Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/026ed8-ab9c-4753-9b20-2ba9d516f944/1/ZRDCbzpPrHAKx7DjSQuPoXXwitg.mft
File: ZRDCbzpPrHAKx7DjSQuPoXXwitg.mft (raw, json)
Hash identifier: tYNXLLxfzNnpk/a7w7drgYeldYTywye1B7KI93tRN5o=
Subject key identifier: FB:4D:7A:3A:F4:E5:8D:BC:D4:18:20:5F:B5:66:D5:64:3D:EE:29:77
Authority key identifier: 65:10:C2:6F:3A:4F:AC:70:0A:C7:B0:E3:49:0B:8F:A1:75:F0:8A:D8
Certificate issuer: /CN=6510c26f3a4fac700ac7b0e3490b8fa175f08ad8
Certificate serial: 019A51BE5528F7DC793871EF115EE0C50739
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZRDCbzpPrHAKx7DjSQuPoXXwitg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/026ed8-ab9c-4753-9b20-2ba9d516f944/1/ZRDCbzpPrHAKx7DjSQuPoXXwitg.mft
Manifest number: 1711
Signing time: Wed 05 Nov 2025 02:00:19 +0000
Manifest this update: Wed 05 Nov 2025 02:00:19 +0000
Manifest next update: Thu 06 Nov 2025 02:00:19 +0000
Files and hashes: 1: ZRDCbzpPrHAKx7DjSQuPoXXwitg.crl (hash: ZyvRfrtgOzFvf2PtpQ9TsHaLZV3f89h4lUy8wovB3Y4=)
2: y6XKa07TTPMFsjvwx8e568cVXPU.roa (hash: C/iy2HFJBUXxZmfuDRQqFLZ88BpL9CevYMYDHGoS6P4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/026ed8-ab9c-4753-9b20-2ba9d516f944/1/ZRDCbzpPrHAKx7DjSQuPoXXwitg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/026ed8-ab9c-4753-9b20-2ba9d516f944/1/ZRDCbzpPrHAKx7DjSQuPoXXwitg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZRDCbzpPrHAKx7DjSQuPoXXwitg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:55:28:f7:dc:79:38:71:ef:11:5e:e0:c5:07:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6510c26f3a4fac700ac7b0e3490b8fa175f08ad8
Validity
Not Before: Nov 5 02:00:19 2025 GMT
Not After : Nov 6 02:00:19 2025 GMT
Subject: CN=fb4d7a3af4e58dbcd418205fb566d5643dee2977
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1f:61:22:5c:ca:d2:07:24:0c:18:eb:d8:99:
af:fa:66:66:cd:02:d4:79:5c:79:22:08:57:41:07:
ff:32:80:12:f6:65:08:fb:b0:36:74:1b:dc:d6:1d:
3c:80:7f:6c:e4:58:b0:88:43:5c:b0:df:4e:b0:24:
1f:db:c5:f5:d4:15:62:df:9a:61:3a:f1:61:d2:d0:
2e:9d:c7:14:30:61:53:24:48:db:c6:18:23:ec:7c:
10:be:3c:fb:1a:f3:12:ad:ac:7b:e9:10:d0:f8:94:
d2:68:83:84:8d:be:5b:31:82:e8:73:23:1f:dd:42:
56:8d:32:c6:5c:2f:ea:5f:df:49:be:46:f8:2d:3d:
ae:b9:f1:3d:46:85:35:19:2f:f6:09:5e:7e:f5:0a:
ae:cb:6f:a0:4e:a2:e9:0e:f9:9b:73:89:ad:39:e4:
f6:88:39:7a:2d:0b:c8:1c:74:f0:7f:31:28:e3:8d:
1e:03:75:8d:0f:30:8f:97:c9:bb:f9:d7:b7:3c:ac:
15:4d:f9:3e:35:d2:73:f6:71:a4:f0:33:bb:5f:9b:
61:8f:a2:2d:11:b0:bf:8d:56:6b:eb:71:69:38:c9:
52:cf:b5:87:09:2d:df:46:f5:3e:58:84:90:b6:c8:
a7:f4:c7:e5:6f:ef:d6:bb:18:6d:39:85:e9:b2:50:
16:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:4D:7A:3A:F4:E5:8D:BC:D4:18:20:5F:B5:66:D5:64:3D:EE:29:77
X509v3 Authority Key Identifier:
keyid:65:10:C2:6F:3A:4F:AC:70:0A:C7:B0:E3:49:0B:8F:A1:75:F0:8A:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRDCbzpPrHAKx7DjSQuPoXXwitg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/026ed8-ab9c-4753-9b20-2ba9d516f944/1/ZRDCbzpPrHAKx7DjSQuPoXXwitg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/026ed8-ab9c-4753-9b20-2ba9d516f944/1/ZRDCbzpPrHAKx7DjSQuPoXXwitg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:db:30:32:28:66:d7:a5:16:74:0b:6f:da:67:b5:b5:d8:44:
dc:51:a2:21:e6:7f:14:d1:80:f3:36:7e:ee:73:b9:50:33:76:
b0:8a:50:a9:aa:fc:1e:66:39:48:02:bd:ca:24:c7:fd:08:08:
bd:da:8e:a2:c2:77:1d:14:8e:4a:21:1f:f3:09:24:31:7d:a6:
3f:ad:fb:b1:2d:4b:68:e8:fb:28:29:fe:49:92:18:39:e5:30:
40:7a:51:0f:4c:e9:3e:de:d9:0c:6a:71:05:29:0e:1f:7b:9f:
8a:fc:c5:5d:5d:19:a1:4e:28:27:32:33:c3:69:92:c1:fd:1e:
b3:40:4e:82:ef:90:30:1b:bc:25:c3:85:34:bf:ef:25:20:1f:
92:76:fa:e3:25:0b:aa:bc:37:a1:cb:9e:c5:fb:31:f7:7d:f7:
93:85:21:0b:d5:d2:b9:e0:7d:44:ba:e5:22:e9:57:c3:37:6d:
41:4e:a6:a6:40:4f:eb:4f:6e:f7:dd:b3:37:aa:e2:56:64:c2:
2e:86:60:37:63:ec:d9:f2:90:00:af:9f:f0:66:38:0c:cd:fb:
8c:8a:bf:18:0c:5d:10:69:31:b9:05:f9:23:df:a3:d6:6d:d8:
83:31:bd:c0:e2:97:c2:72:73:66:07:76:97:62:03:69:68:40:
40:74:c2:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:19:09 2025 by rpki-client