Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/fb48fd-4ec5-43f1-93cc-8654786e20a9/1/Z0UxRRZIP-J8BTDMuXB8N20g5_A.mft
File: Z0UxRRZIP-J8BTDMuXB8N20g5_A.mft (raw, json)
Hash identifier: rBN61cLl1FVlGUNWlE+YO3VVmuaK0fj5Z4wgUCVTnmM=
Subject key identifier: 62:8B:60:9F:D0:F9:A7:F4:32:80:17:72:74:EA:1F:22:4D:F6:69:D0
Authority key identifier: 67:45:31:45:16:48:3F:E2:7C:05:30:CC:B9:70:7C:37:6D:20:E7:F0
Certificate issuer: /CN=6745314516483fe27c0530ccb9707c376d20e7f0
Certificate serial: 019A4EF5A47322D2CC9E1FF9BFB337FD030B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0UxRRZIP-J8BTDMuXB8N20g5_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/fb48fd-4ec5-43f1-93cc-8654786e20a9/1/Z0UxRRZIP-J8BTDMuXB8N20g5_A.mft
Manifest number: 0BF0
Signing time: Tue 04 Nov 2025 13:01:52 +0000
Manifest this update: Tue 04 Nov 2025 13:01:52 +0000
Manifest next update: Wed 05 Nov 2025 13:01:52 +0000
Files and hashes: 1: Z0UxRRZIP-J8BTDMuXB8N20g5_A.crl (hash: sGQEmNnjV6byrkupHTlQfTvTo4/umWdvTFiJsXKw+pw=)
2: omUHhrKSJPjXc3fnFI7A_uy7HUU.roa (hash: xj7VTWYKB+CTrZ+OfVzTG694MjcNSO25Qbd0GhfZgnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/fb48fd-4ec5-43f1-93cc-8654786e20a9/1/Z0UxRRZIP-J8BTDMuXB8N20g5_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/fb48fd-4ec5-43f1-93cc-8654786e20a9/1/Z0UxRRZIP-J8BTDMuXB8N20g5_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z0UxRRZIP-J8BTDMuXB8N20g5_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:a4:73:22:d2:cc:9e:1f:f9:bf:b3:37:fd:03:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6745314516483fe27c0530ccb9707c376d20e7f0
Validity
Not Before: Nov 4 13:01:52 2025 GMT
Not After : Nov 5 13:01:52 2025 GMT
Subject: CN=628b609fd0f9a7f43280177274ea1f224df669d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:76:54:f3:d4:ea:67:59:e3:5c:7f:6d:ea:90:
a8:23:5f:7f:2e:e6:a0:0c:6a:01:f1:b6:65:2e:e4:
f9:16:83:58:ac:e6:d1:05:0c:51:00:eb:33:da:40:
b9:5b:fc:0d:3a:d6:11:1e:c0:45:dc:e3:98:3c:11:
86:71:b0:c5:5d:b1:18:93:cd:0f:99:17:66:24:17:
cb:04:35:cc:06:3b:72:d7:24:78:ab:a1:21:cf:77:
ba:c7:15:dd:d4:98:00:91:bc:f4:9b:e9:75:9d:37:
3c:e7:53:1d:12:0b:45:92:e7:ff:61:b2:b4:72:8a:
cf:bb:b7:c6:94:ea:0b:6c:22:c4:02:75:3a:c5:19:
97:b1:38:de:02:f7:53:78:df:c3:dd:b1:4d:da:af:
26:b5:41:50:2a:08:f2:fa:18:cc:3b:1b:e0:35:be:
66:af:b8:ab:93:d8:4f:24:50:56:fd:00:39:86:60:
02:d6:f3:19:ba:96:e5:02:43:dc:25:8d:03:94:49:
7b:4e:80:33:c5:8a:fb:9f:21:7b:8a:08:d2:4a:a3:
b8:b9:42:6e:d2:7b:db:a5:fb:bc:18:92:2e:5d:d3:
be:87:92:ef:cf:88:da:05:0f:0e:90:45:ee:5b:e2:
3d:46:17:e2:f5:93:5e:1d:15:8c:44:06:34:43:36:
a4:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:8B:60:9F:D0:F9:A7:F4:32:80:17:72:74:EA:1F:22:4D:F6:69:D0
X509v3 Authority Key Identifier:
keyid:67:45:31:45:16:48:3F:E2:7C:05:30:CC:B9:70:7C:37:6D:20:E7:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0UxRRZIP-J8BTDMuXB8N20g5_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/fb48fd-4ec5-43f1-93cc-8654786e20a9/1/Z0UxRRZIP-J8BTDMuXB8N20g5_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/fb48fd-4ec5-43f1-93cc-8654786e20a9/1/Z0UxRRZIP-J8BTDMuXB8N20g5_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:12:d1:1a:92:a8:68:0d:d4:e4:83:06:40:04:f3:1a:d6:87:
19:5d:ad:64:98:fe:67:c8:1e:52:d6:22:c8:50:f5:35:43:73:
5a:48:95:fb:8c:fb:22:6b:4a:bd:c7:16:fa:23:72:84:ef:ba:
2d:e8:e4:a9:d2:34:4a:4d:57:3d:66:88:7f:18:d5:a8:39:d3:
b6:23:75:da:f3:b9:c0:02:b1:bb:67:a9:b8:b1:ad:bc:51:8a:
b6:96:97:7e:3a:14:36:d8:95:ee:bb:2b:62:e9:15:12:bd:8b:
08:7d:06:eb:74:38:0a:e9:1c:54:ed:39:09:62:18:10:a3:b0:
46:5b:38:6b:b2:7b:a0:9f:05:b8:32:fc:54:f3:5e:29:5d:2e:
44:45:f5:6d:da:0c:3b:31:38:ea:c0:a6:2f:2c:c6:e0:9b:cb:
01:40:3f:10:b6:64:cd:80:84:ff:63:36:96:84:f1:d0:aa:f9:
ac:a1:97:84:4f:c8:53:29:af:e2:22:21:0f:61:1d:7d:52:69:
b6:e0:09:01:19:07:7e:44:47:7b:23:20:ee:fd:92:3b:71:da:
41:ac:0b:a6:7a:1e:95:bd:53:b3:7c:f7:11:3c:bf:46:06:f5:
53:aa:33:42:9a:9d:f2:84:cd:54:cf:ab:27:ba:b3:67:e8:db:
4a:e6:3e:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:20:10 2025 by rpki-client