Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/d796e4-d654-4e7b-84d4-f01a62400821/1/ZP9Bok_EgnG5kjJ6La5aQzve0FA.mft
File: ZP9Bok_EgnG5kjJ6La5aQzve0FA.mft (raw, json)
Hash identifier: DC6ve04wvgNUXeG8ls0fkdODDhgkB7lg95ShlwYC9ds=
Subject key identifier: EA:3D:5B:F4:2C:9F:93:69:ED:C8:F2:A3:5F:B3:67:47:B4:BF:DF:EF
Authority key identifier: 64:FF:41:A2:4F:C4:82:71:B9:92:32:7A:2D:AE:5A:43:3B:DE:D0:50
Certificate issuer: /CN=64ff41a24fc48271b992327a2dae5a433bded050
Certificate serial: 019A4F2B179769712BD723BA148A9002D206
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZP9Bok_EgnG5kjJ6La5aQzve0FA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/d796e4-d654-4e7b-84d4-f01a62400821/1/ZP9Bok_EgnG5kjJ6La5aQzve0FA.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 14:00:15 +0000
Manifest this update: Tue 04 Nov 2025 14:00:15 +0000
Manifest next update: Wed 05 Nov 2025 14:00:15 +0000
Files and hashes: 1: ZP9Bok_EgnG5kjJ6La5aQzve0FA.crl (hash: RmZ1iq+4Ko7O6iG/HAhPGnHzYobnqQ8cEJlTMIXKS6Q=)
2: hQBjTq5KMkIiJgnQG8IwJwMqWkc.roa (hash: 2H6xUWWibA2OIWVz4dbFvNnKSleGcdT636P9g8q1NEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/d796e4-d654-4e7b-84d4-f01a62400821/1/ZP9Bok_EgnG5kjJ6La5aQzve0FA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/d796e4-d654-4e7b-84d4-f01a62400821/1/ZP9Bok_EgnG5kjJ6La5aQzve0FA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZP9Bok_EgnG5kjJ6La5aQzve0FA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:17:97:69:71:2b:d7:23:ba:14:8a:90:02:d2:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64ff41a24fc48271b992327a2dae5a433bded050
Validity
Not Before: Nov 4 14:00:15 2025 GMT
Not After : Nov 5 14:00:15 2025 GMT
Subject: CN=ea3d5bf42c9f9369edc8f2a35fb36747b4bfdfef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:98:5b:d4:a2:d4:82:d2:55:2c:a8:b3:f9:de:
a7:ee:fb:e7:67:3e:83:c0:4e:06:96:8f:fb:6a:e5:
12:2e:9a:eb:42:32:f5:91:81:cf:28:0a:b0:51:0c:
0b:1d:50:56:6f:d6:a8:52:c9:d4:d9:c0:4a:09:74:
76:9a:65:dc:ec:0e:72:97:a0:f4:a0:21:bf:e6:76:
c2:56:e1:1e:33:ce:c5:74:4e:38:7e:47:69:9b:60:
69:cb:9e:f1:0c:47:e9:12:66:5e:37:e6:48:41:b7:
03:b1:14:a6:27:32:5e:5b:5c:cb:ab:ca:18:1c:33:
86:4c:b2:86:16:33:77:d2:cf:86:c5:51:ba:91:34:
24:c8:ad:0f:f9:3d:83:4e:25:ad:ad:de:e5:2e:77:
a8:70:0f:df:ee:ba:aa:65:cc:0e:a2:4e:a9:f1:80:
37:42:62:b3:d9:d5:e0:09:09:96:88:cb:f8:d2:53:
5d:49:e4:3b:ed:6b:d9:6b:fc:25:60:47:a2:29:8e:
5b:98:95:01:c1:eb:e5:9d:a6:48:8e:19:d3:a6:8c:
53:d6:3f:d5:b0:d5:70:5c:8f:31:07:ab:38:ff:97:
42:ab:e2:60:9a:d7:17:98:ea:90:c2:b1:d2:26:5f:
a4:d1:e5:fe:21:58:5f:20:40:b0:be:38:2f:0a:00:
6b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:3D:5B:F4:2C:9F:93:69:ED:C8:F2:A3:5F:B3:67:47:B4:BF:DF:EF
X509v3 Authority Key Identifier:
keyid:64:FF:41:A2:4F:C4:82:71:B9:92:32:7A:2D:AE:5A:43:3B:DE:D0:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZP9Bok_EgnG5kjJ6La5aQzve0FA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/d796e4-d654-4e7b-84d4-f01a62400821/1/ZP9Bok_EgnG5kjJ6La5aQzve0FA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/d796e4-d654-4e7b-84d4-f01a62400821/1/ZP9Bok_EgnG5kjJ6La5aQzve0FA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:c1:36:cc:75:5a:e8:7d:0a:d3:69:5a:22:ac:a9:ef:2f:a5:
a1:f9:3d:d7:c0:97:b6:53:3d:51:c4:65:01:d6:ab:fd:43:4e:
1c:8e:46:87:b4:1f:c0:71:c8:7e:d2:25:bc:22:55:a1:35:d2:
99:4a:f1:37:94:f2:00:da:e2:67:f1:77:6c:09:b5:dc:8d:6c:
1f:cc:7b:17:7b:4f:27:1c:72:b4:f7:ca:6e:50:c2:ad:96:23:
51:da:e4:43:e1:01:e7:19:f7:41:07:11:f5:9e:05:d6:0f:61:
f5:b0:1b:d9:f8:f9:8a:0d:fa:90:4a:8f:f0:d6:f5:c3:c6:22:
61:43:7c:87:d4:73:71:c3:66:ca:fd:92:22:ad:9c:a5:1c:13:
51:6b:1b:40:42:bb:a1:df:27:1e:7b:89:9e:6a:4c:76:a2:b3:
ca:54:02:b2:4e:9f:00:a6:41:95:c9:15:63:4e:05:a4:c2:42:
3e:98:94:32:43:25:08:09:d5:9f:af:07:9f:99:02:37:a0:9b:
38:40:db:90:86:a7:0a:04:8d:d4:e8:ee:b1:ac:11:1e:aa:e6:
e2:da:b7:a6:18:5d:bd:c7:70:76:a8:5c:13:88:6c:27:3e:df:
9f:2e:8e:20:17:39:68:ea:af:15:b6:83:43:71:8c:b2:dd:e5:
65:a2:1d:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:33:47 2025 by rpki-client