Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.mft
File: ZhGlfSoDtwZfqMF7MTc1vc2jkOk.mft (raw, json)
Hash identifier: aJSIRP0/CREvnU+h6eYYifWxuuFxtciZOb2KD+w9/Jk=
Subject key identifier: BC:77:DD:67:EE:D5:3B:4D:42:52:F8:C2:3D:57:9A:87:8C:FF:DF:7D
Authority key identifier: 66:11:A5:7D:2A:03:B7:06:5F:A8:C1:7B:31:37:35:BD:CD:A3:90:E9
Certificate issuer: /CN=6611a57d2a03b7065fa8c17b313735bdcda390e9
Certificate serial: 019A24AED21211CA50396297CF030AE53CD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.mft
Manifest number: 168B
Signing time: Mon 27 Oct 2025 08:00:28 +0000
Manifest this update: Mon 27 Oct 2025 08:00:28 +0000
Manifest next update: Tue 28 Oct 2025 08:00:28 +0000
Files and hashes: 1: ZhGlfSoDtwZfqMF7MTc1vc2jkOk.crl (hash: IONTH9aoHANPwNWbYjTxi7DXGAKZA6NOfd7SJ03lmcI=)
2: nh2jj_LSbHbo6dOlRaW604QLuxE.roa (hash: ajpkQ8o6WuSUyO59iQdi5/jQGtK2O9XCwMuhD9aQ4wY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:ae:d2:12:11:ca:50:39:62:97:cf:03:0a:e5:3c:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6611a57d2a03b7065fa8c17b313735bdcda390e9
Validity
Not Before: Oct 27 08:00:28 2025 GMT
Not After : Oct 28 08:00:28 2025 GMT
Subject: CN=bc77dd67eed53b4d4252f8c23d579a878cffdf7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:df:7b:94:35:27:4d:cc:6b:84:e2:03:48:71:
ce:1e:09:89:98:4c:84:c3:89:44:5e:ac:43:86:22:
bf:48:b0:aa:cf:ac:4a:b9:26:d8:ac:eb:8f:34:bf:
a3:56:5d:ce:12:69:04:41:11:22:eb:88:45:30:be:
25:35:b6:e4:77:f9:d6:dc:14:1f:a0:db:71:5f:a6:
37:d6:c8:27:d8:44:73:b7:8d:24:03:7a:9b:f2:49:
cf:34:a3:68:09:a2:84:68:da:dc:b3:7d:54:f0:fc:
10:b7:84:9a:9a:b0:2f:c0:10:20:cc:e4:65:ff:c7:
17:ec:be:8f:9c:80:9f:4a:d0:f8:18:d6:62:c5:d5:
63:29:9b:47:e4:5d:5c:d2:54:ae:8c:e1:a6:30:53:
47:c7:35:ef:c0:fb:cb:18:a8:79:0a:ef:1c:65:4b:
ee:92:57:ed:09:a3:5b:a1:8b:d0:af:d9:e5:af:e6:
ee:77:81:f9:b5:21:aa:a3:0b:f4:5c:df:c1:82:f4:
92:ba:f1:7b:3c:c1:1f:4a:45:88:fc:9b:81:18:e0:
41:e0:b9:dc:01:ff:09:81:0b:c2:7c:5f:25:d5:41:
b7:dd:c0:62:c3:77:4a:5d:c3:de:b5:41:d4:6c:ff:
07:6c:76:3a:fb:73:d6:a9:32:76:5f:a7:f5:08:c0:
a6:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:77:DD:67:EE:D5:3B:4D:42:52:F8:C2:3D:57:9A:87:8C:FF:DF:7D
X509v3 Authority Key Identifier:
keyid:66:11:A5:7D:2A:03:B7:06:5F:A8:C1:7B:31:37:35:BD:CD:A3:90:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:b7:d4:93:1d:94:0c:9c:31:4f:c1:5d:b0:82:c5:3b:74:94:
ba:4e:25:73:78:3e:3b:d1:74:3d:f4:97:84:f2:92:7f:ba:b0:
2f:c3:52:da:ae:7d:ea:58:ed:db:3b:87:7e:73:2b:af:34:6e:
19:d7:12:4b:73:3d:4e:04:90:db:49:52:c0:36:b6:47:5c:56:
fe:e7:5d:02:04:6a:4c:0f:78:d7:a3:65:22:0d:ba:ad:ac:83:
94:49:01:63:4d:d9:e4:08:1f:a9:06:31:ae:62:96:cb:aa:ad:
fb:a0:8e:d7:62:33:64:f9:26:99:6f:e9:3b:48:fa:71:5a:c5:
22:a9:a0:4f:64:0c:40:14:af:26:15:00:49:54:42:38:61:47:
b4:fe:dd:26:2b:4b:4d:84:1b:00:7d:23:df:74:8f:83:6e:73:
b9:d8:cc:87:0e:74:c2:c5:0a:ba:05:e2:ee:71:d5:e5:4e:49:
c0:72:b5:c6:46:27:5b:85:c0:37:f7:8c:80:f5:3f:3d:86:2f:
b2:1f:43:47:ec:38:74:02:36:93:70:a9:5c:2c:ab:56:92:f3:
a7:aa:42:a0:8d:93:a1:72:92:d0:e2:1f:af:c3:4b:ad:07:12:
f9:ea:b7:d9:0f:95:60:d8:cd:9c:99:f3:e7:e9:72:82:59:f4:
8f:51:e6:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 18:22:33 2025 by rpki-client