Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/338d33-72c6-4802-aefe-70e60edbc1e7/1/ZEZaih6OQvGmDSeBmMMgrsDz99w.mft
File: ZEZaih6OQvGmDSeBmMMgrsDz99w.mft (raw, json)
Hash identifier: F7s7MqtpDSYJMahphPEnW8JUcNskvmJ8SB2Q2Q/CDTA=
Subject key identifier: AA:B4:12:14:6D:F2:FE:80:93:D8:DB:6E:94:D9:7B:EE:FB:FC:7C:7F
Authority key identifier: 64:46:5A:8A:1E:8E:42:F1:A6:0D:27:81:98:C3:20:AE:C0:F3:F7:DC
Certificate issuer: /CN=64465a8a1e8e42f1a60d278198c320aec0f3f7dc
Certificate serial: 019A50E31837A3225D7A8A55D5A634C66AB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZEZaih6OQvGmDSeBmMMgrsDz99w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/338d33-72c6-4802-aefe-70e60edbc1e7/1/ZEZaih6OQvGmDSeBmMMgrsDz99w.mft
Manifest number: 0BDF
Signing time: Tue 04 Nov 2025 22:00:51 +0000
Manifest this update: Tue 04 Nov 2025 22:00:51 +0000
Manifest next update: Wed 05 Nov 2025 22:00:51 +0000
Files and hashes: 1: ZEZaih6OQvGmDSeBmMMgrsDz99w.crl (hash: rFChaMbkXtKgByJLYaR4DC2t8P4quR9X302UKHjtMwE=)
2: fIxoY-fKz3QLFhIfT-AmwQWcEB0.roa (hash: 6Ji4KJM6oBtjO9Pzhwf19OTNTLmIDSqTSnb+aKfxDkY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/338d33-72c6-4802-aefe-70e60edbc1e7/1/ZEZaih6OQvGmDSeBmMMgrsDz99w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/338d33-72c6-4802-aefe-70e60edbc1e7/1/ZEZaih6OQvGmDSeBmMMgrsDz99w.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZEZaih6OQvGmDSeBmMMgrsDz99w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:18:37:a3:22:5d:7a:8a:55:d5:a6:34:c6:6a:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64465a8a1e8e42f1a60d278198c320aec0f3f7dc
Validity
Not Before: Nov 4 22:00:51 2025 GMT
Not After : Nov 5 22:00:51 2025 GMT
Subject: CN=aab412146df2fe8093d8db6e94d97beefbfc7c7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:0a:e2:f6:d3:7c:a0:21:c1:08:e1:70:ed:1e:
19:4d:78:a6:62:ad:02:2e:12:49:19:d8:18:81:e8:
4d:fc:3f:cf:24:c0:fb:77:dd:3e:90:9b:6a:95:b3:
98:19:5b:30:d4:e3:9f:a7:2a:cf:26:c4:de:20:35:
a1:8d:be:ab:98:94:75:e2:82:45:cc:22:29:04:63:
4f:23:19:8d:51:b8:36:4d:46:79:95:48:45:ac:bb:
60:dd:ff:42:05:a5:c5:ca:32:95:31:38:f8:6f:f9:
55:be:74:76:5f:ed:7e:ee:32:a0:5e:a9:e5:ac:0c:
03:c6:01:ac:62:27:01:52:c1:2b:2c:fd:be:0c:ea:
54:d6:ad:c2:a3:30:3d:53:5a:91:16:ae:4f:5f:37:
85:29:68:11:2f:b7:08:72:12:42:ad:58:2e:40:7c:
c8:0f:f4:1a:2d:14:e6:5e:64:78:86:aa:34:ad:bc:
80:fa:b7:5d:11:67:22:ba:3c:00:d6:48:0d:70:8d:
2a:eb:43:3f:04:5a:db:2f:4e:2b:43:1c:82:40:35:
07:58:77:82:6e:48:8e:ab:8f:0d:77:eb:8d:dc:b3:
0f:82:a7:97:1a:a1:8c:22:a5:38:09:65:b1:08:8d:
ee:6e:61:86:fc:6a:cb:64:d7:a1:ea:94:0c:e7:41:
bb:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:B4:12:14:6D:F2:FE:80:93:D8:DB:6E:94:D9:7B:EE:FB:FC:7C:7F
X509v3 Authority Key Identifier:
keyid:64:46:5A:8A:1E:8E:42:F1:A6:0D:27:81:98:C3:20:AE:C0:F3:F7:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZEZaih6OQvGmDSeBmMMgrsDz99w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/338d33-72c6-4802-aefe-70e60edbc1e7/1/ZEZaih6OQvGmDSeBmMMgrsDz99w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/338d33-72c6-4802-aefe-70e60edbc1e7/1/ZEZaih6OQvGmDSeBmMMgrsDz99w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:c6:6c:65:bb:63:9c:e7:e4:5f:f0:26:51:5f:dd:e3:7e:3f:
5d:dc:f8:02:1b:77:4c:ec:b0:36:d3:24:a0:25:92:e5:dd:1e:
c1:a8:11:f4:e0:04:2e:92:a2:25:52:43:23:6a:2b:f7:65:0e:
0d:17:95:9e:3c:00:f6:88:67:e1:8c:0b:aa:d5:8b:42:17:64:
b7:f4:cd:d9:03:38:82:c3:ed:92:6e:14:e9:05:01:59:52:7e:
70:a4:62:26:5c:7f:05:60:3b:b8:47:c1:c8:80:09:99:36:b3:
fc:f2:ce:d3:f0:12:4b:11:cd:e8:14:07:26:58:6d:50:c2:30:
cc:54:6f:a1:40:81:69:3d:89:59:bf:97:ea:6f:52:36:bc:13:
98:00:77:de:fc:55:f3:8a:60:b3:f3:ee:f7:b6:59:56:c8:f7:
e8:96:ae:65:a2:46:24:d7:cc:f1:37:d5:a8:bb:b4:7c:d5:4f:
1e:7b:22:5c:0a:4a:ae:23:8f:cc:c8:17:ad:45:c9:31:dd:ae:
a7:5c:47:38:a0:fd:9d:86:45:46:0a:e6:72:83:9d:f3:c9:63:
a7:da:a2:a3:9a:87:72:82:a9:22:29:af:4b:f8:18:f9:06:6d:
ca:e4:20:7c:0a:7c:b0:51:04:9f:fd:9a:0e:3b:3e:91:f8:24:
d1:7f:69:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:52:39 2025 by rpki-client