Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/307be8-5e11-4110-a1d3-3a9c0fbc8a0a/1/ZpPysE64W2oqbiHAPPu3coekWv8.mft
File: ZpPysE64W2oqbiHAPPu3coekWv8.mft (raw, json)
Hash identifier: CkuMA+8+8tYd7R5j3Xs6vWXUR6oBk4+oZyNFXtWwWUE=
Subject key identifier: D4:CD:19:10:7B:6A:FE:3A:79:73:45:41:7A:B6:B1:62:43:72:93:F4
Authority key identifier: 66:93:F2:B0:4E:B8:5B:6A:2A:6E:21:C0:3C:FB:B7:72:87:A4:5A:FF
Certificate issuer: /CN=6693f2b04eb85b6a2a6e21c03cfbb77287a45aff
Certificate serial: 019A71B8DB7A330EC8C5F8A78E9E9406355B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZpPysE64W2oqbiHAPPu3coekWv8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/307be8-5e11-4110-a1d3-3a9c0fbc8a0a/1/ZpPysE64W2oqbiHAPPu3coekWv8.mft
Manifest number: 0896
Signing time: Tue 11 Nov 2025 07:02:11 +0000
Manifest this update: Tue 11 Nov 2025 07:02:11 +0000
Manifest next update: Wed 12 Nov 2025 07:02:11 +0000
Files and hashes: 1: OBgfNHwDlYtlqjjhJRFUWeZDTUY.roa (hash: 6sPRuYPKeEviFfVQ52vvMVNq0j09JkQvr2PG17VGRJU=)
2: ZpPysE64W2oqbiHAPPu3coekWv8.crl (hash: H4xifclfB3OLiG//jnpQUovQFWPoAFcUhY/8VdjlyPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/307be8-5e11-4110-a1d3-3a9c0fbc8a0a/1/ZpPysE64W2oqbiHAPPu3coekWv8.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/307be8-5e11-4110-a1d3-3a9c0fbc8a0a/1/ZpPysE64W2oqbiHAPPu3coekWv8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZpPysE64W2oqbiHAPPu3coekWv8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:db:7a:33:0e:c8:c5:f8:a7:8e:9e:94:06:35:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6693f2b04eb85b6a2a6e21c03cfbb77287a45aff
Validity
Not Before: Nov 11 07:02:11 2025 GMT
Not After : Nov 12 07:02:11 2025 GMT
Subject: CN=d4cd19107b6afe3a797345417ab6b162437293f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b7:29:b7:05:e3:54:d6:c9:8c:8b:da:bf:df:
6e:cd:06:65:f5:d5:a0:64:cf:a8:44:e8:be:b5:af:
ae:69:31:a4:96:32:a3:e9:e6:53:5c:f9:a0:9e:dd:
0b:26:f7:71:9b:34:8b:ab:57:e7:63:64:da:40:4a:
bd:ee:f3:76:ae:75:a7:d0:88:f3:13:af:40:d0:1e:
89:0d:19:06:ab:b9:57:68:03:36:d5:45:7c:61:da:
13:06:4e:a8:07:ff:44:b4:8f:e1:90:46:6b:26:bf:
1f:4e:5c:4b:2b:38:22:54:da:06:1f:17:8f:25:a0:
f3:58:a0:74:d3:f6:dd:f6:29:62:ff:08:cb:8a:5d:
71:49:01:48:d9:fd:cc:aa:0e:69:82:cb:de:62:c9:
b6:5a:43:73:26:04:59:cc:f9:59:27:f2:ce:88:c3:
4a:d8:0d:3d:1a:fc:87:2a:93:b5:74:1f:58:d4:2a:
c2:fb:e7:d1:9f:e7:5b:40:cb:8a:5e:38:77:ae:62:
dd:6e:32:a3:fa:c6:fb:37:37:7c:f2:0e:a1:8a:e2:
5a:d9:64:ac:c6:7f:b2:35:50:6d:8f:00:e4:8f:37:
90:0d:e7:2b:b7:80:05:b7:ab:64:56:dc:6a:fd:cb:
d0:8a:4a:64:ff:01:4a:c3:3a:bb:57:82:bb:43:2c:
88:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:CD:19:10:7B:6A:FE:3A:79:73:45:41:7A:B6:B1:62:43:72:93:F4
X509v3 Authority Key Identifier:
keyid:66:93:F2:B0:4E:B8:5B:6A:2A:6E:21:C0:3C:FB:B7:72:87:A4:5A:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZpPysE64W2oqbiHAPPu3coekWv8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/307be8-5e11-4110-a1d3-3a9c0fbc8a0a/1/ZpPysE64W2oqbiHAPPu3coekWv8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/307be8-5e11-4110-a1d3-3a9c0fbc8a0a/1/ZpPysE64W2oqbiHAPPu3coekWv8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:a6:bc:4c:53:f5:00:a2:44:bc:4e:12:dc:62:cf:d8:a1:da:
9f:7a:5f:de:76:75:da:26:2b:33:60:b5:aa:3e:ec:8d:e4:f7:
a1:ed:b2:cb:76:1c:4f:66:dd:f9:ec:c3:98:42:ff:12:b0:ea:
58:41:09:17:cb:85:5d:c3:c2:0b:75:e9:30:b9:ee:cd:cf:b6:
09:b5:fe:93:c8:72:2e:e3:d5:6d:91:9e:7f:b4:66:ff:ff:de:
ea:f6:bc:02:f0:16:d6:f4:96:36:63:f8:a5:70:f9:7d:6b:2e:
20:f4:27:8c:ad:d1:b0:bb:47:ca:8a:66:44:b0:e7:8c:27:87:
05:64:e0:fa:d6:14:ff:83:1b:55:e6:b4:bc:3f:1d:e4:05:17:
bd:67:5e:1e:9b:4d:b2:25:ba:9c:bb:fd:3d:d0:f6:53:6c:3f:
6b:88:5e:b8:ee:1d:f3:f3:a8:d4:b5:cc:91:5b:63:af:58:61:
5e:1c:34:6d:4b:66:ed:98:7d:f8:6b:dd:5e:70:65:9d:ce:9a:
11:2f:c7:70:88:3a:4d:a4:36:98:a1:79:a2:0d:92:ae:2c:69:
68:05:a0:f7:6c:b4:f9:96:85:53:ce:e0:f4:51:17:64:b8:10:
3c:ef:48:dc:b6:55:55:8b:d8:e2:1e:4a:cb:54:87:51:9c:ac:
96:cf:6f:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:38:55 2025 by rpki-client