Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/e66913-8f5f-47ef-a730-32c1b2cee593/1/ZYwMSZqOadl5X0vQtb8WgrHwD5o.mft
File: ZYwMSZqOadl5X0vQtb8WgrHwD5o.mft (raw, json)
Hash identifier: j3PsA/0XR5RJdrHWgGgAaLj0znBc6cPgweA0B8jQRfw=
Subject key identifier: 71:56:96:56:B6:72:3B:D7:C8:1A:5D:5D:A7:00:55:1B:4F:98:AE:E1
Authority key identifier: 65:8C:0C:49:9A:8E:69:D9:79:5F:4B:D0:B5:BF:16:82:B1:F0:0F:9A
Certificate issuer: /CN=658c0c499a8e69d9795f4bd0b5bf1682b1f00f9a
Certificate serial: 019A71B87F321224ACA7409BBB95606337FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZYwMSZqOadl5X0vQtb8WgrHwD5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/e66913-8f5f-47ef-a730-32c1b2cee593/1/ZYwMSZqOadl5X0vQtb8WgrHwD5o.mft
Manifest number: 0EA9
Signing time: Tue 11 Nov 2025 07:01:47 +0000
Manifest this update: Tue 11 Nov 2025 07:01:47 +0000
Manifest next update: Wed 12 Nov 2025 07:01:47 +0000
Files and hashes: 1: Hetd0acGcft4F4TkCZSRchEWHjU.roa (hash: DfxL/5EFMBfWrjWF+bprxAQN9pcVeRj5qm/6i9xfMgQ=)
2: ZYwMSZqOadl5X0vQtb8WgrHwD5o.crl (hash: QG+Bv8Z2yaDZ1Ywop0uyGGvaaxv2pk69NmK5dJ/XrU0=)
3: zBgovtm1ad-0i6Hlr99dwqaZZ8A.roa (hash: zlvsRotYH5pOPVXr3W3IYM5PD6gCr9N8XLSfPQUKoN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/e66913-8f5f-47ef-a730-32c1b2cee593/1/ZYwMSZqOadl5X0vQtb8WgrHwD5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/e66913-8f5f-47ef-a730-32c1b2cee593/1/ZYwMSZqOadl5X0vQtb8WgrHwD5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZYwMSZqOadl5X0vQtb8WgrHwD5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:7f:32:12:24:ac:a7:40:9b:bb:95:60:63:37:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=658c0c499a8e69d9795f4bd0b5bf1682b1f00f9a
Validity
Not Before: Nov 11 07:01:47 2025 GMT
Not After : Nov 12 07:01:47 2025 GMT
Subject: CN=71569656b6723bd7c81a5d5da700551b4f98aee1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d4:99:b4:a0:44:89:2c:2c:2f:49:91:90:c6:
58:32:67:22:08:ae:18:7b:4a:56:47:32:2b:31:c6:
be:ec:e2:9b:e9:72:9a:a2:27:56:a2:53:37:08:9a:
0a:d6:d1:57:43:df:e8:d3:d0:bf:4e:6d:ad:b4:13:
d0:88:90:b7:65:4d:73:f1:2b:29:36:8a:e0:ce:88:
12:59:4d:04:51:c0:81:c2:a0:38:8b:b7:60:8e:72:
8b:f3:20:ee:f0:1f:90:ee:63:b9:3a:2b:38:a7:be:
48:2a:a3:f0:9e:2f:bd:0a:d5:c0:9a:80:c8:e8:b5:
8b:e4:9f:9e:9b:42:23:e7:ac:11:ab:12:13:38:19:
b8:ca:12:ab:98:64:71:3a:91:0d:94:1f:75:4d:12:
5f:72:cc:92:76:69:11:88:63:e9:b6:65:89:0c:16:
50:fb:c6:56:7f:e6:b7:ba:ab:19:87:f6:c2:c3:d1:
6e:a8:97:bf:6b:cd:1c:aa:ea:c9:25:4c:b9:52:47:
06:0f:ad:88:99:27:5a:18:85:54:57:75:80:a1:0e:
f9:91:d5:96:7f:0c:51:cd:97:45:e1:dc:f8:e0:c5:
84:3e:27:9c:7f:3f:40:65:ec:e2:4b:50:52:61:a1:
a9:20:c6:fc:ce:0a:15:16:44:17:57:f4:22:53:29:
84:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:56:96:56:B6:72:3B:D7:C8:1A:5D:5D:A7:00:55:1B:4F:98:AE:E1
X509v3 Authority Key Identifier:
keyid:65:8C:0C:49:9A:8E:69:D9:79:5F:4B:D0:B5:BF:16:82:B1:F0:0F:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZYwMSZqOadl5X0vQtb8WgrHwD5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e66913-8f5f-47ef-a730-32c1b2cee593/1/ZYwMSZqOadl5X0vQtb8WgrHwD5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e66913-8f5f-47ef-a730-32c1b2cee593/1/ZYwMSZqOadl5X0vQtb8WgrHwD5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:ae:4a:2d:22:a1:69:51:a5:62:17:ac:6f:f1:c5:53:15:f9:
91:f4:17:0d:16:87:2b:a2:f7:d3:b9:b7:45:42:a9:2e:2d:24:
6c:01:97:be:db:bf:48:ee:4a:01:cc:81:97:40:2e:68:6d:f6:
d2:11:94:1e:0a:c6:b3:ae:fd:86:c3:ee:89:86:33:00:bd:86:
6b:ee:a9:03:24:a7:a7:4b:aa:fb:93:b9:66:1f:95:79:bf:fa:
ae:e3:75:23:cf:00:7b:e0:80:51:f1:e8:ce:5e:14:dd:e4:cd:
5c:75:24:d9:a7:4c:95:d0:c5:96:94:57:ca:ae:b5:e6:c3:58:
a4:ba:82:94:3b:51:21:0e:62:2b:e1:2f:c0:9c:bb:3d:6d:05:
e9:eb:a5:22:79:18:eb:af:4c:68:d0:e0:4b:76:1d:41:74:4c:
b5:19:af:3f:62:0f:51:e9:57:83:77:6a:f8:82:7d:7a:19:87:
d5:2a:3f:6c:16:d3:92:4b:ee:6f:44:f3:de:3c:5a:0c:0d:08:
66:2e:0d:32:4e:69:bb:c7:c9:ae:83:bb:33:80:2c:54:77:e0:
93:02:17:60:77:e6:82:03:9f:0b:37:02:6a:89:2e:c2:75:0a:
86:a8:f0:b1:dc:a8:47:74:8b:0f:4a:59:f1:26:24:81:ca:c1:
ec:a3:e6:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:43:15 2025 by rpki-client