Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/5b6768-4b5f-4430-bff1-b5e5700fc774/1/zr-Nbew5ILxz8Jf99WyvELUttFU.mft
File: zr-Nbew5ILxz8Jf99WyvELUttFU.mft (raw, json)
Hash identifier: 90WBf3m1ihLklMAdoyU1d+VGTuJazYGH/q2hAXr4HzM=
Subject key identifier: 8B:23:4A:19:00:91:B7:29:3B:D7:9D:D2:5B:1F:63:A7:F6:3F:CA:3E
Authority key identifier: CE:BF:8D:6D:EC:39:20:BC:73:F0:97:FD:F5:6C:AF:10:B5:2D:B4:55
Certificate issuer: /CN=cebf8d6dec3920bc73f097fdf56caf10b52db455
Certificate serial: 019A7225A11476764A77E050598BC1AE4757
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zr-Nbew5ILxz8Jf99WyvELUttFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/5b6768-4b5f-4430-bff1-b5e5700fc774/1/zr-Nbew5ILxz8Jf99WyvELUttFU.mft
Manifest number: 1722
Signing time: Tue 11 Nov 2025 09:00:59 +0000
Manifest this update: Tue 11 Nov 2025 09:00:59 +0000
Manifest next update: Wed 12 Nov 2025 09:00:59 +0000
Files and hashes: 1: c0nmn1z_CeUl_DCW_vWwY1kdQJM.roa (hash: wRoePPTw0QAoUH4ArBeWw9mmFYBdS/sgugaB1c1wFFw=)
2: zr-Nbew5ILxz8Jf99WyvELUttFU.crl (hash: RtfWrYF7yl2OOYDczsJBmEAmE1VwkPZoqtVsV+RI9HI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/5b6768-4b5f-4430-bff1-b5e5700fc774/1/zr-Nbew5ILxz8Jf99WyvELUttFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/5b6768-4b5f-4430-bff1-b5e5700fc774/1/zr-Nbew5ILxz8Jf99WyvELUttFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/zr-Nbew5ILxz8Jf99WyvELUttFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:a1:14:76:76:4a:77:e0:50:59:8b:c1:ae:47:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cebf8d6dec3920bc73f097fdf56caf10b52db455
Validity
Not Before: Nov 11 09:00:59 2025 GMT
Not After : Nov 12 09:00:59 2025 GMT
Subject: CN=8b234a190091b7293bd79dd25b1f63a7f63fca3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:cb:07:5e:bb:3a:00:79:32:94:35:f1:80:98:
e1:ea:09:50:f2:f9:a4:47:c6:84:dd:fc:ee:db:6e:
0c:66:3a:be:76:79:48:ae:a2:d0:01:bf:24:27:ce:
48:c1:0c:4e:4e:4d:67:32:27:bd:c0:e6:77:dd:1b:
e7:c3:31:60:c7:e6:71:71:c5:e9:2f:90:87:67:21:
80:00:c1:c6:a5:44:af:94:a7:3f:a9:03:63:ee:ec:
09:bf:11:87:51:30:f6:d9:00:6f:03:00:d0:f7:37:
3c:15:70:0b:0f:5d:bd:2c:fc:0a:04:9e:f6:da:9b:
25:f9:ed:f0:7f:aa:89:4c:c5:24:9b:9c:74:a7:50:
c5:f9:f2:37:52:b4:f9:bb:13:8f:34:3b:81:5e:25:
f2:56:b4:47:d7:07:69:cc:b2:57:e5:72:c8:1b:79:
8b:4d:f4:6e:28:cf:35:b0:6d:5a:05:a7:1a:b6:2f:
d5:3e:04:ef:e4:cd:27:8c:5f:fa:4b:6d:70:8b:85:
e6:a7:dc:14:65:38:19:70:b3:39:68:ba:a3:2c:75:
0e:31:b4:be:18:fa:cb:8c:76:5e:99:62:39:08:99:
37:3e:ac:e7:b3:60:b7:06:53:b7:89:14:91:99:97:
91:7d:38:07:4c:ec:d3:c3:0b:33:8b:f5:e1:70:48:
aa:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:23:4A:19:00:91:B7:29:3B:D7:9D:D2:5B:1F:63:A7:F6:3F:CA:3E
X509v3 Authority Key Identifier:
keyid:CE:BF:8D:6D:EC:39:20:BC:73:F0:97:FD:F5:6C:AF:10:B5:2D:B4:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zr-Nbew5ILxz8Jf99WyvELUttFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/5b6768-4b5f-4430-bff1-b5e5700fc774/1/zr-Nbew5ILxz8Jf99WyvELUttFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/5b6768-4b5f-4430-bff1-b5e5700fc774/1/zr-Nbew5ILxz8Jf99WyvELUttFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:4f:18:22:80:e1:0a:fe:de:7d:9d:36:ad:b7:eb:94:c6:65:
0b:32:fa:11:53:d9:24:56:e3:ca:21:57:af:f4:53:a9:75:a6:
c3:23:9a:0c:ac:df:7f:85:34:48:02:67:76:55:95:65:9a:94:
b2:d8:f4:5c:da:f9:fd:be:c9:1c:75:18:ed:ba:5e:a5:3d:c4:
ea:83:de:76:1f:88:27:00:84:3c:db:4f:5f:b2:77:14:ca:ec:
78:16:45:8f:7d:28:9f:db:68:3c:a4:1d:6a:e5:87:3a:85:b2:
e5:74:89:51:8c:e6:7e:3e:02:cf:c3:75:87:ca:0d:08:ae:55:
4f:ca:12:7f:8e:04:d7:c8:05:de:4f:80:11:f0:e8:28:c4:ee:
94:57:33:00:ba:ac:24:19:1d:5b:b4:c2:f7:be:94:fa:bd:97:
1d:2e:27:f6:f7:99:d4:f0:73:f4:88:c3:82:d6:30:ef:be:b5:
4e:68:91:49:fe:c6:08:e6:b4:a0:ad:68:40:14:06:16:20:8f:
81:28:be:1a:47:ed:31:9f:4a:ef:8c:5c:39:c9:a7:4e:1d:e0:
ef:db:34:6d:10:0a:63:aa:8b:0f:50:d6:a6:66:72:82:47:43:
50:6b:cf:17:7e:26:fb:29:ef:9c:83:a8:2a:15:c3:eb:3b:55:
39:ec:2c:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:46:15 2025 by rpki-client