Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/ZCurhFmUi3l0dkjhPpm50KWCUGo.mft
File: ZCurhFmUi3l0dkjhPpm50KWCUGo.mft (raw, json)
Hash identifier: eRucs2SLXTRsB6NeM5kUFzfCoNGDZIr663usoJhm3TE=
Subject key identifier: 52:C4:6E:B3:4E:68:AD:A5:00:C4:C4:9D:B8:01:4F:5E:F7:24:17:79
Authority key identifier: 64:2B:AB:84:59:94:8B:79:74:76:48:E1:3E:99:B9:D0:A5:82:50:6A
Certificate issuer: /CN=642bab8459948b79747648e13e99b9d0a582506a
Certificate serial: 019A4E868BE9019F9DCC061DDEC410638529
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZCurhFmUi3l0dkjhPpm50KWCUGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/ZCurhFmUi3l0dkjhPpm50KWCUGo.mft
Manifest number: 0A76
Signing time: Tue 04 Nov 2025 11:00:31 +0000
Manifest this update: Tue 04 Nov 2025 11:00:31 +0000
Manifest next update: Wed 05 Nov 2025 11:00:31 +0000
Files and hashes: 1: ZCurhFmUi3l0dkjhPpm50KWCUGo.crl (hash: t/5QUHyax5u4ajzJpfmpY484iOl0d5o960uzFiwcAgU=)
2: paYy_Hhxnm4PBAs2Lf2_YVwZO6U.roa (hash: ATfmnjPDFCrMSy8LdJNeeiWeAqOBvNXLV0H5uqzb3IU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/ZCurhFmUi3l0dkjhPpm50KWCUGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/ZCurhFmUi3l0dkjhPpm50KWCUGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZCurhFmUi3l0dkjhPpm50KWCUGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:8b:e9:01:9f:9d:cc:06:1d:de:c4:10:63:85:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=642bab8459948b79747648e13e99b9d0a582506a
Validity
Not Before: Nov 4 11:00:31 2025 GMT
Not After : Nov 5 11:00:31 2025 GMT
Subject: CN=52c46eb34e68ada500c4c49db8014f5ef7241779
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:6c:28:dc:00:b7:48:f9:c4:22:fc:59:78:16:
b8:92:2c:ed:e9:3c:7f:91:c2:bb:76:38:b3:e8:af:
51:42:c3:e2:b8:a6:29:a6:6e:1d:a2:76:e3:27:50:
db:01:35:62:13:3c:48:eb:24:aa:52:7d:03:b1:40:
25:d6:e7:ad:32:81:e2:b9:2b:f2:50:8d:99:e9:54:
ad:7f:b2:cf:10:39:d1:f6:53:33:da:ad:8b:fe:45:
c6:40:f7:26:b7:49:6d:5a:8b:f2:e5:4f:4c:e1:42:
32:69:95:9f:3e:01:74:77:c3:c0:dc:23:b5:d3:ae:
24:67:ce:12:78:98:ad:a4:8f:56:bb:16:89:60:a7:
dc:85:2e:31:2e:75:89:d7:2c:c2:3e:37:cd:c0:5e:
e8:b8:85:01:56:3f:46:74:88:d9:bd:91:91:07:e1:
15:f9:67:12:82:be:5b:c7:bd:f2:90:29:25:09:6c:
b6:e2:6c:8a:bb:54:26:a5:7d:d4:de:37:37:7a:f1:
69:35:da:9b:6e:d7:4b:f0:44:12:66:5e:ff:8c:37:
8b:d3:91:6e:e9:6a:c6:60:14:75:82:b4:d0:ab:9f:
13:f3:ec:b2:10:d3:3c:a8:8b:36:e6:c0:a5:3b:32:
96:10:9d:a5:ec:61:e7:c8:9c:ba:5b:9e:9c:ad:06:
26:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:C4:6E:B3:4E:68:AD:A5:00:C4:C4:9D:B8:01:4F:5E:F7:24:17:79
X509v3 Authority Key Identifier:
keyid:64:2B:AB:84:59:94:8B:79:74:76:48:E1:3E:99:B9:D0:A5:82:50:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZCurhFmUi3l0dkjhPpm50KWCUGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/ZCurhFmUi3l0dkjhPpm50KWCUGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/ZCurhFmUi3l0dkjhPpm50KWCUGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:fd:0e:49:b7:ab:6f:58:41:30:c3:35:ba:c5:30:4a:00:99:
1f:87:30:65:a4:f3:d9:27:7a:85:c2:01:b0:9a:6f:1c:f9:1c:
f8:82:8e:d1:1a:5f:18:9c:0e:66:0a:64:eb:7c:74:d6:d4:58:
f8:cb:6f:35:88:8c:d4:1c:16:dc:41:87:41:16:be:53:98:03:
b6:18:93:ea:d3:74:4d:44:2d:b8:22:b9:7f:78:8f:f2:c1:16:
41:5a:73:ec:09:cd:6e:30:6d:fe:58:88:24:a1:de:76:5c:d7:
0d:e2:ec:a7:6a:39:f6:63:dd:d5:f8:88:55:32:e0:05:7d:6d:
f0:42:54:90:80:65:e5:e2:3e:03:09:3a:02:8a:cc:f2:a9:b5:
bc:3f:ba:86:2e:01:cc:40:55:80:c7:4b:56:b1:8b:c6:9c:b0:
ab:9a:49:c1:89:48:e6:65:14:f6:6b:8d:7b:d0:80:c0:bd:24:
49:a8:1c:a7:d0:ce:78:0e:82:ed:2d:67:0a:81:f8:70:d2:03:
81:72:4f:25:12:34:4a:cc:db:54:7d:64:0b:3b:79:23:14:9f:
8f:eb:e9:9e:e7:38:d9:95:90:da:0c:42:00:bd:74:1f:80:e1:
b4:78:5a:f3:50:af:53:ec:b2:df:70:39:00:5b:04:3b:6e:d4:
05:95:2d:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:53:29 2025 by rpki-client