Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/f3b8a0-be43-44ee-8d54-85a0d1239923/1/Z4RrhMd5BRIoH4DCSBvkswpl0I0.mft
File: Z4RrhMd5BRIoH4DCSBvkswpl0I0.mft (raw, json)
Hash identifier: Xg4sJyaLIQk9s947Q3OOVNUd0GwDEJTjTt+pbpOXCQk=
Subject key identifier: 45:CE:85:50:0B:7D:24:F5:D4:54:10:BA:A3:09:72:80:31:A6:1D:3D
Authority key identifier: 67:84:6B:84:C7:79:05:12:28:1F:80:C2:48:1B:E4:B3:0A:65:D0:8D
Certificate issuer: /CN=67846b84c7790512281f80c2481be4b30a65d08d
Certificate serial: 019A71B8EC4D493EDAF25B91F9F2071B4D26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z4RrhMd5BRIoH4DCSBvkswpl0I0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/f3b8a0-be43-44ee-8d54-85a0d1239923/1/Z4RrhMd5BRIoH4DCSBvkswpl0I0.mft
Manifest number: 0637
Signing time: Tue 11 Nov 2025 07:02:15 +0000
Manifest this update: Tue 11 Nov 2025 07:02:15 +0000
Manifest next update: Wed 12 Nov 2025 07:02:15 +0000
Files and hashes: 1: Z4RrhMd5BRIoH4DCSBvkswpl0I0.crl (hash: Dg9F1MnYa5xtluRr0bcWzHvcbX6SjqSehNOvcnQ+G8k=)
2: e9CofsvHtUd9nOdIWFYukSYHblY.roa (hash: bRaoXZzCxY/+WP3cSFPKma8SeEgItuQDnpy+HQsr3lA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/f3b8a0-be43-44ee-8d54-85a0d1239923/1/Z4RrhMd5BRIoH4DCSBvkswpl0I0.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/f3b8a0-be43-44ee-8d54-85a0d1239923/1/Z4RrhMd5BRIoH4DCSBvkswpl0I0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z4RrhMd5BRIoH4DCSBvkswpl0I0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:ec:4d:49:3e:da:f2:5b:91:f9:f2:07:1b:4d:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67846b84c7790512281f80c2481be4b30a65d08d
Validity
Not Before: Nov 11 07:02:15 2025 GMT
Not After : Nov 12 07:02:15 2025 GMT
Subject: CN=45ce85500b7d24f5d45410baa309728031a61d3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d8:2f:7a:42:d2:6e:8d:ad:5e:32:e6:6d:98:
0c:4f:e6:f5:c5:f6:b1:06:1b:1c:7e:37:a3:41:d0:
bb:f4:ff:a6:fa:76:fd:31:26:10:dd:16:d2:64:98:
ae:ec:e7:50:c3:2f:4c:f9:e7:d9:43:e2:56:79:41:
04:36:c9:10:3d:a6:82:cf:5a:c2:f4:d7:df:f1:a6:
98:77:c3:f8:73:b4:dc:45:b3:64:81:9a:86:5c:77:
68:b8:e8:5c:d0:9a:9d:5a:5d:d4:c6:95:64:64:ca:
82:c4:93:08:87:2d:ec:91:1b:6d:14:fb:4f:b5:fa:
6d:d2:bc:8f:a4:4c:95:df:24:99:d4:0d:02:64:75:
c2:5d:ac:e9:93:14:6d:50:c2:46:f1:ea:99:1b:91:
ff:7b:d0:56:02:a9:de:2e:9c:5e:7b:68:08:38:62:
b0:1a:5e:5d:94:e1:e9:72:51:da:d7:06:ee:f5:71:
45:eb:4f:98:25:f3:bb:8e:01:5b:b9:a8:85:11:d4:
cf:f2:a0:d9:9b:60:1b:ed:26:24:6e:4a:ba:c9:6d:
af:0e:ad:9d:cc:6b:77:f4:2e:1e:b3:bf:00:27:73:
38:29:62:0b:6d:6a:6e:f7:86:60:64:95:07:76:fc:
39:a6:93:64:16:91:3f:7a:58:11:39:02:f3:17:cc:
b4:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:CE:85:50:0B:7D:24:F5:D4:54:10:BA:A3:09:72:80:31:A6:1D:3D
X509v3 Authority Key Identifier:
keyid:67:84:6B:84:C7:79:05:12:28:1F:80:C2:48:1B:E4:B3:0A:65:D0:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z4RrhMd5BRIoH4DCSBvkswpl0I0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/f3b8a0-be43-44ee-8d54-85a0d1239923/1/Z4RrhMd5BRIoH4DCSBvkswpl0I0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/f3b8a0-be43-44ee-8d54-85a0d1239923/1/Z4RrhMd5BRIoH4DCSBvkswpl0I0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:d3:6e:35:cb:c6:a6:85:fb:37:84:58:01:51:bb:1a:13:56:
ef:d1:ba:3a:68:b2:6d:6c:91:7e:53:84:01:c4:66:86:14:29:
49:e5:0c:1d:51:33:a8:1b:d5:85:7a:97:f3:16:84:bd:7d:2e:
e1:d9:80:ce:e8:8e:d6:17:d8:28:9d:1e:47:58:86:51:6a:5c:
dd:c2:de:7b:8e:48:50:dd:8d:2a:c0:61:8f:d7:01:8a:53:45:
6f:a6:da:2c:2d:7d:c4:0e:fb:52:73:75:d0:57:ab:4d:ef:e3:
c4:29:65:4f:87:80:8b:8f:2c:cb:f8:5e:3e:39:bb:38:c3:a0:
1d:d3:af:65:91:be:cc:77:1e:1e:8a:ed:85:e8:2b:46:85:e6:
1a:b9:91:5c:ee:2d:14:45:6e:66:d6:ac:01:18:68:8a:67:81:
03:ae:b7:e2:50:bb:7d:72:d1:a8:91:33:09:a9:de:9d:72:0c:
7b:21:b2:fd:fe:06:98:32:59:74:9d:d7:e0:38:8f:ce:79:df:
8d:53:56:0a:74:d0:ed:fa:ff:af:4f:8f:64:15:d4:76:93:c2:
45:71:67:03:ca:21:bf:86:79:c3:f6:37:3c:8a:3a:93:bf:98:
53:5c:21:04:03:f1:f1:81:f9:74:00:83:1b:0e:40:fb:6f:c8:
ff:7c:da:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:19:56 2025 by rpki-client