Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/0feb89-7d8c-4300-99b5-06247a978d69/1/zJxBoSN2TPfcDy25hB9zKjuWE0M.mft
File: zJxBoSN2TPfcDy25hB9zKjuWE0M.mft (raw, json)
Hash identifier: jeb9L1KzslHg8gyMdJ/uoex9ciTLkuQi7P5HJudeIdQ=
Subject key identifier: 5A:71:C8:CA:08:73:E8:C7:AB:AD:68:6B:A2:FB:B4:49:4D:36:C6:DD
Authority key identifier: CC:9C:41:A1:23:76:4C:F7:DC:0F:2D:B9:84:1F:73:2A:3B:96:13:43
Certificate issuer: /CN=cc9c41a123764cf7dc0f2db9841f732a3b961343
Certificate serial: 019A71B8F0DE936D2353B6FCAFE7DC888A75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zJxBoSN2TPfcDy25hB9zKjuWE0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/0feb89-7d8c-4300-99b5-06247a978d69/1/zJxBoSN2TPfcDy25hB9zKjuWE0M.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 07:02:16 +0000
Manifest this update: Tue 11 Nov 2025 07:02:16 +0000
Manifest next update: Wed 12 Nov 2025 07:02:16 +0000
Files and hashes: 1: B8c-KiiuWVbKdd6Eyr8wAePUEWY.roa (hash: 8i+mj8IGmve8qUZWFCAwe3JPzP0zTBzNHkZJDJW66Pg=)
2: zJxBoSN2TPfcDy25hB9zKjuWE0M.crl (hash: Tv7phZ6umQSbbxDJ5B/YlaULgSEthy/jIJz6tV/OYHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/0feb89-7d8c-4300-99b5-06247a978d69/1/zJxBoSN2TPfcDy25hB9zKjuWE0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/0feb89-7d8c-4300-99b5-06247a978d69/1/zJxBoSN2TPfcDy25hB9zKjuWE0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/zJxBoSN2TPfcDy25hB9zKjuWE0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:f0:de:93:6d:23:53:b6:fc:af:e7:dc:88:8a:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc9c41a123764cf7dc0f2db9841f732a3b961343
Validity
Not Before: Nov 11 07:02:16 2025 GMT
Not After : Nov 12 07:02:16 2025 GMT
Subject: CN=5a71c8ca0873e8c7abad686ba2fbb4494d36c6dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:b0:de:20:f1:55:f4:3b:bc:91:6c:e4:f8:23:
ca:51:e0:a5:15:72:8f:9b:9f:fb:28:f2:93:b4:42:
ca:4d:62:4a:17:88:1a:4a:f5:af:fa:ad:2f:f6:b0:
af:54:18:35:10:28:b5:7b:1c:e6:2d:d1:34:1e:24:
c1:c2:1a:0c:b5:90:54:12:84:be:36:a4:3a:c5:11:
0b:dd:cf:44:ba:a0:c2:ad:00:23:bd:21:43:d4:12:
58:71:7e:29:0e:b0:f5:99:dc:99:d8:f3:aa:2b:8f:
2c:35:da:fc:68:4e:43:1e:ef:e7:1d:aa:71:be:e3:
ed:9c:ee:d2:39:98:a2:6d:47:fb:55:6e:1b:06:e8:
f5:cf:8b:e6:fb:e9:58:42:b8:7f:a2:ba:32:1b:c2:
9b:6e:07:6d:a8:0b:fd:99:18:b6:79:14:2d:8a:b8:
35:a5:e3:19:dd:e2:9d:05:a3:56:75:a7:1f:e5:16:
16:ca:c3:58:de:c7:ce:e1:06:0a:8a:6c:24:51:ed:
88:fe:57:3a:3d:88:b8:55:49:1a:28:75:c7:a6:06:
18:4a:2c:8b:de:c4:6c:a8:a9:fc:ac:03:a9:47:21:
45:28:09:20:fb:8c:4e:4b:1c:07:50:06:85:b3:8c:
96:10:2a:33:cd:93:a1:32:e6:37:e1:2c:07:e5:a3:
10:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:71:C8:CA:08:73:E8:C7:AB:AD:68:6B:A2:FB:B4:49:4D:36:C6:DD
X509v3 Authority Key Identifier:
keyid:CC:9C:41:A1:23:76:4C:F7:DC:0F:2D:B9:84:1F:73:2A:3B:96:13:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zJxBoSN2TPfcDy25hB9zKjuWE0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/0feb89-7d8c-4300-99b5-06247a978d69/1/zJxBoSN2TPfcDy25hB9zKjuWE0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/0feb89-7d8c-4300-99b5-06247a978d69/1/zJxBoSN2TPfcDy25hB9zKjuWE0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:30:dd:89:cf:9b:f5:0c:85:cf:60:7e:59:9b:fe:b8:a8:ff:
c5:69:8a:2f:5b:6c:86:2c:4f:e1:29:63:c6:b0:78:e6:14:98:
58:88:af:b3:94:22:f5:05:24:9a:f8:ea:c7:45:e7:12:42:18:
3d:e0:d4:bd:f1:da:7e:a1:58:b7:5e:fa:7a:c3:93:e0:92:a0:
0b:20:2a:ab:90:6d:03:33:d8:a3:4b:04:9f:48:29:5a:4c:8d:
d8:e7:24:b1:ef:99:85:8b:32:9a:e6:45:cb:a2:aa:d2:d4:30:
d9:a4:ca:60:04:cb:5f:95:01:02:7c:7c:bf:2f:ff:bf:d5:a6:
46:76:32:8f:cc:b2:c3:d6:8e:9b:d6:d2:1d:e5:cf:b4:fc:74:
99:c7:b3:3e:52:75:c9:89:8a:37:fc:b6:a6:1a:e6:ef:ce:fb:
67:8a:65:95:05:f7:63:48:dd:62:47:06:fd:3c:28:17:85:24:
cf:e2:05:6a:03:22:e1:6e:fd:db:bd:8e:c6:b7:68:ce:dd:12:
1d:ca:13:36:85:56:e8:40:8b:bd:34:4a:eb:a6:90:56:c8:f4:
e2:80:14:28:67:14:01:03:a0:ea:d2:d6:95:73:5d:15:c6:fb:
4f:29:b8:08:6b:80:b0:7a:35:26:0a:f0:1b:70:79:f4:04:99:
b0:4e:1a:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:06:17 2025 by rpki-client