Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.mft
File: ZVnPNNTPxZZAhi0eS3nUjZ5Njns.mft (raw, json)
Hash identifier: EjpljzIzP1boDvF6WhXIeZKBeFl+InigF6PxNe8/tjk=
Subject key identifier: 77:82:83:C8:9C:F2:AA:18:4C:09:49:C5:28:D5:49:C4:80:A1:58:2E
Authority key identifier: 65:59:CF:34:D4:CF:C5:96:40:86:2D:1E:4B:79:D4:8D:9E:4D:8E:7B
Certificate issuer: /CN=6559cf34d4cfc59640862d1e4b79d48d9e4d8e7b
Certificate serial: 019A70A4EB5637E6CDC3C50CD679DB81B869
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.mft
Manifest number: 0475
Signing time: Tue 11 Nov 2025 02:00:47 +0000
Manifest this update: Tue 11 Nov 2025 02:00:47 +0000
Manifest next update: Wed 12 Nov 2025 02:00:47 +0000
Files and hashes: 1: 9JlOX8sBl__Qf5ZEztj3xRoWT0w.roa (hash: yFMJTSvXNN5G3iWxcUQycJKuWi+/CwtiHhA9xSKG2JY=)
2: ZVnPNNTPxZZAhi0eS3nUjZ5Njns.crl (hash: xBBktgBArkqqTJ388PVSwNaU9UBw0b/Huhkn1jalTJg=)
3: uJJnjUiM_NZxiukKj0SMAuEZu9s.roa (hash: rKuDWrBp0PYOBRz7NFxaGHHnL+VoADNHakfLXL6TQaA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a4:eb:56:37:e6:cd:c3:c5:0c:d6:79:db:81:b8:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6559cf34d4cfc59640862d1e4b79d48d9e4d8e7b
Validity
Not Before: Nov 11 02:00:47 2025 GMT
Not After : Nov 12 02:00:47 2025 GMT
Subject: CN=778283c89cf2aa184c0949c528d549c480a1582e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:82:71:90:55:01:f8:71:14:6b:03:a3:a9:bc:
00:f2:2c:75:03:bf:00:fc:2d:28:9f:40:c6:c6:1c:
dd:d4:34:9d:0c:7e:c8:b7:7c:fd:b8:4f:7a:58:da:
2f:ec:0e:36:5b:37:0c:3d:15:6a:9c:44:8b:d6:9d:
46:e9:27:70:03:1e:fd:56:16:6f:8d:87:48:e0:c8:
11:84:a0:cc:2c:ac:56:11:fd:4e:0d:07:fa:90:a4:
a3:c9:09:c3:2f:87:49:ba:7d:72:2e:0e:b4:a8:46:
3c:f7:bc:f1:dd:c9:06:f1:70:bc:68:f8:ce:89:4e:
45:11:56:a2:71:7b:c7:73:15:7a:15:a8:cb:16:e4:
d5:71:4f:7f:49:b5:ae:39:ef:13:b7:de:3e:aa:42:
97:0f:59:50:cd:d3:f1:c2:88:fb:56:ad:39:95:ef:
40:98:34:1a:68:98:34:48:fb:9f:2b:eb:09:97:f9:
e4:25:73:03:b4:23:b5:de:cf:74:2c:d1:b2:bf:db:
73:88:de:2f:c0:a4:62:30:b8:9c:16:04:08:72:03:
6c:c5:f2:6d:5a:cd:3a:39:95:e9:33:bd:4c:29:f6:
b1:05:f1:7e:3d:e1:72:4a:1b:8b:7b:5f:8f:8b:a3:
21:aa:ff:91:46:3e:bf:35:6b:4e:9a:40:d1:9c:68:
83:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:82:83:C8:9C:F2:AA:18:4C:09:49:C5:28:D5:49:C4:80:A1:58:2E
X509v3 Authority Key Identifier:
keyid:65:59:CF:34:D4:CF:C5:96:40:86:2D:1E:4B:79:D4:8D:9E:4D:8E:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:7f:f1:62:de:31:b9:95:ca:93:31:ec:5b:b4:d4:97:9c:8d:
83:06:e5:e6:98:39:5b:49:28:f6:62:fd:49:81:73:6c:4a:98:
e3:c3:9c:5b:02:aa:af:c7:bf:2a:9f:4f:06:4c:a6:60:a1:b4:
61:cb:87:30:c4:78:2f:5e:39:1a:72:4b:0c:86:40:99:71:65:
66:35:a2:3c:24:df:ba:88:43:ff:fb:06:bd:de:8b:c6:a5:de:
1a:07:7c:26:c3:48:87:78:ff:2b:21:d3:43:a2:64:3b:4d:ea:
d9:e1:9a:67:d4:bb:4d:24:26:41:4e:b6:0c:cc:55:16:83:31:
2e:31:58:56:e1:64:f5:2c:d8:e7:4e:42:75:bf:3f:4c:30:a8:
61:a4:bd:94:07:d7:e5:4d:8b:d1:9f:4a:60:e4:ba:b4:ef:87:
76:90:54:8f:61:06:d1:7e:1c:da:f7:ce:47:b1:da:c5:7b:da:
33:09:bc:18:0b:03:88:c3:af:1f:7d:31:02:80:66:c4:a2:3b:
b9:2b:0a:00:7d:98:b8:00:33:61:af:04:ac:57:44:4d:44:19:
34:97:1c:f4:48:90:96:f5:23:72:c4:15:34:cf:d0:f7:7c:5a:
10:aa:a5:15:37:55:06:5f:d4:e1:f2:2e:61:25:4c:b7:7a:9a:
ef:57:b9:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:47:00 2025 by rpki-client