31:6e:e9:37:2c:0c:7b:a1:9e:40:1d:c1:6b:f2:e2:e4:b8:
08:3f:d3:67:4f:ba:0c:48:41:43:a9:16:5a:c0:40:d5:df:68:
28:8e:5a:c1:e6:ec:91:d8:e5:b0:07:26:b7:6d:9b:18:6c:a6:
33:7d:35:ec:d2:e9:5c:28:a3:fa:41:ce:fc:b3:4b:de:1e:32:
4f:1d:ed:63:58:54:65:a9:28:da:ac:70:27:4d:ef:44:da:a5:
84:86:0b:5a:cc:fd:3f:c4:e8:1c:6e:d7:a8:bc:19:4f:75:c7:
c2:00:0a:ff:af:0c:6a:9e:ff:a0:db:57:70:27:df:66:11:5c:
34:09:25:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:00:10 2025 by rpki-client