Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/299caa-8ccd-49c1-9029-8804dad780a1/1/ZM8e6QZTt7gU1rVFlJvZTd4PxqE.mft
File: ZM8e6QZTt7gU1rVFlJvZTd4PxqE.mft (raw, json)
Hash identifier: 5fIJ+1fyXcvSRQFcsYISn+y41tX/dOnBdlwKnBYp15A=
Subject key identifier: 74:CD:EA:24:68:9B:DC:7E:E2:82:3C:EA:32:80:4A:16:10:58:62:A3
Authority key identifier: 64:CF:1E:E9:06:53:B7:B8:14:D6:B5:45:94:9B:D9:4D:DE:0F:C6:A1
Certificate issuer: /CN=64cf1ee90653b7b814d6b545949bd94dde0fc6a1
Certificate serial: 019A5375D55DACFE659D2F9F15FAA2302653
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZM8e6QZTt7gU1rVFlJvZTd4PxqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/299caa-8ccd-49c1-9029-8804dad780a1/1/ZM8e6QZTt7gU1rVFlJvZTd4PxqE.mft
Manifest number: 0292
Signing time: Wed 05 Nov 2025 10:00:22 +0000
Manifest this update: Wed 05 Nov 2025 10:00:22 +0000
Manifest next update: Thu 06 Nov 2025 10:00:22 +0000
Files and hashes: 1: 6w-yXh1-tMAIvo8oiWeiA5ImsoE.roa (hash: I2XmgPmlr8AeGcV748BNU3DKlg3Epa3bbBrXS+lzrBo=)
2: ZM8e6QZTt7gU1rVFlJvZTd4PxqE.crl (hash: QawtJauQXlaUem6PvPZZNei09LF217vL+rjVRiz7q8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/299caa-8ccd-49c1-9029-8804dad780a1/1/ZM8e6QZTt7gU1rVFlJvZTd4PxqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/299caa-8ccd-49c1-9029-8804dad780a1/1/ZM8e6QZTt7gU1rVFlJvZTd4PxqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZM8e6QZTt7gU1rVFlJvZTd4PxqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 10:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:75:d5:5d:ac:fe:65:9d:2f:9f:15:fa:a2:30:26:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64cf1ee90653b7b814d6b545949bd94dde0fc6a1
Validity
Not Before: Nov 5 10:00:22 2025 GMT
Not After : Nov 6 10:00:22 2025 GMT
Subject: CN=74cdea24689bdc7ee2823cea32804a16105862a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:bc:cb:b4:c1:28:10:94:09:c3:a4:23:15:ab:
16:7f:d2:27:d2:a0:50:c0:37:aa:11:d4:50:6c:8b:
6a:87:d1:d6:5f:94:14:18:a3:8b:21:d0:bd:d3:77:
71:c8:3e:43:16:08:67:04:4a:e1:d2:5d:b1:0e:a7:
7c:fb:da:b1:92:5c:73:02:ac:2c:2a:f3:6e:7a:f1:
48:6b:54:f1:3d:e8:85:dc:b2:06:fa:b6:59:b4:ac:
32:31:a2:eb:fd:d1:b3:6d:98:61:78:a6:1f:69:ef:
64:b6:59:00:55:93:f3:66:a1:d6:a2:4a:5b:e6:e5:
01:c0:a2:f8:5e:0e:21:de:d8:9d:a0:b7:96:63:15:
03:de:86:e6:98:42:81:92:01:19:82:10:a6:5c:83:
f1:62:a2:fb:55:c7:eb:b0:1d:4b:61:36:83:2d:61:
b5:00:26:83:3f:b6:b0:f4:7a:cf:7d:84:44:20:1e:
62:94:24:14:8d:5b:9a:a0:7b:5e:ef:21:54:83:a7:
6c:ae:e5:3e:f8:12:a8:84:2a:89:52:1b:e7:d9:b9:
c1:46:e6:ab:81:8f:bf:22:bc:db:c5:31:1a:c2:1d:
9b:f1:d9:3a:25:cc:66:a7:9f:07:e7:0a:22:36:db:
10:bd:f7:96:63:aa:83:72:b2:74:a6:42:a4:3c:f7:
46:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:CD:EA:24:68:9B:DC:7E:E2:82:3C:EA:32:80:4A:16:10:58:62:A3
X509v3 Authority Key Identifier:
keyid:64:CF:1E:E9:06:53:B7:B8:14:D6:B5:45:94:9B:D9:4D:DE:0F:C6:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZM8e6QZTt7gU1rVFlJvZTd4PxqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/299caa-8ccd-49c1-9029-8804dad780a1/1/ZM8e6QZTt7gU1rVFlJvZTd4PxqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/299caa-8ccd-49c1-9029-8804dad780a1/1/ZM8e6QZTt7gU1rVFlJvZTd4PxqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:31:cf:b0:d1:a3:96:98:ae:70:92:5a:a6:a7:b6:7c:0f:59:
80:90:aa:87:3e:e4:7d:06:cf:ab:97:3e:e8:73:f3:0f:bf:7d:
ac:5a:af:02:69:0b:70:05:71:b2:68:ad:39:62:29:7a:67:9e:
80:b1:4b:54:06:0f:16:3b:f3:7b:99:6a:51:e4:16:07:2d:b7:
54:6c:60:88:91:87:5d:e5:64:48:fc:90:c8:84:51:0f:bc:ee:
91:d5:57:e5:36:5c:af:fb:a4:d8:bc:41:00:53:d2:ec:16:6e:
35:1e:17:33:16:ff:fa:f4:a2:49:8e:47:49:b3:60:c7:48:13:
b6:5f:02:eb:43:71:cd:46:73:fa:07:67:4b:7c:3b:6f:f9:d1:
1c:57:aa:92:27:82:61:7f:d2:e3:79:f4:e5:2e:4f:ae:ef:a7:
15:c7:7c:e8:fe:cb:b3:b3:ce:6d:8f:41:44:00:1e:f2:0e:cc:
f6:ab:63:1e:3c:bb:ab:71:0f:90:7d:e6:6c:ef:ce:91:47:55:
96:8d:0f:c7:fd:ce:83:92:d3:e2:97:95:5c:b4:62:97:48:11:
42:e3:af:eb:58:24:f3:9e:a8:45:f4:9f:a9:32:e7:d2:af:6a:
98:7d:f8:d0:02:60:1c:a5:22:df:03:52:1a:25:86:00:91:59:
28:a8:c4:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:57:06 2025 by rpki-client