Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/ZNFx-TzBynFvyAbjalWFLN9PHBw.mft
File: ZNFx-TzBynFvyAbjalWFLN9PHBw.mft (raw, json)
Hash identifier: MamjXCKTMSNSEk9PT297SD58jm2K3MxSTtiMly9Vo5U=
Subject key identifier: BD:47:E2:8B:BE:4E:A2:37:43:26:DA:93:F4:64:3D:B9:0D:D4:0F:4B
Authority key identifier: 64:D1:71:F9:3C:C1:CA:71:6F:C8:06:E3:6A:55:85:2C:DF:4F:1C:1C
Certificate issuer: /CN=64d171f93cc1ca716fc806e36a55852cdf4f1c1c
Certificate serial: 019A4F998E84544D8A28B2D3ED06776FE132
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZNFx-TzBynFvyAbjalWFLN9PHBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/ZNFx-TzBynFvyAbjalWFLN9PHBw.mft
Manifest number: 1721
Signing time: Tue 04 Nov 2025 16:00:54 +0000
Manifest this update: Tue 04 Nov 2025 16:00:54 +0000
Manifest next update: Wed 05 Nov 2025 16:00:54 +0000
Files and hashes: 1: 4DVldFO5y9KBtzxCTr71AtgC-eU.roa (hash: sBM0L37YAXg4FUlTCLrrPugqQEHySprVmExRuh4Lv3Y=)
2: 6kPkXmlWSAQjjCwMVOC6F-rjNv0.roa (hash: sTc836fo7TkkLRKHAoIO0+HiUzTAeRmVazBYlJks2f4=)
3: ZNFx-TzBynFvyAbjalWFLN9PHBw.crl (hash: shLTPYdyPzuVpRI5u7dbGbPh3DYRK5wSCK4UTWnbxDg=)
4: _9bhuNhFLcA0HPv8bquRW0OUHTY.roa (hash: +AAi2JdNKRV5CFL7Yq+UFdnc1nHIGlMicPgKcuKxkmI=)
5: xZI_bvE6JftjTV0B3dxc_5kYW0g.roa (hash: AB1DpoviLX3AxgItOuLbSEQmOM0xIHXrb99sosPXy80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/ZNFx-TzBynFvyAbjalWFLN9PHBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/ZNFx-TzBynFvyAbjalWFLN9PHBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZNFx-TzBynFvyAbjalWFLN9PHBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:8e:84:54:4d:8a:28:b2:d3:ed:06:77:6f:e1:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64d171f93cc1ca716fc806e36a55852cdf4f1c1c
Validity
Not Before: Nov 4 16:00:54 2025 GMT
Not After : Nov 5 16:00:54 2025 GMT
Subject: CN=bd47e28bbe4ea2374326da93f4643db90dd40f4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:13:1b:f5:61:a3:7b:09:fd:2e:cb:5f:80:52:
63:01:97:26:e1:ef:79:e7:0f:3c:e9:9e:90:09:68:
5e:31:e4:58:4d:aa:8b:c3:99:8f:13:ad:a8:11:ec:
05:97:ad:cd:5b:b1:eb:5a:b0:9c:90:62:07:bc:f1:
9d:f5:5b:c2:bd:1b:7a:4b:a3:09:f1:a3:bd:b8:3a:
08:a8:18:ec:10:e7:23:b9:c4:b2:5b:16:bb:81:0a:
2b:fe:ab:a8:25:ed:95:e4:fd:ef:34:f3:82:31:c3:
fa:21:9d:9e:3e:9e:6c:42:f1:6f:a8:f2:e4:54:2a:
31:25:15:a1:d1:97:46:f2:87:3e:3f:99:ec:7b:77:
98:fe:49:57:f5:2a:2f:e2:31:d6:a5:32:04:1d:8f:
e9:07:b3:05:71:c0:85:81:c3:7c:4b:1f:2c:e8:5b:
fc:6a:d0:99:d6:57:a5:c3:1d:a5:5c:82:04:f6:a2:
4a:6d:58:10:06:8e:2d:fa:05:dd:c8:b2:a1:0f:95:
3e:cd:9c:e6:31:ca:66:d8:62:cb:9c:9f:38:73:77:
1e:23:03:94:55:b1:f4:0b:ac:00:43:6f:4e:55:04:
fe:43:81:17:21:b0:88:bb:7e:9b:48:ff:e9:67:e2:
2c:32:23:b8:d6:a2:36:ef:df:46:58:97:84:03:a2:
19:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:47:E2:8B:BE:4E:A2:37:43:26:DA:93:F4:64:3D:B9:0D:D4:0F:4B
X509v3 Authority Key Identifier:
keyid:64:D1:71:F9:3C:C1:CA:71:6F:C8:06:E3:6A:55:85:2C:DF:4F:1C:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNFx-TzBynFvyAbjalWFLN9PHBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/ZNFx-TzBynFvyAbjalWFLN9PHBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/ZNFx-TzBynFvyAbjalWFLN9PHBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:82:34:ff:7f:20:01:6d:be:fd:33:cb:c5:9c:67:0e:b1:b4:
0b:ce:4a:54:37:b7:9c:ac:5d:2c:1d:ab:4f:7f:7d:6a:7b:28:
00:d7:5b:7f:d7:94:38:3a:f9:7a:36:b1:48:62:1c:14:83:a5:
20:57:5c:ec:04:e9:ed:7e:83:e9:46:a9:11:5b:85:8f:b6:fb:
fc:6f:a0:63:d4:c8:9b:94:8a:59:9b:d8:38:63:7d:b3:a7:78:
d2:02:a5:b2:67:8a:aa:f0:96:2e:d0:cd:dd:e1:03:c2:53:b5:
00:8c:f4:61:46:37:c9:0f:fb:f7:b8:f6:69:4f:bd:2c:3e:99:
a5:d3:e6:9b:f4:01:6e:c0:9f:bf:0f:7e:a2:a5:45:98:ff:82:
bd:2a:50:65:82:49:87:bd:fe:59:b9:c9:03:51:7d:20:24:32:
07:52:31:48:35:f3:80:16:46:97:ba:d2:08:ea:d1:47:d3:d7:
f1:eb:a6:a1:69:8b:50:5f:83:9e:5b:7a:4e:78:e7:f1:29:ce:
fd:c0:2d:19:07:8b:5d:a6:2f:f3:37:f2:4a:9a:f1:6a:20:b9:
90:7e:44:f7:5d:0c:08:06:04:f8:ee:0c:52:e3:7d:99:8b:e5:
f4:61:fc:3e:89:f9:1c:25:af:f0:79:b5:8a:e1:a5:df:22:e1:
91:65:89:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:31:21 2025 by rpki-client