Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.mft
File: Zw5gd5881NA9XlB4QPX6KjGmq40.mft (raw, json)
Hash identifier: hagz9nh8YBzup03ZF5er9PGABQNcCcb+jD9U+Z7nRlU=
Subject key identifier: AE:BE:E2:F9:49:D3:BD:96:32:FB:35:FF:4F:D9:27:2A:60:11:A0:0B
Authority key identifier: 67:0E:60:77:9F:3C:D4:D0:3D:5E:50:78:40:F5:FA:2A:31:A6:AB:8D
Certificate issuer: /CN=670e60779f3cd4d03d5e507840f5fa2a31a6ab8d
Certificate serial: 019A0C01D74093FAA08D89E1221895DBA68B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zw5gd5881NA9XlB4QPX6KjGmq40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.mft
Manifest number: 0549
Signing time: Wed 22 Oct 2025 13:00:38 +0000
Manifest this update: Wed 22 Oct 2025 13:00:38 +0000
Manifest next update: Thu 23 Oct 2025 13:00:38 +0000
Files and hashes: 1: Zw5gd5881NA9XlB4QPX6KjGmq40.crl (hash: Ve41WXKl5rCNWR7www/NqgJOOEDR2M1X1580m4pQL+w=)
2: diLkZSNmSkA_P0E8XAQuJwLRalg.roa (hash: vX3W6kxo/WtwtkGg1PtHgNO/NmZd0a0bM+F9+jjmaok=)
3: hy_b_CLF0gjwTvb480me2nPqxL8.roa (hash: EAu5vgl/03EK2B5mmRo4ew+mHmc1IziDDQ2bL2kVt9M=)
4: uY__ejrV3u-AYFNveYDrJ-C2JUI.roa (hash: emJilGek+vVhrXzYGkdx6N/7HgCKTKlozt7sgU5B478=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zw5gd5881NA9XlB4QPX6KjGmq40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0c:01:d7:40:93:fa:a0:8d:89:e1:22:18:95:db:a6:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=670e60779f3cd4d03d5e507840f5fa2a31a6ab8d
Validity
Not Before: Oct 22 13:00:38 2025 GMT
Not After : Oct 23 13:00:38 2025 GMT
Subject: CN=aebee2f949d3bd9632fb35ff4fd9272a6011a00b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ed:da:c8:88:8a:66:a1:d6:88:0f:f3:3f:7c:
4d:5f:bc:7a:b7:98:8d:c0:6e:58:b5:4a:6e:0c:35:
c7:11:cc:3d:0c:ba:9a:8a:e6:64:db:b8:7e:25:96:
91:ae:42:39:32:14:d4:ee:e0:91:13:02:89:79:a3:
61:39:ad:47:11:95:db:15:eb:33:f9:2a:62:2e:b1:
15:76:50:83:43:75:6f:56:d4:a0:92:d4:9c:6d:c6:
87:70:4f:4f:ea:ef:a8:d2:5d:22:91:09:05:ee:37:
21:40:c9:64:24:8f:1d:78:68:32:33:73:4e:56:67:
02:6b:5b:28:76:16:25:a2:88:54:d8:f9:29:29:b9:
be:cb:52:4c:79:93:d9:24:1e:f4:e8:2d:ec:9c:23:
16:d8:83:26:cc:a0:10:2e:02:e7:0a:3d:c7:e5:46:
2e:4f:9f:14:c7:78:1c:15:1a:93:96:61:a4:3d:df:
89:0c:1b:91:38:07:fd:1d:91:04:63:ea:42:cf:41:
d3:4a:51:3f:95:cd:43:ab:42:fe:5b:0e:37:49:9d:
af:f1:b6:fa:c5:86:d8:77:72:3d:d0:a3:60:7f:16:
d0:7e:ea:76:2f:ec:0b:b6:f2:be:18:dc:e9:32:77:
e1:20:35:6a:b6:81:e1:1a:d1:4e:46:d0:09:05:21:
a7:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:BE:E2:F9:49:D3:BD:96:32:FB:35:FF:4F:D9:27:2A:60:11:A0:0B
X509v3 Authority Key Identifier:
keyid:67:0E:60:77:9F:3C:D4:D0:3D:5E:50:78:40:F5:FA:2A:31:A6:AB:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zw5gd5881NA9XlB4QPX6KjGmq40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:ce:90:8f:d3:59:a1:78:5e:0b:5c:5d:67:fd:78:73:6b:11:
5c:d7:ce:a3:86:75:df:f2:12:b0:34:2b:4a:7d:7f:cd:95:41:
bb:0a:6e:f8:1a:f5:52:a5:4b:19:a3:cd:d5:de:ad:ba:2c:9d:
ba:a9:fb:7c:9d:fc:84:d0:a3:12:56:e7:8c:f5:8d:12:3d:d1:
30:62:5c:de:45:0e:c4:fd:05:e2:25:43:f9:87:0b:bc:b2:1f:
80:07:ef:a0:dc:18:a0:78:a7:7a:8f:00:36:3d:00:d7:68:76:
38:19:d0:94:77:6c:55:c2:56:a1:ab:57:7f:af:2e:9f:ce:19:
93:e1:4c:98:91:5f:ae:fa:7b:f2:07:6f:fa:4e:47:ce:ff:29:
da:98:0c:02:a5:9c:39:1d:9b:68:ce:ea:9a:f5:8f:d1:16:37:
ca:17:fb:0d:59:5f:ee:09:bb:1b:0d:da:a4:eb:96:c1:96:3f:
1c:13:ea:0f:ef:7b:5c:2e:5a:c9:a3:ae:ed:c5:26:e6:9c:9d:
4b:de:16:ac:e7:f7:b2:0f:2d:86:bf:66:1a:47:33:c2:0b:06:
68:71:32:e6:78:0e:c5:56:7a:e3:0d:89:7b:e2:7f:ac:60:53:
31:f7:68:62:05:bb:a4:c2:81:47:c9:29:d9:87:d8:a9:46:2f:
57:30:29:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 14:57:03 2025 by rpki-client