Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.mft
File: ZHVxhUcvFtU-62ihQONRP6McMdg.mft (raw, json)
Hash identifier: vc9yv59+V06qKnpx3uoxRHdUIsBQ52ar5ZRwgD7UfVo=
Subject key identifier: 75:5D:74:5D:70:29:7C:E8:12:38:D2:C9:7C:D1:A8:F3:70:EE:0E:F9
Authority key identifier: 64:75:71:85:47:2F:16:D5:3E:EB:68:A1:40:E3:51:3F:A3:1C:31:D8
Certificate issuer: /CN=64757185472f16d53eeb68a140e3513fa31c31d8
Certificate serial: 019A2B1ED8D01709B7D978681F22EE16E909
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZHVxhUcvFtU-62ihQONRP6McMdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.mft
Manifest number: 0FD4
Signing time: Tue 28 Oct 2025 14:00:33 +0000
Manifest this update: Tue 28 Oct 2025 14:00:33 +0000
Manifest next update: Wed 29 Oct 2025 14:00:33 +0000
Files and hashes: 1: LbrPw2qHStZqdco2bEzhOUNybWw.roa (hash: 7tT51i1L51JtsRXjzHib6ZL3MKK3W2gKGrb5rsnLLAg=)
2: POCPRxRMQvG_SBDmMnlfbNyZ_Fc.roa (hash: omhI/dBEp6szGMmdnXA+Z3Yz+jOpHj80ol6PbhfLhbo=)
3: ZHVxhUcvFtU-62ihQONRP6McMdg.crl (hash: cZwppyyL15P2KlvIE/mo7iYMpGyiVtkBbfS5+hmMCJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZHVxhUcvFtU-62ihQONRP6McMdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 14:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2b:1e:d8:d0:17:09:b7:d9:78:68:1f:22:ee:16:e9:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64757185472f16d53eeb68a140e3513fa31c31d8
Validity
Not Before: Oct 28 14:00:33 2025 GMT
Not After : Oct 29 14:00:33 2025 GMT
Subject: CN=755d745d70297ce81238d2c97cd1a8f370ee0ef9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:31:3d:28:51:0f:b7:d3:2f:ff:24:29:b2:20:
28:24:f7:4c:ba:3c:36:4a:e5:bf:59:61:8f:4f:25:
00:be:e6:35:68:1a:9c:61:59:08:c2:a7:b6:43:e2:
98:89:0a:a4:02:e1:ac:8d:e2:76:5c:b5:17:cc:b7:
de:19:4e:a2:94:0a:55:b7:15:1f:7e:58:11:cf:f4:
63:b5:e8:2d:98:99:9f:37:42:48:fe:7a:89:24:87:
15:43:aa:54:d1:0c:36:74:e7:ed:9c:49:25:b4:30:
b8:d8:13:6d:20:a0:e9:82:b7:9f:39:2b:4e:56:04:
1b:b0:3c:64:29:74:9a:bb:04:9d:bb:1e:a8:41:3d:
e7:05:4d:63:f2:ba:76:27:32:0d:ba:94:89:5e:40:
76:63:14:d4:a4:df:74:59:11:b0:74:11:59:62:ee:
a0:e4:eb:38:d9:37:e2:e6:aa:36:40:e5:0d:c6:eb:
4a:3e:3f:5c:36:ca:f8:f7:17:f0:a8:b9:11:e8:ed:
92:8e:e1:14:88:12:1a:7c:87:07:23:cc:a9:c3:32:
05:c0:b3:52:27:26:cc:02:77:5d:13:1d:b5:5a:e4:
c0:1c:c2:93:6e:22:9e:cf:57:6f:5b:0e:2b:77:86:
6a:ea:cd:a5:ca:94:b0:9c:40:45:9b:6b:54:31:e0:
61:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:5D:74:5D:70:29:7C:E8:12:38:D2:C9:7C:D1:A8:F3:70:EE:0E:F9
X509v3 Authority Key Identifier:
keyid:64:75:71:85:47:2F:16:D5:3E:EB:68:A1:40:E3:51:3F:A3:1C:31:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZHVxhUcvFtU-62ihQONRP6McMdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:07:60:56:40:72:6e:ed:0a:d1:46:84:25:f7:1d:cf:30:39:
a4:d0:32:90:d4:52:af:96:b9:f0:6c:15:b1:69:8c:df:0f:2b:
25:8d:60:22:2b:0c:5f:fa:92:2e:e4:f5:95:27:54:cf:32:dd:
16:3d:77:7e:d4:ff:31:8d:81:6d:6a:5f:ff:58:7d:d6:16:af:
13:1d:60:4a:1d:e0:cc:50:9d:84:38:91:fb:74:b0:32:d8:5b:
4d:35:92:68:02:a5:75:30:85:35:1b:e9:a8:35:23:40:e8:f5:
19:89:53:ab:6a:a7:72:7a:dd:40:b4:b5:5b:76:c6:ff:b2:7d:
f4:30:75:33:ef:89:d4:f0:ca:ea:58:7d:33:a8:74:37:00:3d:
79:f7:5c:05:30:04:a9:22:2a:4e:f5:30:31:e9:92:a2:ae:d2:
9f:75:17:53:8c:5c:2f:44:c5:86:c4:14:62:42:5a:56:4a:59:
f0:b7:91:a4:5d:92:2c:54:4e:d1:aa:04:6c:32:16:70:f8:3e:
5f:5f:78:03:80:2b:96:cf:eb:11:ab:e6:e7:cb:50:ff:b7:11:
f4:22:19:ad:6d:23:57:ec:d4:1b:3d:2a:00:8a:26:60:0d:1d:
fb:e6:b3:81:cb:08:88:94:00:7e:43:47:a5:05:e5:86:87:7c:
13:02:45:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 23:08:00 2025 by rpki-client