Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/07bf29-07d1-4daf-b3bb-cbfb2c7fbadd/1/zxhBQM0aIj9ji3mW9UifSF2O5ic.mft
File: zxhBQM0aIj9ji3mW9UifSF2O5ic.mft (raw, json)
Hash identifier: CXti+nuLqD+zazVVNe6HFFVzHzvTVykppqqraP5/igw=
Subject key identifier: C1:7B:E6:D3:2A:D6:E4:89:05:A7:71:E4:E1:4C:68:05:D8:BE:5A:3D
Authority key identifier: CF:18:41:40:CD:1A:22:3F:63:8B:79:96:F5:48:9F:48:5D:8E:E6:27
Certificate issuer: /CN=cf184140cd1a223f638b7996f5489f485d8ee627
Certificate serial: 019A729406EA0FD46F64A3C1B3BED4ACAD76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zxhBQM0aIj9ji3mW9UifSF2O5ic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/07bf29-07d1-4daf-b3bb-cbfb2c7fbadd/1/zxhBQM0aIj9ji3mW9UifSF2O5ic.mft
Manifest number: 0691
Signing time: Tue 11 Nov 2025 11:01:34 +0000
Manifest this update: Tue 11 Nov 2025 11:01:34 +0000
Manifest next update: Wed 12 Nov 2025 11:01:34 +0000
Files and hashes: 1: FnA6f4DOd265nGzqUSApRurvL20.roa (hash: CKai/Ita+qQk4qWCNkCUXx6BxPFuVd8UKoy7z8Mf368=)
2: zxhBQM0aIj9ji3mW9UifSF2O5ic.crl (hash: KT+AfOK8XjtuD7dbFRR0oUfxjvMw+IqwtqZBr+gzpZo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/07bf29-07d1-4daf-b3bb-cbfb2c7fbadd/1/zxhBQM0aIj9ji3mW9UifSF2O5ic.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/07bf29-07d1-4daf-b3bb-cbfb2c7fbadd/1/zxhBQM0aIj9ji3mW9UifSF2O5ic.mft
rsync://rpki.ripe.net/repository/DEFAULT/zxhBQM0aIj9ji3mW9UifSF2O5ic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:94:06:ea:0f:d4:6f:64:a3:c1:b3:be:d4:ac:ad:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf184140cd1a223f638b7996f5489f485d8ee627
Validity
Not Before: Nov 11 11:01:34 2025 GMT
Not After : Nov 12 11:01:34 2025 GMT
Subject: CN=c17be6d32ad6e48905a771e4e14c6805d8be5a3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:81:8c:89:49:ed:be:71:59:7b:8f:42:16:ec:
75:68:bb:5e:5a:9c:50:71:06:96:96:de:f7:7f:65:
6f:91:46:65:96:b4:a2:78:c1:36:09:10:fe:a3:78:
e3:ea:82:33:94:f8:21:54:2b:f4:5b:26:73:09:40:
fb:60:f9:8b:80:c8:b2:a0:2b:25:8f:35:7d:28:e6:
bf:a8:0a:18:2e:34:ae:81:b6:3a:a4:fe:62:0f:31:
36:77:fc:cf:59:65:30:dc:89:65:ce:df:ee:0f:48:
3e:c5:24:89:ae:cd:9b:d7:c8:4d:0a:fe:50:0a:fd:
3d:e2:3d:8e:ae:0d:22:ed:3e:60:e4:63:6c:d3:d0:
b7:62:f1:75:23:98:11:e2:4b:7b:9a:37:2f:5b:2c:
63:b7:3c:60:62:79:fb:a8:5a:5b:94:c2:58:d7:25:
a1:67:c3:a8:d1:33:57:76:58:9a:7c:95:0f:eb:4b:
23:39:57:6d:7f:11:43:6e:48:b0:77:9f:f4:ed:76:
e2:a6:91:29:5f:4b:5b:8e:63:77:58:88:f7:bc:2b:
cb:14:32:93:8c:84:ba:7d:e1:b7:b2:6a:ed:5e:59:
be:ea:47:2e:56:74:b5:f7:6e:12:06:77:fd:87:76:
b7:24:02:40:99:64:00:79:08:5e:29:15:82:e0:ef:
5a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:7B:E6:D3:2A:D6:E4:89:05:A7:71:E4:E1:4C:68:05:D8:BE:5A:3D
X509v3 Authority Key Identifier:
keyid:CF:18:41:40:CD:1A:22:3F:63:8B:79:96:F5:48:9F:48:5D:8E:E6:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zxhBQM0aIj9ji3mW9UifSF2O5ic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/07bf29-07d1-4daf-b3bb-cbfb2c7fbadd/1/zxhBQM0aIj9ji3mW9UifSF2O5ic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/07bf29-07d1-4daf-b3bb-cbfb2c7fbadd/1/zxhBQM0aIj9ji3mW9UifSF2O5ic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:b1:3d:ad:cc:a0:db:95:39:ed:af:11:f8:f1:38:d0:e0:23:
95:b2:b9:3c:58:07:ac:49:af:0e:26:bd:b3:b4:aa:ce:f6:b7:
0d:b3:21:b4:12:1b:0f:67:88:e4:96:8b:ce:fa:e2:db:4a:47:
5d:77:c3:0e:9b:a3:9c:fb:7b:e6:2d:99:5c:9a:14:31:b5:63:
42:b1:83:95:f2:29:16:16:fa:8c:a9:be:5c:8a:98:b5:8a:55:
03:5d:44:9a:1c:15:62:42:61:e4:e1:31:5f:aa:75:21:e4:fe:
aa:6d:9a:58:b4:fc:92:7b:58:d9:73:10:ee:c1:38:07:dd:db:
48:68:bf:ee:03:32:7b:19:7e:c6:03:84:ed:ec:2a:f1:61:11:
74:6e:c1:25:59:9e:fc:cb:1f:1c:b3:84:22:ee:fc:3d:64:61:
45:84:d7:14:a7:c6:44:24:f2:76:30:56:1f:a3:bb:11:c5:7f:
0e:3b:6f:7f:8e:0c:2e:dc:42:7d:40:c3:7f:92:74:83:14:c2:
bf:c5:c8:fb:b0:d0:ce:d4:48:a7:d9:ea:46:d9:0e:5f:e9:af:
8c:2a:30:2e:7b:d8:d1:2f:55:a9:40:27:ef:3f:d3:02:e2:e0:
d3:32:b9:16:dc:c1:a4:3d:69:f1:7a:60:f4:5d:ce:fd:6a:da:
2d:a2:96:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:17:38 2025 by rpki-client