Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/e813d4-4126-4ca1-90d6-45d05a4b1d99/1/ZLsi-CLbdFH-HiGWysY8Vkf7GtU.mft
File: ZLsi-CLbdFH-HiGWysY8Vkf7GtU.mft (raw, json)
Hash identifier: VEcMBgCBmSwspR5zego2uIAeY4cgOiPusnLl8NjzYLA=
Subject key identifier: 33:65:A6:A7:3B:89:3F:C9:C5:49:20:57:53:A0:6A:C2:4D:EE:D4:F7
Authority key identifier: 64:BB:22:F8:22:DB:74:51:FE:1E:21:96:CA:C6:3C:56:47:FB:1A:D5
Certificate issuer: /CN=64bb22f822db7451fe1e2196cac63c5647fb1ad5
Certificate serial: 019A72CA584622208AFC87D459161C652E04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZLsi-CLbdFH-HiGWysY8Vkf7GtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/e813d4-4126-4ca1-90d6-45d05a4b1d99/1/ZLsi-CLbdFH-HiGWysY8Vkf7GtU.mft
Manifest number: 03D8
Signing time: Tue 11 Nov 2025 12:00:54 +0000
Manifest this update: Tue 11 Nov 2025 12:00:54 +0000
Manifest next update: Wed 12 Nov 2025 12:00:54 +0000
Files and hashes: 1: 7221QtQkpZ5fYG5uSqjd2485FGI.roa (hash: qWfFUUJnuvb44KA8Ta3mXVGgM6VvJjf6ZydNkx5R4C0=)
2: ZLsi-CLbdFH-HiGWysY8Vkf7GtU.crl (hash: n+VA3yK7w37MVWLzO0zZk+9Dv1wT3FYGusvlp18gNwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/e813d4-4126-4ca1-90d6-45d05a4b1d99/1/ZLsi-CLbdFH-HiGWysY8Vkf7GtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/e813d4-4126-4ca1-90d6-45d05a4b1d99/1/ZLsi-CLbdFH-HiGWysY8Vkf7GtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZLsi-CLbdFH-HiGWysY8Vkf7GtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:58:46:22:20:8a:fc:87:d4:59:16:1c:65:2e:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64bb22f822db7451fe1e2196cac63c5647fb1ad5
Validity
Not Before: Nov 11 12:00:54 2025 GMT
Not After : Nov 12 12:00:54 2025 GMT
Subject: CN=3365a6a73b893fc9c549205753a06ac24deed4f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c1:1c:50:9b:a7:9a:13:e4:6b:14:34:ff:90:
ea:43:0c:37:97:03:54:be:a6:9e:bf:69:c0:39:b1:
c8:a8:25:72:83:9a:7e:8a:32:90:2a:df:da:4e:03:
61:93:87:87:41:e0:1d:b8:66:04:e7:62:b4:ad:98:
48:63:c6:bd:2c:69:df:64:fc:7c:1e:fa:ae:16:82:
f9:11:fe:8f:49:aa:0a:37:30:54:6b:63:cc:81:45:
8e:18:3d:d8:08:f1:2b:ef:d1:cf:e1:bd:e5:31:06:
06:cd:6c:0e:f6:21:ab:26:be:62:a2:38:e7:05:30:
97:22:60:f2:98:b3:e0:4c:25:d2:33:d5:c1:71:19:
fd:2c:97:8d:66:65:b9:ff:c9:6e:f2:e8:4d:c2:65:
71:f1:86:4a:3d:16:2f:39:13:9a:3b:89:6e:e3:64:
76:11:7c:bc:66:b2:59:61:bf:19:c1:fc:9f:e4:cf:
ee:99:fe:8c:1e:6c:dd:58:a9:8b:1c:93:c0:02:6a:
22:5b:c1:fc:14:14:4e:1b:96:30:c5:a0:6f:ba:c3:
d3:a6:86:8c:a2:04:0f:80:16:fb:e7:f4:9b:7f:21:
f4:21:b6:91:8b:aa:11:2d:79:1a:cd:46:4c:b0:f9:
4c:1b:a7:97:41:4c:ab:2f:61:2d:f1:97:54:6b:85:
d2:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:65:A6:A7:3B:89:3F:C9:C5:49:20:57:53:A0:6A:C2:4D:EE:D4:F7
X509v3 Authority Key Identifier:
keyid:64:BB:22:F8:22:DB:74:51:FE:1E:21:96:CA:C6:3C:56:47:FB:1A:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZLsi-CLbdFH-HiGWysY8Vkf7GtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e813d4-4126-4ca1-90d6-45d05a4b1d99/1/ZLsi-CLbdFH-HiGWysY8Vkf7GtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e813d4-4126-4ca1-90d6-45d05a4b1d99/1/ZLsi-CLbdFH-HiGWysY8Vkf7GtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:f4:49:c0:71:5e:92:46:b2:fa:60:bd:4f:b4:b8:f1:2f:ca:
ce:4b:d9:5f:1c:01:48:f9:ac:58:83:b8:07:69:41:cc:e7:dd:
16:6f:db:6a:b2:b1:75:72:85:55:c1:4c:de:8c:81:b5:e3:f8:
36:d5:71:6a:83:7a:97:d1:34:c1:05:0a:a6:8a:85:81:4b:29:
8f:95:50:3c:74:e9:53:9e:20:65:0f:da:0d:8f:f9:a7:ee:33:
32:41:00:17:57:fe:40:89:d5:1e:c4:87:1a:05:67:db:3b:aa:
2e:9d:e9:63:f6:82:09:a9:ba:fb:8c:2b:99:7d:44:0f:c4:8b:
74:6d:e3:5b:8e:36:e9:b3:4a:6f:ba:8a:3f:20:6c:d2:8e:c9:
90:65:e2:9c:7f:52:09:6e:34:ed:fb:a7:61:32:bd:5c:12:98:
ce:fb:89:a4:27:f4:29:7d:2e:26:5e:78:22:44:66:20:5d:f4:
89:81:b1:c9:06:90:23:c0:09:05:b4:c3:62:2f:db:76:86:ba:
5b:1f:cd:94:0a:11:d9:01:82:b3:a8:86:11:f0:4b:d6:aa:73:
f1:48:53:8c:be:f8:83:d1:98:c7:23:e9:32:36:6b:92:c2:43:
63:7b:97:ff:09:e1:60:93:b7:ea:77:b9:ff:3c:f9:7d:7d:ae:
ea:b2:40:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:22:09 2025 by rpki-client