Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.mft
File: ZW0zxfFuPN2WCuBcgNn282_FU_I.mft (raw, json)
Hash identifier: PLDy3PON6E4Igr+S+eazuOGKPw6hMp1t6/iaGncD7us=
Subject key identifier: 09:13:56:3D:F6:5F:A9:37:93:9A:A3:0E:E0:35:56:A7:53:7C:8A:78
Authority key identifier: 65:6D:33:C5:F1:6E:3C:DD:96:0A:E0:5C:80:D9:F6:F3:6F:C5:53:F2
Certificate issuer: /CN=656d33c5f16e3cdd960ae05c80d9f6f36fc553f2
Certificate serial: 019A50077C35B82F020A43A108CDA518D70A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZW0zxfFuPN2WCuBcgNn282_FU_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.mft
Manifest number: 0B75
Signing time: Tue 04 Nov 2025 18:00:58 +0000
Manifest this update: Tue 04 Nov 2025 18:00:58 +0000
Manifest next update: Wed 05 Nov 2025 18:00:58 +0000
Files and hashes: 1: DPh5nDPtcpqJ9naux6sZ9u0Dr1s.roa (hash: YTfkEG3kyAd2IQ6e7j/lkPx7FnYmaQ7XszGFKecXlqc=)
2: ZW0zxfFuPN2WCuBcgNn282_FU_I.crl (hash: Esx48X1J+5gqNvLQOMnANr9rSe2RizIiNqzIijcvb54=)
3: hopE5nbQY5r20JQ6uaXH5JYpOWc.roa (hash: fzI2vMoCED9Ide/Md9CqSUe230wfYxn1MlpAm1WYjvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZW0zxfFuPN2WCuBcgNn282_FU_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:7c:35:b8:2f:02:0a:43:a1:08:cd:a5:18:d7:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=656d33c5f16e3cdd960ae05c80d9f6f36fc553f2
Validity
Not Before: Nov 4 18:00:58 2025 GMT
Not After : Nov 5 18:00:58 2025 GMT
Subject: CN=0913563df65fa937939aa30ee03556a7537c8a78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:57:8b:c5:a7:95:89:3c:c2:05:04:01:9b:8d:
8b:ec:a8:d3:9a:fa:f9:99:6b:b1:9e:79:b6:fe:50:
56:c2:ba:cd:25:61:d5:04:c4:12:83:56:8d:3c:e8:
6e:c3:ec:d7:85:72:cf:1e:cb:7a:a7:b7:bc:10:bc:
40:88:53:7a:76:d7:4c:7e:e3:06:7f:0b:76:25:77:
18:e4:a7:89:b5:92:6e:d4:fd:41:90:7a:21:45:a2:
57:cd:a6:63:f6:3e:24:95:41:12:5a:59:45:b9:41:
fd:44:37:8a:88:e4:51:77:ed:e7:80:5e:23:c8:91:
d4:5c:35:a5:2f:ba:cc:29:13:a4:65:99:85:30:db:
56:f0:be:63:68:fa:33:9e:18:20:c2:5f:0b:e6:b4:
23:53:58:25:50:30:c2:67:fb:bc:9a:9c:80:16:d0:
fa:ec:92:06:2c:c5:0f:8b:75:16:d2:d0:88:74:22:
e0:96:e0:17:f0:53:56:58:26:09:17:e3:ee:0d:4a:
ed:2d:23:0e:df:c0:91:03:66:1a:a6:4f:ea:e8:a1:
d4:9d:ff:df:a8:2f:21:7e:f8:1d:e9:2b:4a:17:41:
64:6b:96:b4:3c:b8:0a:a9:43:c2:a8:42:9f:9a:1b:
98:01:38:f5:fd:31:88:2c:9d:89:74:46:49:a3:dc:
1c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:13:56:3D:F6:5F:A9:37:93:9A:A3:0E:E0:35:56:A7:53:7C:8A:78
X509v3 Authority Key Identifier:
keyid:65:6D:33:C5:F1:6E:3C:DD:96:0A:E0:5C:80:D9:F6:F3:6F:C5:53:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZW0zxfFuPN2WCuBcgNn282_FU_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:0d:68:10:a7:10:08:22:ce:26:11:02:cd:24:48:0f:19:15:
e1:d8:02:e8:c1:a9:fa:57:7b:26:22:1c:c5:18:73:99:dc:a8:
5c:90:7a:a1:1f:68:7c:d3:b0:2d:2d:b6:41:c4:dd:45:60:e9:
ec:62:4f:6d:d2:e2:cc:df:37:83:bb:04:52:89:01:1d:c0:46:
e7:55:42:98:78:d4:10:c7:bd:c7:f2:a9:dd:fc:21:a1:4e:da:
78:16:67:b5:ab:a2:ab:69:a9:9b:90:80:14:70:54:c4:7f:07:
e1:28:a1:e4:34:ad:23:cf:a2:f5:78:c6:c3:5f:40:bd:46:af:
52:8c:23:19:ea:da:0a:a1:ff:f8:5c:d1:45:11:6a:83:ff:fd:
2c:04:5d:ae:30:74:b4:fa:dd:b2:15:6c:ca:94:06:9c:de:aa:
0d:fe:1a:55:a2:4c:5c:2c:4c:1b:ac:d2:49:4e:4d:fe:17:2d:
cb:b7:16:c2:56:31:bc:2e:47:d2:5f:ac:f6:cc:04:08:d8:82:
f2:2b:1e:0e:e2:8b:1e:90:f2:77:96:fd:4b:fa:92:25:b1:ea:
ea:1a:1f:e2:f5:49:9c:aa:56:e7:4f:75:db:4d:e2:e9:b8:fa:
7e:8b:27:97:bf:40:93:82:fb:42:7b:24:d7:ba:8f:a5:88:de:
cf:ea:e4:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:45:47 2025 by rpki-client