Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/064fac-eddd-4903-a13d-0b9c76c0d91c/1/ZX7W9bumM9VSaf3QVrz2DGjHsrg.mft
File: ZX7W9bumM9VSaf3QVrz2DGjHsrg.mft (raw, json)
Hash identifier: g3v32POl96GclqyEI3K7yhZDM5Ro77+0qmXqGPczZ5Q=
Subject key identifier: 55:D4:6C:7D:98:69:2D:CA:68:63:B1:05:C1:C0:47:63:91:17:5D:FF
Authority key identifier: 65:7E:D6:F5:BB:A6:33:D5:52:69:FD:D0:56:BC:F6:0C:68:C7:B2:B8
Certificate issuer: /CN=657ed6f5bba633d55269fdd056bcf60c68c7b2b8
Certificate serial: 019A71B804DE5EC8CB51A0167E13729864CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZX7W9bumM9VSaf3QVrz2DGjHsrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/064fac-eddd-4903-a13d-0b9c76c0d91c/1/ZX7W9bumM9VSaf3QVrz2DGjHsrg.mft
Manifest number: 1724
Signing time: Tue 11 Nov 2025 07:01:16 +0000
Manifest this update: Tue 11 Nov 2025 07:01:16 +0000
Manifest next update: Wed 12 Nov 2025 07:01:16 +0000
Files and hashes: 1: Wi8TeX6HlCf6UscTIz-eiQunz20.roa (hash: iC2va1BTrYFKnldJrvaufKukdaOfozas1t65U+xf85Q=)
2: ZX7W9bumM9VSaf3QVrz2DGjHsrg.crl (hash: Jkyy8llTOYMPhlsQY75Iqhk9UHeZ1jJy+wF3bvEkYls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/064fac-eddd-4903-a13d-0b9c76c0d91c/1/ZX7W9bumM9VSaf3QVrz2DGjHsrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/064fac-eddd-4903-a13d-0b9c76c0d91c/1/ZX7W9bumM9VSaf3QVrz2DGjHsrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZX7W9bumM9VSaf3QVrz2DGjHsrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:04:de:5e:c8:cb:51:a0:16:7e:13:72:98:64:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=657ed6f5bba633d55269fdd056bcf60c68c7b2b8
Validity
Not Before: Nov 11 07:01:16 2025 GMT
Not After : Nov 12 07:01:16 2025 GMT
Subject: CN=55d46c7d98692dca6863b105c1c0476391175dff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6e:97:fa:cc:e6:e4:f0:7b:d9:75:8b:12:47:
a5:1c:dd:4d:38:f3:6b:13:a4:8c:bc:5b:62:d3:9e:
4c:68:a8:79:d7:c3:35:40:e5:94:c5:36:c3:8f:d1:
ad:35:12:aa:1a:1a:22:54:85:50:47:ac:9e:b4:5f:
66:12:32:20:bf:a3:4e:cf:5e:59:c2:2d:73:aa:d8:
34:0d:c7:68:3a:7b:36:c2:52:97:1f:d5:19:a8:1b:
16:44:1d:d4:45:e2:1e:7d:09:84:5a:0c:10:03:13:
33:04:11:ab:04:68:89:2d:f0:87:70:6e:b5:2e:70:
95:8d:f9:67:f0:2b:90:a6:ea:6e:c3:cc:5b:c1:e8:
bb:5e:76:ab:d9:be:20:48:9a:ab:7e:19:fd:9a:54:
16:94:77:2f:9e:64:ea:4b:eb:4d:ed:e2:6a:7f:f9:
3f:53:69:2e:ea:97:94:c3:e3:18:b7:86:2a:80:6d:
ff:8e:ff:0a:49:90:95:4a:dd:82:89:3c:a0:a8:33:
bb:34:59:d9:5b:f6:34:7c:d7:9a:b1:85:5d:2c:e3:
43:09:8f:b3:f6:d8:0d:88:5f:aa:c6:23:3e:c8:21:
29:7b:ff:b3:7a:1c:4c:f4:6c:db:3b:9c:e3:8a:16:
54:47:56:53:c5:c7:f6:66:42:b8:7d:99:0c:20:b7:
59:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:D4:6C:7D:98:69:2D:CA:68:63:B1:05:C1:C0:47:63:91:17:5D:FF
X509v3 Authority Key Identifier:
keyid:65:7E:D6:F5:BB:A6:33:D5:52:69:FD:D0:56:BC:F6:0C:68:C7:B2:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZX7W9bumM9VSaf3QVrz2DGjHsrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/064fac-eddd-4903-a13d-0b9c76c0d91c/1/ZX7W9bumM9VSaf3QVrz2DGjHsrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/064fac-eddd-4903-a13d-0b9c76c0d91c/1/ZX7W9bumM9VSaf3QVrz2DGjHsrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:ef:8d:55:3a:f9:fe:86:7d:28:5c:bd:84:9c:eb:10:72:eb:
f8:db:32:63:e3:7f:2e:9c:e0:8c:9c:83:36:dd:88:5e:6d:30:
32:f4:90:2a:6b:84:ea:18:cc:86:5f:eb:13:76:ca:5f:4e:6c:
0c:f4:7a:4f:7f:92:11:ac:48:53:2f:7a:89:5e:48:b3:55:37:
12:3f:96:1e:fc:13:67:69:0a:cd:fe:d0:9b:59:57:62:c0:bb:
ef:f6:54:82:f3:8f:75:6d:ed:f4:6a:69:61:62:9b:1e:4a:1a:
a6:69:fb:cc:d0:89:2b:b3:97:bd:1f:e9:8e:b6:d6:30:0d:f8:
7a:bf:81:35:57:d0:a0:da:dd:55:65:c2:6d:93:49:9f:0e:33:
70:66:9c:f6:5d:51:d2:d6:42:65:9f:7d:50:0f:d6:d4:84:a6:
75:19:ba:69:54:fd:11:9d:3f:17:e6:54:0c:21:cd:04:7b:1b:
64:df:0b:52:1f:b1:7c:94:87:5e:8e:20:35:e9:42:72:01:3e:
5f:51:f9:43:93:02:ef:7b:c5:41:53:dc:0e:08:05:e8:95:1e:
64:31:83:7d:9b:ba:77:88:df:21:4a:5a:87:5e:60:c1:6d:fa:
c3:eb:db:78:e8:33:7c:9a:20:19:3f:99:e8:12:25:86:24:86:
da:ad:fc:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:16:52 2025 by rpki-client