
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.mft
File: zx32Zn2jjleiWxlF-kDlk-Wt-gA.mft (raw, json)
Hash identifier: i8EbsFBmNFa7j6K6ZFXl7Q84C4eGx4T71PcIYaowvTM=
Subject key identifier: FE:A3:A0:91:7B:9C:89:FA:34:09:E1:D6:BC:90:C5:E2:3A:36:BB:7A
Authority key identifier: CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00
Certificate issuer: /CN=cf1df6667da38e57a25b1945fa40e593e5adfa00
Certificate serial: 019A51BEE7CD2F2BE1DE6385C931BD8E9523
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.mft
Manifest number: 0F04
Signing time: Wed 05 Nov 2025 02:00:56 +0000
Manifest this update: Wed 05 Nov 2025 02:00:56 +0000
Manifest next update: Thu 06 Nov 2025 02:00:56 +0000
Files and hashes: 1: 5ea7Hkm0SW34L_8iukOhDVRtzJ4.roa (hash: Bh3wXEj5kxu51D9giUL6vfcOwVLV+BQ8j2j4rv4c3bE=)
2: 61CGxBWFgu_6xuYgR1277EhVuzs.roa (hash: t6Nd1VjYIV20csBMiqnpmXOcSB9kKbylaX7adVu2vls=)
3: 7c8KIjSnGxKP_FSTpFh9a0C5fVE.roa (hash: R8gbeupipBj48kbjD7lgb4EsVwsAH7m0IhgzRcQdmw8=)
4: 9BUOtYErHOT5nI5nnBmuo2Xdhug.roa (hash: Rs1YqGK7wrwo+RArMme5ww//40nOwuUee+FJ/tQiW00=)
5: CKeZaw-Qsg1dwRuBfHs9k7cSkp0.roa (hash: X7vY45oxc1G+Q/eP9qyuj1KWi47wOFpcyf1QqrA/I6Y=)
6: D5NQpu5-XP7jwNLgcsTcP0-T1A4.roa (hash: F7K7cw4FjgwEqGR+eV393zGp3EyvWxLXuzKz/aV3UiU=)
7: DIU4HLo0odnNllaYW94Ugml67ao.roa (hash: elEgGwxKy2v1vcrJC1eNzcVW73q4S32+WPctUa6Z0K8=)
8: HaalQUyXvekLLFnkPZZhVXqikr4.roa (hash: XVCqv4pgA5TkYnMXtfYT+wYqQ9BP8Hx4XqIqmyrpnqM=)
9: I3Uc8V053uFj5fj5J5RtiNnfgAo.roa (hash: b0A6+wRSSjRxTpI7kD0JYl/s4YiHTAyHBtwpK4TyBS4=)
10: IDcUsurlIwrk2WfAK13tr-PGuOQ.roa (hash: AS568Huqr9TIELMxZnCn0Pucs1mbdYattJ1q0ZLCI8Q=)
11: MeLRa18cJ_Fr_vy3ERuKQLVa_0Q.roa (hash: Scu6X5cdyahgZ+2xGCs9z4LVBnY/p6cK2ML/Vi6GaqU=)
12: MiTA2g-pLC5ZITOxl98HfdnHekI.roa (hash: ajv9+oi0sq8cFKqa2qx0dulW0VzD6Ty3LJc1Y6gB5hY=)
13: MxNe7yMIRX8ebs7AVsbBiRpllSA.roa (hash: pDnjp0EQggea9pBhHKuRbHKwdSKEn82KNKgB36PKwns=)
14: NE0WcAfrm3AM0n_95V8TnkNIjoo.roa (hash: oyngUFK0MUVw4Hw/iJMJwYVrpWdijuhgrFx7ZId5pc8=)
15: Vba_vy_gwygAN2fTwJxaF4ivvBw.roa (hash: Z+9Xq0ov0lS/kdfLrxE4yAQ08sBSc/4CSrd0q0gSQrw=)
16: WxskEzg_eTHvSuEBzAA22sakZZs.roa (hash: K1rJfDbGKj9KRp/YpH3B7J7gJ4JwFgTcq0fjTVjZ8TI=)
17: Xg9_0g6AruUdP8btK8A9lf_QDLw.roa (hash: cxSEZ+jVJKv+PAN+nsq2/IV6m//3vIXQqyGSkhq450c=)
18: _H31n0VX0qjA9cl9U_c9mZ2xI1E.roa (hash: 9x5PNhcIWt5ORofTPwWxEuoMULwiuxPd2nsCtzIW4tE=)
19: _Zs7m0Z1Y90BrPP3tkPHvTJwqVk.roa (hash: mEAwbBpKFR8+vrzzxNINj1VfPPY5QI9i1nTpJQXBCrA=)
20: bEmneW6IzbBtlPPMQx-0yJ93b-w.roa (hash: 3HfO6P2h6i8rds9y/v29pBIa5L9isoyl8PZHwa6DXZk=)
21: iwfWWtgox8qcV4q-oY9df9ePkJk.roa (hash: wvZUb4xHBU3yTd72sjISxWXalHKpPByN4rolNUsyfnU=)
22: mEEWlcL66O1D2m6UzXsYcjPwHpM.roa (hash: OlSkOPCbGhpW88wg888nDOtrJj0r6KHmiNy+klmxw10=)
23: mkE0rfBz9XK1VAIoApt7LXJKNDE.roa (hash: Xre+OBBlG8debUYJtnMWBCRl/O0gB4VgCPVdhkg/XqA=)
24: mm2sLdm3Ci3nySsnIMNPJSmUyA0.roa (hash: 43TegAHBHBerogm1ABmnvKv6AvzkKlq7nZVNU15KNys=)
25: nFq8HhaaOHIxGwNGZWneSgnTDeQ.roa (hash: XcrtvYg+nckzsoLJ7c2APLoMZ/zvgXA8RQMD/XcqPuE=)
26: o_gD51WjTdSOmKxnpsPgpEBLg78.roa (hash: H7WMFNZl3PvojqlRR1S79qBLlRCJXsbv7bPNvj5FCYc=)
27: pLK7-mZXJstNxcxjt9sS_pyvO7E.roa (hash: l2czXwxJ/GmxKDcG6MEQVwlIdyFg6kzSfJH9MRzPVAY=)
28: qA60hfzIHo5QRJ_hLhIVl9p2lrY.roa (hash: nlkxnu+zDhTWvt5yhhFwQ8By8uFeDVCXgbF+abS8Yvg=)
29: wgAwgA9CWZfJlg6IK-_1FTAJDm0.roa (hash: JlkKB8e21bvqYK7kidn0kF/N+/RVOlD5ZFe2Okfz8J8=)
30: zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl (hash: qf0vijyQ7pdhUyDe7jH4TOX/ho7Q2kKPxLS1NpbO1ZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:e7:cd:2f:2b:e1:de:63:85:c9:31:bd:8e:95:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf1df6667da38e57a25b1945fa40e593e5adfa00
Validity
Not Before: Nov 5 02:00:56 2025 GMT
Not After : Nov 6 02:00:56 2025 GMT
Subject: CN=fea3a0917b9c89fa3409e1d6bc90c5e23a36bb7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:79:2f:8f:b0:d9:08:ba:0c:2e:ae:c5:50:87:
c5:03:1f:68:f5:77:18:a1:8d:8b:b5:cd:00:68:a8:
1c:09:76:20:d4:fd:74:37:d6:e8:ae:9b:b6:c1:7d:
19:ef:31:59:c7:eb:26:23:c3:6e:e8:70:ed:75:7f:
1c:23:20:29:aa:3d:19:9a:55:52:0e:e4:75:c4:f2:
10:c2:52:73:25:2b:19:90:97:9c:31:00:aa:b5:3a:
3d:e0:a3:9f:75:f6:d0:c3:71:7f:c8:16:9a:d6:08:
df:70:46:b5:49:ca:c3:a2:9a:fe:95:be:c5:3c:99:
28:db:cb:89:0f:c8:83:1f:47:13:d8:a3:dd:1e:71:
ca:8f:c6:49:6d:71:3a:86:19:9d:a7:1f:ce:88:3d:
78:bf:3a:83:08:fe:55:6c:23:dc:9d:57:3e:f9:1f:
a8:7a:c4:50:d9:90:71:e1:0b:71:5d:30:6e:e0:07:
ea:66:e1:8a:95:80:ce:05:f8:3f:f7:4e:20:4e:4b:
a5:e6:4d:70:9f:06:77:4f:3f:e0:c8:1c:28:05:aa:
fe:29:74:12:eb:0f:99:8f:3d:91:fe:06:9b:c3:6c:
7b:d7:8b:24:c4:e9:ff:60:5b:37:71:7e:7a:03:a3:
77:e8:10:8a:0b:97:b3:6d:81:ae:ae:5d:fc:99:b7:
51:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:A3:A0:91:7B:9C:89:FA:34:09:E1:D6:BC:90:C5:E2:3A:36:BB:7A
X509v3 Authority Key Identifier:
keyid:CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:66:bc:0d:a1:70:84:ad:bc:4e:4b:9b:e4:b9:ab:b7:a7:3c:
8d:fe:63:d1:d1:6d:e6:4d:c3:57:a1:90:2b:23:33:d4:5c:49:
f0:c7:8b:54:44:5a:07:c5:15:5f:66:2a:77:0d:63:9b:2c:bd:
21:7e:43:d6:5d:39:a0:c2:60:9d:10:a0:22:27:12:33:9a:b7:
90:ee:36:c6:3c:5a:83:05:78:96:91:15:dd:89:f0:3b:ce:f4:
70:1b:57:96:5f:87:7c:eb:77:af:fe:8c:23:6e:69:ba:2b:da:
3e:13:a4:28:74:29:b7:44:f3:62:cf:4a:8a:96:be:32:dc:ad:
50:ff:f2:6f:91:09:7b:cf:ae:f0:64:9a:e3:a2:eb:72:3c:27:
c3:88:57:69:d0:63:ce:79:1b:15:84:67:ae:f6:63:2f:78:60:
e2:1f:14:b4:12:5e:cf:75:19:d9:32:e3:47:e7:07:53:17:24:
fa:12:8b:2a:72:34:ff:e0:cf:b1:d9:30:bc:33:89:33:5d:af:
85:f0:75:72:59:30:5b:45:63:7c:9b:ed:6a:db:4d:55:84:87:
0d:b2:02:59:32:79:79:87:ea:f4:f0:e6:a9:48:07:6e:23:4f:
87:6d:fe:68:ee:e6:7f:c1:35:b8:cf:d0:52:ad:24:fc:01:a5:
77:70:6a:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:55:32 2025 by rpki-client