Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0Zk_eMrkRZqbniaJrTDwvETMZyQ.mft
File: 0Zk_eMrkRZqbniaJrTDwvETMZyQ.mft (raw, json)
Hash identifier: 7bjGZ3t/CeNTKqG1YsPKFouQV1COLAynNIDUXCDlrds=
Subject key identifier: 56:E2:38:A3:05:E5:C8:AB:B7:34:97:11:54:BC:BD:C2:9F:DD:A8:BB
Authority key identifier: D1:99:3F:78:CA:E4:45:9A:9B:9E:26:89:AD:30:F0:BC:44:CC:67:24
Certificate issuer: /CN=d1993f78cae4459a9b9e2689ad30f0bc44cc6724
Certificate serial: 019A4EF5CDA45AB84840E996E3A0449CD6A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Zk_eMrkRZqbniaJrTDwvETMZyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0Zk_eMrkRZqbniaJrTDwvETMZyQ.mft
Manifest number: 0461
Signing time: Tue 04 Nov 2025 13:02:03 +0000
Manifest this update: Tue 04 Nov 2025 13:02:03 +0000
Manifest next update: Wed 05 Nov 2025 13:02:03 +0000
Files and hashes: 1: 0Zk_eMrkRZqbniaJrTDwvETMZyQ.crl (hash: /2TM+IInjvYxvdp7hduntoFb4v2ZGzDDhB8AJ7pK7UA=)
2: 5KVSG33DPZC1TKz5q9NlgQSJY8U.roa (hash: GwSKpHIjNmK499qIKezXAfYrejsXUCWzE4VXptKGrTs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0Zk_eMrkRZqbniaJrTDwvETMZyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0Zk_eMrkRZqbniaJrTDwvETMZyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Zk_eMrkRZqbniaJrTDwvETMZyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:cd:a4:5a:b8:48:40:e9:96:e3:a0:44:9c:d6:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1993f78cae4459a9b9e2689ad30f0bc44cc6724
Validity
Not Before: Nov 4 13:02:03 2025 GMT
Not After : Nov 5 13:02:03 2025 GMT
Subject: CN=56e238a305e5c8abb734971154bcbdc29fdda8bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:40:b9:1f:6b:d0:42:1d:85:b0:8c:5a:56:22:
ac:5d:28:b8:b3:62:bd:a3:d6:60:d9:52:f1:49:d8:
1b:4c:13:af:e1:22:5c:bb:c8:31:15:09:81:af:cb:
5e:bd:20:04:1f:d7:a2:2b:3c:18:90:81:e4:0f:70:
55:e5:19:c7:a1:0c:bf:b7:29:8c:cf:8f:6a:3e:0a:
d8:81:11:c6:2f:1b:69:4d:60:e2:e5:27:d0:cf:4e:
14:26:87:e0:23:6d:29:ca:d7:c6:59:45:db:3a:c8:
61:ed:51:83:13:22:d4:19:9a:eb:71:ed:ad:32:8f:
cf:d7:8b:90:71:5a:b5:2f:dc:dc:23:bb:a5:cd:ca:
a9:3a:06:c2:b9:b4:f8:31:73:d7:57:45:a6:ef:24:
fe:d8:1e:cc:a3:27:ec:40:65:e4:3b:bf:bd:f5:7f:
ea:4e:d1:25:af:79:b9:f2:0a:80:36:47:33:da:70:
f9:d4:c0:b0:2c:c1:18:bd:11:b6:4f:b1:a7:3f:d6:
f6:ed:62:21:10:06:d0:08:c7:6a:79:3e:25:68:3b:
c2:6b:98:49:08:20:d1:81:57:36:53:a6:50:5e:6b:
58:26:84:76:0f:45:65:53:b3:33:30:60:e8:a0:a9:
9a:05:2c:8a:b2:26:45:ea:e7:2e:ef:6a:8a:15:f0:
e2:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:E2:38:A3:05:E5:C8:AB:B7:34:97:11:54:BC:BD:C2:9F:DD:A8:BB
X509v3 Authority Key Identifier:
keyid:D1:99:3F:78:CA:E4:45:9A:9B:9E:26:89:AD:30:F0:BC:44:CC:67:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Zk_eMrkRZqbniaJrTDwvETMZyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0Zk_eMrkRZqbniaJrTDwvETMZyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0Zk_eMrkRZqbniaJrTDwvETMZyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:fc:cf:a3:5e:9a:ce:a6:2b:09:0a:ba:8e:88:6a:70:c5:61:
e8:ff:6b:5f:f4:ca:80:c8:71:e0:71:17:16:9a:42:65:38:02:
2e:11:e2:2d:e7:e1:ad:d0:57:57:4c:b2:4d:6a:ef:c1:99:99:
94:4d:8a:61:06:f8:09:be:5e:d0:d4:35:5c:2a:31:c7:5a:ff:
9b:36:e1:99:3a:e7:4c:ad:59:f0:61:b2:b7:e5:ef:2c:f6:1f:
25:e0:ef:53:52:20:fe:37:8e:48:c3:e3:06:5d:75:a0:ea:b5:
90:b4:11:4d:91:44:6f:a0:06:45:8d:63:52:46:72:8d:bd:fe:
75:ca:de:1f:de:a9:3e:35:30:95:02:0a:55:9e:37:10:18:b6:
ea:62:d6:1c:61:d1:7b:53:47:51:1b:f1:2e:ba:e1:39:51:66:
6c:0c:33:ed:b8:2b:e8:2f:52:76:f9:55:d7:e9:12:de:b0:de:
c4:95:86:94:3e:ef:ad:a3:2e:b6:03:d7:3a:fc:62:99:3e:9b:
6a:b8:16:a9:d3:87:5b:f6:fb:92:51:c1:4c:97:a1:3b:b7:78:
1e:e1:49:9d:82:df:44:19:2e:bd:28:1d:12:9b:0e:8c:3a:f4:
50:59:ef:9a:61:78:c0:dd:fc:a8:e0:38:dc:e4:32:25:87:37:
81:5d:cd:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:02:28 2025 by rpki-client