Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/fcea85-8be1-4877-878a-ad9e1a0510b9/1/ZeuO9EGD-OOpyIenviaz8HE8E70.mft
File: ZeuO9EGD-OOpyIenviaz8HE8E70.mft (raw, json)
Hash identifier: 0OkeUKIwXpz3qcMcxtLkFdtR/KV44ZrXVx0R7dMUvNo=
Subject key identifier: AA:40:81:D4:2D:27:88:8E:A8:64:A7:DE:B1:41:F1:F7:5E:75:AC:13
Authority key identifier: 65:EB:8E:F4:41:83:F8:E3:A9:C8:87:A7:BE:26:B3:F0:71:3C:13:BD
Certificate issuer: /CN=65eb8ef44183f8e3a9c887a7be26b3f0713c13bd
Certificate serial: 019A72CAAD89535F1E829BD88A23D883B22D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZeuO9EGD-OOpyIenviaz8HE8E70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/fcea85-8be1-4877-878a-ad9e1a0510b9/1/ZeuO9EGD-OOpyIenviaz8HE8E70.mft
Manifest number: 0CDD
Signing time: Tue 11 Nov 2025 12:01:16 +0000
Manifest this update: Tue 11 Nov 2025 12:01:16 +0000
Manifest next update: Wed 12 Nov 2025 12:01:16 +0000
Files and hashes: 1: ZeuO9EGD-OOpyIenviaz8HE8E70.crl (hash: B+NH3V2oJLwzWv1s1LJI/Klwd6QYCkJb3GlaEBhQt4o=)
2: _nLH4yuuFQfyAsGvM-Hn21cXD8E.roa (hash: DfpdmgrcGh1AJupG4dykdHnlomMk4nG6aWIUzegDtp4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/fcea85-8be1-4877-878a-ad9e1a0510b9/1/ZeuO9EGD-OOpyIenviaz8HE8E70.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/fcea85-8be1-4877-878a-ad9e1a0510b9/1/ZeuO9EGD-OOpyIenviaz8HE8E70.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZeuO9EGD-OOpyIenviaz8HE8E70.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:ad:89:53:5f:1e:82:9b:d8:8a:23:d8:83:b2:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65eb8ef44183f8e3a9c887a7be26b3f0713c13bd
Validity
Not Before: Nov 11 12:01:16 2025 GMT
Not After : Nov 12 12:01:16 2025 GMT
Subject: CN=aa4081d42d27888ea864a7deb141f1f75e75ac13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:bd:18:44:7d:2a:03:a5:62:8d:ad:11:5a:3b:
7e:63:a4:d3:8c:2b:7e:bf:f4:54:81:6d:06:f2:b2:
94:38:5d:77:70:36:d3:b5:5c:9d:ae:6f:a5:84:79:
95:9b:43:e0:7b:47:d9:e6:f2:fb:2a:91:b5:ed:46:
20:c1:11:00:27:ef:c3:53:47:1f:80:c3:ee:2b:44:
60:4e:fd:63:b9:0b:4a:6d:b4:6d:22:ce:10:f1:00:
47:64:1c:68:af:05:52:31:0d:fb:48:eb:5b:ff:c0:
cc:53:5b:17:57:88:58:2d:c5:58:28:e0:1c:e4:9a:
bf:6c:4e:4c:23:22:b3:01:6e:6d:9f:66:07:71:92:
ee:fa:af:56:81:1f:ce:16:b2:86:ed:11:52:5b:91:
59:55:bf:05:48:9e:8b:1b:37:f1:ac:36:0e:97:43:
72:8a:9b:a9:f4:22:ad:6d:a0:39:89:f2:6c:b8:32:
de:74:2e:4c:60:87:82:b5:b2:a8:d8:1d:67:d4:86:
83:3c:04:24:23:18:a2:9f:41:a3:40:5e:ae:66:ac:
01:b7:8f:b2:ac:db:e7:41:cb:46:d6:49:5d:8e:14:
f1:50:d9:74:49:1f:7e:f4:25:a8:c7:3e:f8:d7:33:
f8:66:d9:40:f3:34:21:99:15:de:2b:a9:e3:a8:47:
60:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:40:81:D4:2D:27:88:8E:A8:64:A7:DE:B1:41:F1:F7:5E:75:AC:13
X509v3 Authority Key Identifier:
keyid:65:EB:8E:F4:41:83:F8:E3:A9:C8:87:A7:BE:26:B3:F0:71:3C:13:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZeuO9EGD-OOpyIenviaz8HE8E70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/fcea85-8be1-4877-878a-ad9e1a0510b9/1/ZeuO9EGD-OOpyIenviaz8HE8E70.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/fcea85-8be1-4877-878a-ad9e1a0510b9/1/ZeuO9EGD-OOpyIenviaz8HE8E70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:d3:0b:46:a8:68:b4:24:31:66:71:1a:66:47:5e:17:98:f5:
6f:f0:ef:dc:a2:ff:9f:54:e2:74:b1:ae:77:04:f4:24:7e:9d:
00:b8:05:ee:cb:6f:b9:5f:9b:d2:cb:c5:1d:93:bf:52:f5:e0:
26:71:bc:af:45:aa:0f:20:37:9e:ac:93:d2:1e:4b:87:77:71:
04:47:31:a9:a6:0f:f1:49:23:be:83:25:65:e0:93:73:5d:2a:
e3:b3:0d:76:25:8b:b3:63:89:43:f2:ae:2e:de:f2:eb:d7:11:
e0:70:00:52:f4:2c:d2:b3:0f:ba:1d:33:c8:2e:d3:18:d7:5c:
2a:c0:78:60:55:5b:e0:6f:a4:59:e8:1a:72:73:ad:be:bd:60:
6d:06:f2:34:61:9e:8e:be:1d:6a:1f:16:69:36:08:bf:38:e8:
65:dc:b1:77:bc:92:f7:f8:82:fa:7f:67:e6:07:8f:28:88:ef:
ff:af:cf:9e:d2:63:7f:f1:e5:58:68:45:af:6f:a8:36:bd:87:
f7:c3:6d:04:e7:0d:ab:2d:ea:48:42:e2:fd:a9:87:db:ec:fb:
55:6c:2f:f0:44:cc:50:c4:37:9d:39:04:e2:15:1f:93:9d:28:
09:d5:fc:7a:f2:34:4e:b2:0a:55:cb:c9:97:62:19:56:58:5a:
ab:a6:20:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:34:26 2025 by rpki-client