Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/763921-3cd7-466b-864b-188c4a78cd62/1/ZmJmIwhObPEWZ0o_0KmVHKwN7cA.mft
File: ZmJmIwhObPEWZ0o_0KmVHKwN7cA.mft (raw, json)
Hash identifier: DShfB3SK7p6RaKDqNE/rcq8OtMbrPtu5TnjxwAVanpI=
Subject key identifier: 72:20:C3:71:C8:58:7A:6F:02:D8:0C:BC:00:03:29:EB:29:71:04:28
Authority key identifier: 66:62:66:23:08:4E:6C:F1:16:67:4A:3F:D0:A9:95:1C:AC:0D:ED:C0
Certificate issuer: /CN=66626623084e6cf116674a3fd0a9951cac0dedc0
Certificate serial: 019A4FD089C772F0AF04FDB3507D29516A60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZmJmIwhObPEWZ0o_0KmVHKwN7cA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/763921-3cd7-466b-864b-188c4a78cd62/1/ZmJmIwhObPEWZ0o_0KmVHKwN7cA.mft
Manifest number: 14ED
Signing time: Tue 04 Nov 2025 17:00:58 +0000
Manifest this update: Tue 04 Nov 2025 17:00:58 +0000
Manifest next update: Wed 05 Nov 2025 17:00:58 +0000
Files and hashes: 1: CvkJme1LUR6Yylremh6T0ANylCI.roa (hash: 5zy6xol1m9FQbb/9TEgVPc4ZpyQ53XwKiYadQ98VX1U=)
2: ZmJmIwhObPEWZ0o_0KmVHKwN7cA.crl (hash: 57ULwp3UldWG2Ablr2R4asFCa9WeXfWofK1uANUAaJU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/763921-3cd7-466b-864b-188c4a78cd62/1/ZmJmIwhObPEWZ0o_0KmVHKwN7cA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/763921-3cd7-466b-864b-188c4a78cd62/1/ZmJmIwhObPEWZ0o_0KmVHKwN7cA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZmJmIwhObPEWZ0o_0KmVHKwN7cA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:89:c7:72:f0:af:04:fd:b3:50:7d:29:51:6a:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66626623084e6cf116674a3fd0a9951cac0dedc0
Validity
Not Before: Nov 4 17:00:58 2025 GMT
Not After : Nov 5 17:00:58 2025 GMT
Subject: CN=7220c371c8587a6f02d80cbc000329eb29710428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e4:53:ab:ce:35:ba:12:30:0f:00:b8:89:ac:
3a:11:73:0d:25:e4:12:a9:2b:84:a0:67:d9:5d:92:
1f:d2:03:64:70:72:96:72:4d:75:88:88:64:f6:3f:
7c:1a:d5:b9:de:06:d2:12:d3:d7:78:e0:85:a4:39:
92:9c:6f:3c:16:91:83:09:22:fc:c0:6f:33:78:3a:
47:21:82:50:72:5b:b0:d7:05:40:b8:da:6c:80:f9:
f6:e8:86:6d:23:c5:f1:13:8e:17:26:2a:46:ab:0e:
64:3f:06:79:d7:8c:3b:e2:4e:dc:a3:da:94:d8:73:
0f:e8:76:74:74:14:d0:2c:63:96:76:7a:9c:0a:f8:
cc:fd:70:1a:0d:2b:c0:6f:1e:b7:98:b5:7f:ba:7b:
87:c1:c7:e8:2f:c4:bf:89:77:93:de:55:59:d1:ba:
60:21:50:f9:4c:41:f6:f2:53:63:d8:42:8e:26:e9:
ac:c0:47:0f:58:d0:c7:a2:d8:2f:ee:e9:ae:cb:41:
5c:23:3f:6f:50:09:99:bf:02:d7:18:24:7e:ab:51:
0c:4f:e3:4c:92:d2:25:4d:d1:66:90:75:dd:79:cb:
de:e7:e3:2d:ef:76:39:8e:4c:ef:11:3e:84:3f:e4:
a7:53:43:75:ca:a3:ac:8a:2a:ea:6e:6e:7a:29:78:
fb:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:20:C3:71:C8:58:7A:6F:02:D8:0C:BC:00:03:29:EB:29:71:04:28
X509v3 Authority Key Identifier:
keyid:66:62:66:23:08:4E:6C:F1:16:67:4A:3F:D0:A9:95:1C:AC:0D:ED:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmJmIwhObPEWZ0o_0KmVHKwN7cA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/763921-3cd7-466b-864b-188c4a78cd62/1/ZmJmIwhObPEWZ0o_0KmVHKwN7cA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/763921-3cd7-466b-864b-188c4a78cd62/1/ZmJmIwhObPEWZ0o_0KmVHKwN7cA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:ce:32:a7:52:5c:08:a7:89:a8:b8:44:85:55:65:fb:c7:d6:
9b:7a:b4:2b:96:f4:7e:83:2e:d5:d1:5d:d6:b7:cf:89:c1:50:
da:8b:ed:f9:56:2b:c6:f5:7f:95:1c:c9:54:6f:0a:a9:e3:ed:
29:8c:4f:58:e6:23:9b:e9:39:a7:61:1b:47:c4:7a:89:1f:c6:
31:7c:bb:de:ab:30:9f:26:fb:2c:ab:db:8e:54:5d:2b:6c:60:
1c:17:de:9d:25:e8:10:6b:db:8d:5c:29:26:1f:f0:ce:5a:b5:
b8:c8:2b:1d:99:02:25:0e:a1:4c:e5:e5:a1:ff:70:07:cc:4a:
33:86:84:a6:ea:ed:14:a2:df:c9:a3:f4:c6:f9:cb:98:d1:ec:
3d:7b:37:9d:e7:e0:c2:6b:5c:66:16:42:a9:46:ca:3f:6f:a2:
c1:6d:30:f7:ba:39:6d:c0:5b:07:b3:bd:7d:b5:b7:14:11:91:
14:59:ff:81:56:1c:f2:82:0e:08:98:0a:da:ac:98:01:19:13:
c0:90:96:8c:55:43:c8:d6:9b:3a:64:a6:87:d4:e5:03:20:0a:
0d:d6:77:3c:d5:01:2c:a4:43:7e:2a:07:1e:93:1b:63:9e:8b:
4a:12:0f:37:54:40:82:7e:1e:9c:59:9f:2f:58:64:75:04:0c:
8f:04:13:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:20:22 2025 by rpki-client