Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/ZiWd6j6crm6BlYjFyRPwLUQQOYs.mft
File: ZiWd6j6crm6BlYjFyRPwLUQQOYs.mft (raw, json)
Hash identifier: CMc8CBEKkSCOgAOYd51P1jAh+ck5RDTyr5q3tT/NQWE=
Subject key identifier: F3:02:4E:98:34:64:DC:CF:89:78:7D:C6:79:5D:27:EF:38:D1:F8:99
Authority key identifier: 66:25:9D:EA:3E:9C:AE:6E:81:95:88:C5:C9:13:F0:2D:44:10:39:8B
Certificate issuer: /CN=66259dea3e9cae6e819588c5c913f02d4410398b
Certificate serial: 019A71B79D6453B1B809E1EF381CCE475495
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZiWd6j6crm6BlYjFyRPwLUQQOYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/ZiWd6j6crm6BlYjFyRPwLUQQOYs.mft
Manifest number: 156F
Signing time: Tue 11 Nov 2025 07:00:49 +0000
Manifest this update: Tue 11 Nov 2025 07:00:49 +0000
Manifest next update: Wed 12 Nov 2025 07:00:49 +0000
Files and hashes: 1: 64PcT-ttV59tp4M6SLzIc1B2y1U.roa (hash: DimP9lf8Wwvo3/homuogbrevUAd8aPNUrD6/T7BCGD0=)
2: ZiWd6j6crm6BlYjFyRPwLUQQOYs.crl (hash: qZ1p3MX1SWO8KgvSgK6uBypJ595sBaBYuR4hEpZSD1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/ZiWd6j6crm6BlYjFyRPwLUQQOYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/ZiWd6j6crm6BlYjFyRPwLUQQOYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZiWd6j6crm6BlYjFyRPwLUQQOYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:9d:64:53:b1:b8:09:e1:ef:38:1c:ce:47:54:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66259dea3e9cae6e819588c5c913f02d4410398b
Validity
Not Before: Nov 11 07:00:49 2025 GMT
Not After : Nov 12 07:00:49 2025 GMT
Subject: CN=f3024e983464dccf89787dc6795d27ef38d1f899
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:cb:83:21:a9:ae:95:9e:84:80:5f:49:00:44:
9e:99:c5:bb:0a:84:e3:8d:5e:df:dc:8c:7e:7f:9f:
94:a3:fc:ef:92:91:12:bd:f3:fe:7e:dd:34:b3:06:
9f:54:85:d6:4d:a7:c4:d7:5e:e2:e4:28:d8:c6:ae:
08:69:7f:81:e1:3c:4b:9b:0e:29:8e:2a:8a:f5:98:
ca:25:27:81:04:06:c6:89:80:79:2b:c7:28:4b:3e:
4e:2a:11:9e:7f:6c:72:07:15:c7:00:8b:24:41:d1:
92:03:26:c4:55:1e:85:51:22:42:e4:36:fa:73:31:
02:cc:f1:98:4e:99:84:a2:26:48:f2:42:7e:bb:71:
89:9c:32:3d:48:ef:53:02:01:46:cb:d3:ea:19:2c:
6f:1c:77:0d:a2:ed:bb:a2:c9:cf:3b:83:41:05:93:
0c:44:e3:98:22:0a:4a:4e:38:23:85:da:a4:20:ce:
2d:d3:df:f1:2e:48:88:06:3d:43:16:be:20:92:91:
af:4e:75:07:e6:ac:6b:66:b1:e9:c7:4d:e0:41:07:
8c:f4:3d:f3:e9:72:ec:97:3d:9a:82:1b:65:b8:ce:
f0:1d:97:53:36:a2:7e:6d:06:37:56:f9:cb:57:2a:
c9:ec:e1:2a:64:52:70:4e:7b:d9:9e:7c:27:09:09:
27:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:02:4E:98:34:64:DC:CF:89:78:7D:C6:79:5D:27:EF:38:D1:F8:99
X509v3 Authority Key Identifier:
keyid:66:25:9D:EA:3E:9C:AE:6E:81:95:88:C5:C9:13:F0:2D:44:10:39:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZiWd6j6crm6BlYjFyRPwLUQQOYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/ZiWd6j6crm6BlYjFyRPwLUQQOYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/ZiWd6j6crm6BlYjFyRPwLUQQOYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:a9:91:fe:88:0a:d2:fa:38:52:53:af:b7:c0:c8:db:49:b6:
78:2b:27:7a:c1:90:d7:56:2d:ad:86:25:eb:44:8d:93:11:6a:
d6:4b:24:2a:96:1c:5a:96:fb:cc:16:1e:3c:28:69:76:42:08:
c4:7f:3b:5e:80:ac:8c:6e:b3:b4:c7:0f:05:39:bb:9e:0b:74:
6c:52:92:c9:14:c8:8d:28:8a:0e:d3:a6:27:b9:79:e4:ed:04:
c5:c2:53:9f:fb:b8:d1:85:98:40:05:56:66:3a:ca:e9:7a:e8:
5a:1b:72:aa:36:99:c1:77:04:e8:f4:45:15:63:a8:ff:09:89:
78:b8:08:a2:e0:16:fc:9c:d4:6d:e9:eb:10:4c:de:64:36:27:
e3:92:c8:f1:27:1a:94:27:d9:2a:fc:56:72:9f:87:e3:dc:bf:
8d:9a:1a:9a:65:46:f5:e5:45:c0:6c:bc:52:43:ef:b3:cf:22:
4b:b3:9b:b7:2b:58:60:f6:73:72:a2:ca:a7:a7:f9:f0:1c:c2:
a5:4e:b3:a5:32:45:b7:76:a2:cf:51:e1:a4:b2:bd:8b:8a:55:
b6:36:03:2f:d7:80:c4:f8:5e:ec:21:b1:3c:22:7e:1e:4c:96:
d7:62:ae:66:53:88:fe:bb:8c:b3:63:05:bc:44:bb:55:ce:dd:
dc:de:86:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:01:06 2025 by rpki-client