Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cf7d5c-04a5-48a7-b8c6-37a442e65f18/1/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.mft
File: ZKmFbbGrOyTwnpy5J0N2hmgwFBE.mft (raw, json)
Hash identifier: 7O6VXRehsOSbps9fZw+3iq7jhjGiUBx97fSc2cTtw/0=
Subject key identifier: 74:91:FE:70:3A:1B:89:51:D6:3A:54:0F:6A:51:76:3D:22:B4:DB:C3
Authority key identifier: 64:A9:85:6D:B1:AB:3B:24:F0:9E:9C:B9:27:43:76:86:68:30:14:11
Certificate issuer: /CN=64a9856db1ab3b24f09e9cb92743768668301411
Certificate serial: 019A4FD0260717EEB204180ED8860E91C968
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cf7d5c-04a5-48a7-b8c6-37a442e65f18/1/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.mft
Manifest number: 1317
Signing time: Tue 04 Nov 2025 17:00:32 +0000
Manifest this update: Tue 04 Nov 2025 17:00:32 +0000
Manifest next update: Wed 05 Nov 2025 17:00:32 +0000
Files and hashes: 1: ID_lbNPN5Y-E-d8mbQhTW4YaucM.roa (hash: pqF3+TVfZVLtWeeY0X/7rX4dAra1r0f5BNTNZcfYgyw=)
2: ZKmFbbGrOyTwnpy5J0N2hmgwFBE.crl (hash: iWrHZ/FrExYMgAGys4HcZy8lMNxHFjjB+zqobimBBPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/cf7d5c-04a5-48a7-b8c6-37a442e65f18/1/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/cf7d5c-04a5-48a7-b8c6-37a442e65f18/1/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:26:07:17:ee:b2:04:18:0e:d8:86:0e:91:c9:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64a9856db1ab3b24f09e9cb92743768668301411
Validity
Not Before: Nov 4 17:00:32 2025 GMT
Not After : Nov 5 17:00:32 2025 GMT
Subject: CN=7491fe703a1b8951d63a540f6a51763d22b4dbc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d6:a9:40:e8:00:4f:98:6b:9e:1d:e6:98:90:
a2:fc:52:1e:81:e1:70:67:c8:ff:f1:28:7b:b5:48:
66:bf:bb:5e:5e:cb:89:32:4b:3b:fa:0d:ec:28:0d:
63:17:05:86:51:28:01:b6:9b:83:1e:9c:c9:4e:81:
e4:e8:27:ce:cf:55:43:86:93:31:27:21:34:4a:a9:
b5:76:df:e1:94:d2:b7:61:4a:40:92:60:f2:b7:bb:
2f:d4:8e:43:e0:80:6f:b3:1a:16:6f:e7:8c:ac:5f:
dc:17:9d:ed:23:75:7b:a4:24:53:5a:bf:dd:3f:ad:
cb:1f:c2:1f:30:ad:dc:48:08:65:b0:85:f2:88:9e:
5c:c9:70:52:cb:56:d5:66:9b:7b:97:7b:57:b2:c6:
a8:5f:40:01:7b:0f:64:8d:0d:ae:37:0b:fd:36:ff:
f4:f9:5b:39:5a:27:8b:8a:72:6e:fb:8e:f4:69:6b:
e5:bf:fd:cc:25:16:05:75:16:9d:4e:ed:a7:1a:9b:
69:78:67:b3:8b:62:7c:0d:1e:2a:2c:9b:75:9e:0f:
63:a3:bd:1a:8b:89:51:4a:84:20:45:d0:0e:17:f7:
b3:67:aa:a9:26:1e:10:b6:79:2e:7f:df:79:bc:8b:
9c:f6:a8:d5:b4:24:4c:9b:56:76:de:b5:16:6f:e6:
a0:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:91:FE:70:3A:1B:89:51:D6:3A:54:0F:6A:51:76:3D:22:B4:DB:C3
X509v3 Authority Key Identifier:
keyid:64:A9:85:6D:B1:AB:3B:24:F0:9E:9C:B9:27:43:76:86:68:30:14:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cf7d5c-04a5-48a7-b8c6-37a442e65f18/1/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cf7d5c-04a5-48a7-b8c6-37a442e65f18/1/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:74:38:54:51:c7:a9:c4:c6:f8:eb:20:51:0a:f3:97:61:ee:
13:44:d2:d6:62:e3:36:b7:13:a4:4b:71:92:c6:43:34:c7:9f:
cf:5c:2b:25:a9:c8:04:50:91:6c:32:a7:7c:27:c3:ab:fa:cb:
61:00:eb:f2:14:80:4a:4c:e5:54:63:8f:17:40:14:d1:2c:35:
e9:95:a3:6c:a0:b5:ba:50:dc:9d:3b:4a:e0:b8:ce:b7:24:65:
dd:53:d3:dc:b3:26:fb:14:3c:4d:b7:d7:4d:b9:b1:e8:d2:a8:
74:7c:93:4e:b3:2c:80:e7:6e:78:ca:ee:cd:41:85:f5:d3:c9:
64:35:7d:2e:1e:c2:1d:ba:e5:5a:92:a5:c4:bd:36:66:bf:38:
18:9b:de:7c:2c:39:3a:c1:20:59:2c:1f:af:27:32:bf:e1:0c:
bf:88:6b:0b:0d:13:bc:25:a6:4d:a9:25:bd:df:0b:c4:17:b3:
05:15:85:a7:4a:dd:6f:4d:06:dc:4e:34:0d:24:62:46:ab:84:
9a:10:6e:98:8f:c1:da:34:08:5c:9b:93:2b:04:f8:c0:e2:9b:
55:18:45:c9:ac:39:56:67:6b:6d:76:c6:8f:d1:6d:86:c0:ff:
d6:c0:22:17:b4:63:8b:46:3f:8e:23:57:8d:42:df:7e:47:88:
17:4f:6f:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:32:42 2025 by rpki-client