Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/6a6b22-fe67-4202-ac94-51ad00e54332/1/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.mft
File: ZLWa5SGVLaVeA_d5uIUDHAyAnPk.mft (raw, json)
Hash identifier: +kWzn2tbD0waELiMah2yq66XhtwZpOfLMITUXj9iUjo=
Subject key identifier: 33:52:D6:A0:BA:9B:2B:9C:34:77:7D:2F:92:DB:69:47:77:D9:EC:B7
Authority key identifier: 64:B5:9A:E5:21:95:2D:A5:5E:03:F7:79:B8:85:03:1C:0C:80:9C:F9
Certificate issuer: /CN=64b59ae521952da55e03f779b885031c0c809cf9
Certificate serial: 019A70A4FD8B1D13A7AE439EA795FE6AA8EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/6a6b22-fe67-4202-ac94-51ad00e54332/1/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.mft
Manifest number: 1085
Signing time: Tue 11 Nov 2025 02:00:52 +0000
Manifest this update: Tue 11 Nov 2025 02:00:52 +0000
Manifest next update: Wed 12 Nov 2025 02:00:52 +0000
Files and hashes: 1: 1M6uqQrJ-H8cZQtvFA1H52Pn6A4.roa (hash: nnfKaOcFHds8X3AM+jMxIYq03nNPy9Dlqx+6UDoHZiY=)
2: GKsMg22mlpLXCVq6Bfh92-dR9A0.roa (hash: vyV6Le4sH8oc7qh9Fe3hr94CnSdMfMjPQP6XmVQxrGc=)
3: ZLWa5SGVLaVeA_d5uIUDHAyAnPk.crl (hash: qllD9IJ1L5wXSSYa8qE2y7w1IDlK2CP0/I8wsTFQO/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/6a6b22-fe67-4202-ac94-51ad00e54332/1/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/6a6b22-fe67-4202-ac94-51ad00e54332/1/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a4:fd:8b:1d:13:a7:ae:43:9e:a7:95:fe:6a:a8:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64b59ae521952da55e03f779b885031c0c809cf9
Validity
Not Before: Nov 11 02:00:52 2025 GMT
Not After : Nov 12 02:00:52 2025 GMT
Subject: CN=3352d6a0ba9b2b9c34777d2f92db694777d9ecb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:cc:ee:bd:cc:5e:dd:07:64:ce:2e:b0:ee:39:
5c:21:d2:0e:7d:ec:42:37:af:70:79:97:50:cc:1d:
91:fa:e2:2d:fa:fc:1e:31:a4:66:79:8c:66:ff:bc:
8a:f8:99:e2:75:69:32:a0:1b:6d:97:b5:0d:8d:4b:
c5:40:eb:f7:7b:a5:b6:f1:1a:1d:43:01:4a:f1:70:
a2:75:76:54:3c:14:1c:4f:c3:fc:86:30:4e:e3:0e:
37:22:6b:88:53:9e:3e:f0:f8:a0:5e:af:01:27:3a:
a8:5c:cd:7c:e0:c6:5a:d7:99:90:72:8f:3b:c3:6e:
07:d4:ca:63:21:15:64:e2:e6:4f:f2:29:0b:80:27:
fe:a5:cc:70:cf:b6:72:6d:fb:84:ab:dc:7d:d4:8e:
ec:29:08:76:14:8c:50:eb:04:66:35:10:5f:52:6f:
b9:19:f9:1d:5a:04:8e:27:85:0f:01:78:07:c7:c5:
de:eb:a5:f0:5b:8b:53:e7:12:f8:8e:e3:a6:2c:47:
98:2a:49:ec:fb:b2:31:a3:52:1c:f4:e6:1a:97:98:
ab:cd:fa:98:4d:84:17:9e:e2:3c:63:ec:a5:ba:05:
37:25:0f:c8:14:b5:8c:68:3e:61:f4:de:52:80:19:
63:e7:66:ee:24:16:64:b6:b4:a9:87:32:ec:71:b0:
f4:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:52:D6:A0:BA:9B:2B:9C:34:77:7D:2F:92:DB:69:47:77:D9:EC:B7
X509v3 Authority Key Identifier:
keyid:64:B5:9A:E5:21:95:2D:A5:5E:03:F7:79:B8:85:03:1C:0C:80:9C:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/6a6b22-fe67-4202-ac94-51ad00e54332/1/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/6a6b22-fe67-4202-ac94-51ad00e54332/1/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:d5:61:3a:bd:ec:b8:82:e2:46:44:fe:7a:a0:84:6e:53:9a:
77:79:92:62:d8:ab:da:48:06:24:e8:82:ad:6b:61:50:14:d4:
03:3a:b1:e7:13:48:6f:d2:4f:81:69:27:fa:f5:69:85:3e:82:
2c:9a:84:5c:c2:50:be:88:22:03:90:a5:b8:8b:30:71:f6:f1:
b5:9c:6f:c6:b0:e6:96:52:7e:8e:9a:37:a6:53:9a:6e:b8:87:
29:cc:fd:14:e7:1e:f3:c0:a5:c4:c6:fb:69:f6:62:f4:99:57:
14:3b:44:63:8e:a0:c9:5e:2b:a6:03:ca:b9:88:28:c2:23:e4:
84:09:25:dd:dc:ad:85:7c:c3:a1:41:c9:68:f9:2f:05:21:56:
da:3f:24:34:66:1e:38:85:da:43:dc:0d:ec:e3:18:18:d8:aa:
77:ba:ab:23:23:98:1c:c4:9b:03:04:d9:54:ac:2b:c5:85:07:
ff:91:75:a4:48:66:a3:3d:ce:2b:53:ca:e0:0f:a3:c3:3c:98:
cf:3d:88:3a:da:ee:17:9e:aa:7c:4c:2d:d9:3c:1d:ed:73:25:
50:4c:74:cc:0d:9d:b1:58:ee:44:d4:41:0f:ba:85:f8:8d:d8:
40:e0:12:ef:ec:3c:37:47:ae:88:90:f1:4a:8f:cb:24:43:8e:
09:a5:88:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:53:40 2025 by rpki-client