Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/ba402c-b00e-4a26-bf53-8e747e34e162/1/ZdnpJm7sq8D9SmB36wuo-p873ic.mft
File: ZdnpJm7sq8D9SmB36wuo-p873ic.mft (raw, json)
Hash identifier: WKHJzYAhlDO0fDWilBwEhn5L+a4E8b6Q8QJa+X7xAJY=
Subject key identifier: B2:F6:8E:9B:CB:F4:18:8F:AA:46:40:05:EF:4E:6D:D7:88:94:A4:4E
Authority key identifier: 65:D9:E9:26:6E:EC:AB:C0:FD:4A:60:77:EB:0B:A8:FA:9F:3B:DE:27
Certificate issuer: /CN=65d9e9266eecabc0fd4a6077eb0ba8fa9f3bde27
Certificate serial: 019A4F62D9E355D27AC504A8BA8763340E70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZdnpJm7sq8D9SmB36wuo-p873ic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/ba402c-b00e-4a26-bf53-8e747e34e162/1/ZdnpJm7sq8D9SmB36wuo-p873ic.mft
Manifest number: 1711
Signing time: Tue 04 Nov 2025 15:01:09 +0000
Manifest this update: Tue 04 Nov 2025 15:01:09 +0000
Manifest next update: Wed 05 Nov 2025 15:01:09 +0000
Files and hashes: 1: ZdnpJm7sq8D9SmB36wuo-p873ic.crl (hash: iVmXskFlC5rnrkRlg4avYWkTjA5L5N8W+DHEICFEE0M=)
2: jl2QMltgucjm6DsSRtvejzHwgVk.roa (hash: 2ICsrOX/Ng80gGFWmU3eag4CX8TEZwSeNwBpo27725Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/ba402c-b00e-4a26-bf53-8e747e34e162/1/ZdnpJm7sq8D9SmB36wuo-p873ic.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/ba402c-b00e-4a26-bf53-8e747e34e162/1/ZdnpJm7sq8D9SmB36wuo-p873ic.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZdnpJm7sq8D9SmB36wuo-p873ic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:d9:e3:55:d2:7a:c5:04:a8:ba:87:63:34:0e:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65d9e9266eecabc0fd4a6077eb0ba8fa9f3bde27
Validity
Not Before: Nov 4 15:01:09 2025 GMT
Not After : Nov 5 15:01:09 2025 GMT
Subject: CN=b2f68e9bcbf4188faa464005ef4e6dd78894a44e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:6e:ad:61:b4:ec:93:72:e4:f3:03:0d:8f:37:
dd:51:29:70:24:66:0e:a4:e2:3d:28:02:cf:40:1c:
7b:cd:a4:58:3c:1b:54:31:3b:8d:ad:3f:16:6b:52:
80:03:6c:72:84:f8:8d:ce:c9:ce:81:57:7f:a9:49:
41:7d:f3:49:53:8c:80:43:b1:1e:69:cd:ee:a4:7d:
99:91:f9:e2:94:86:11:13:7f:7d:96:d8:76:fc:d9:
91:b1:b6:22:61:0a:82:11:c7:6e:c0:30:4f:91:c7:
60:dc:54:5f:9e:c4:68:99:27:cd:a9:87:d8:47:49:
fa:f6:bc:f5:99:d8:8b:80:7d:1a:93:3c:8e:f0:99:
60:29:cf:36:55:74:d9:a4:d6:ee:e9:35:73:ca:8a:
3d:50:52:81:0f:75:83:f1:a7:06:4c:df:65:e5:d7:
95:9b:4a:85:2f:c6:f4:f0:3b:da:c0:7a:02:37:d6:
66:7a:a6:2a:cf:b7:3d:68:13:1e:2f:81:ea:09:17:
93:5f:f9:37:8f:2f:d6:11:54:0a:1a:b0:75:a1:dc:
be:0b:fe:ba:a7:cd:b9:04:76:22:38:0c:5e:e6:bf:
61:a2:49:20:09:f2:85:59:69:15:92:71:63:69:be:
f9:81:be:99:62:2d:27:8f:6a:ec:ff:34:41:1c:d0:
55:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:F6:8E:9B:CB:F4:18:8F:AA:46:40:05:EF:4E:6D:D7:88:94:A4:4E
X509v3 Authority Key Identifier:
keyid:65:D9:E9:26:6E:EC:AB:C0:FD:4A:60:77:EB:0B:A8:FA:9F:3B:DE:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZdnpJm7sq8D9SmB36wuo-p873ic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ba402c-b00e-4a26-bf53-8e747e34e162/1/ZdnpJm7sq8D9SmB36wuo-p873ic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ba402c-b00e-4a26-bf53-8e747e34e162/1/ZdnpJm7sq8D9SmB36wuo-p873ic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:18:1b:4c:6e:d4:14:a3:c3:75:16:39:96:45:aa:1b:f9:74:
40:10:c2:ed:e7:c5:22:07:68:3f:2b:e1:40:9a:fa:5c:de:41:
ee:7a:c0:2f:25:21:f7:74:9f:6e:f1:5a:54:34:4c:e3:e4:9a:
38:1f:18:b8:ff:70:ac:65:7d:80:85:7e:32:65:bb:b1:bf:6e:
cd:a3:e1:0e:8d:be:5d:3e:c9:1a:a4:83:5b:a1:ae:d7:f9:ae:
a9:f4:7b:41:97:30:e8:ad:ae:4c:2e:bc:8f:21:10:c2:e9:69:
71:17:ee:f1:a3:eb:66:b1:d6:2e:59:7f:cf:cf:f3:e9:84:e0:
b9:af:e5:56:43:86:ef:a2:7c:34:e2:f7:98:9f:d9:c9:ed:e8:
14:74:e9:49:4e:2f:22:b2:b2:35:1c:e5:23:79:75:71:8f:6b:
b9:df:43:e4:27:87:e4:71:95:22:bf:dd:83:60:07:59:02:bd:
04:05:47:35:2a:b0:82:db:59:c1:b7:89:c1:df:8b:7e:64:f7:
5b:b2:35:1b:d1:d5:c9:5f:7c:6a:17:22:ba:90:65:8d:d4:5f:
32:57:1c:d3:67:fe:f3:39:dd:2f:0c:ae:09:e9:03:22:09:68:
16:c9:04:3b:9e:07:73:a2:33:6d:44:1a:24:74:21:bb:48:f3:
d3:65:68:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:59:48 2025 by rpki-client