Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e66afe-6e0b-4dbd-8d0d-ce6915b4736f/1/Zpb6P-QM93CFHIOtyvr7ekEHZ48.mft
File: Zpb6P-QM93CFHIOtyvr7ekEHZ48.mft (raw, json)
Hash identifier: nglGEz51SNFtnvCRncBFFg1MC1ZslnPaFEIIf3vEevc=
Subject key identifier: EF:19:24:8E:30:6C:55:48:4B:2B:25:36:38:E9:81:B1:18:0A:BC:0F
Authority key identifier: 66:96:FA:3F:E4:0C:F7:70:85:1C:83:AD:CA:FA:FB:7A:41:07:67:8F
Certificate issuer: /CN=6696fa3fe40cf770851c83adcafafb7a4107678f
Certificate serial: 019A72939D09EA16BEDAECFB148403F53503
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zpb6P-QM93CFHIOtyvr7ekEHZ48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e66afe-6e0b-4dbd-8d0d-ce6915b4736f/1/Zpb6P-QM93CFHIOtyvr7ekEHZ48.mft
Manifest number: 0544
Signing time: Tue 11 Nov 2025 11:01:07 +0000
Manifest this update: Tue 11 Nov 2025 11:01:07 +0000
Manifest next update: Wed 12 Nov 2025 11:01:07 +0000
Files and hashes: 1: Zpb6P-QM93CFHIOtyvr7ekEHZ48.crl (hash: kUXjIdcJ98S02mLk2t5QjWoxx1HNtE/lSrQCe3wIgTI=)
2: f6tkx1veLJXtyksaflVzc1YMN2w.roa (hash: WlrwpYaQcrfGXKf9ZwidLgROLAib30SWtSAT3qSkZJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/e66afe-6e0b-4dbd-8d0d-ce6915b4736f/1/Zpb6P-QM93CFHIOtyvr7ekEHZ48.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/e66afe-6e0b-4dbd-8d0d-ce6915b4736f/1/Zpb6P-QM93CFHIOtyvr7ekEHZ48.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zpb6P-QM93CFHIOtyvr7ekEHZ48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:9d:09:ea:16:be:da:ec:fb:14:84:03:f5:35:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6696fa3fe40cf770851c83adcafafb7a4107678f
Validity
Not Before: Nov 11 11:01:07 2025 GMT
Not After : Nov 12 11:01:07 2025 GMT
Subject: CN=ef19248e306c55484b2b253638e981b1180abc0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:26:11:7f:8b:e3:af:69:5b:1c:60:98:f9:40:
ad:47:f6:b3:a6:32:67:32:e3:3b:e1:1e:0f:c4:51:
be:f6:49:87:f2:d7:ee:a1:08:30:b6:5c:d7:8a:85:
69:1f:29:42:52:53:97:2d:3d:d6:5f:41:60:9f:fb:
d2:f8:a0:74:00:01:a3:5c:8b:81:e5:01:d2:62:3a:
58:ff:6b:09:1f:23:bc:fc:b6:21:58:74:9d:9a:0f:
be:27:0d:94:03:52:d6:36:57:f9:11:ac:54:ad:ba:
3d:35:21:0a:96:5c:f4:f9:68:4c:81:4a:cf:e6:df:
3b:0e:79:f2:7f:a2:40:70:f8:55:4d:1b:3b:2e:18:
27:49:4e:05:3d:c3:12:32:e3:a5:5a:64:e8:e3:e5:
0e:62:21:fa:38:09:7d:6f:56:f0:24:2e:5e:de:ab:
ea:6b:01:8a:14:12:31:8d:43:6b:84:cc:cb:a6:98:
09:7f:94:2d:f6:92:21:af:c3:c7:84:e5:a1:dc:0f:
be:7b:fe:df:99:54:19:59:09:52:78:aa:7c:60:01:
ac:87:57:55:90:e5:b5:f2:99:74:49:78:b7:fa:b2:
ce:9b:5e:93:ac:c6:6b:c5:54:8b:c8:92:d9:68:5d:
86:15:9f:53:00:c1:c8:01:be:8d:31:50:4f:58:9c:
c7:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:19:24:8E:30:6C:55:48:4B:2B:25:36:38:E9:81:B1:18:0A:BC:0F
X509v3 Authority Key Identifier:
keyid:66:96:FA:3F:E4:0C:F7:70:85:1C:83:AD:CA:FA:FB:7A:41:07:67:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zpb6P-QM93CFHIOtyvr7ekEHZ48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e66afe-6e0b-4dbd-8d0d-ce6915b4736f/1/Zpb6P-QM93CFHIOtyvr7ekEHZ48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e66afe-6e0b-4dbd-8d0d-ce6915b4736f/1/Zpb6P-QM93CFHIOtyvr7ekEHZ48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:6c:8a:c0:47:c5:12:3c:e2:ab:00:ad:c5:c1:73:4b:1c:33:
86:1d:da:ca:b8:88:b1:c1:25:e1:e3:42:bf:79:63:d2:3e:18:
0f:eb:3e:1f:ed:50:9b:63:09:4f:e7:8e:1b:30:a3:e7:06:ef:
79:15:d7:48:57:ed:f3:72:97:b7:29:92:0e:56:d9:72:50:d6:
f9:3c:83:c1:0d:32:44:b8:bf:73:c6:10:7d:7c:b5:1f:68:3a:
8f:50:08:28:dc:44:93:9a:0a:9f:89:e9:0e:33:e4:96:1f:de:
e0:4d:15:b5:a4:4a:2c:70:aa:2e:79:39:d2:ad:52:6e:07:f7:
4d:3f:69:9f:28:51:ac:ca:00:b7:59:9e:81:fa:a5:48:91:6c:
5b:30:bb:68:aa:79:47:58:f7:9d:9d:e8:a4:eb:8f:d0:44:e7:
9e:c3:2a:e5:49:b2:90:62:e5:9a:a7:d7:7a:e2:90:ef:16:f3:
78:8b:c2:cf:67:5c:68:06:5b:d4:38:41:2a:9a:03:81:e0:68:
99:5d:5a:4f:01:b1:03:72:99:e1:f1:28:18:64:13:e6:e5:47:
5a:e8:bb:d3:c9:28:fb:2a:ad:fa:28:e5:13:36:78:93:ab:27:
89:70:94:cf:8b:7e:1b:88:80:ea:5e:a8:f3:2f:bd:44:81:38:
c9:d1:63:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:20:06 2025 by rpki-client