Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.mft
File: ZaZluQBpvXGFBgLnQAxSl5Mmnjk.mft (raw, json)
Hash identifier: phOrhhSWoMlVYYWlPzifgVUaNA3YS3v63f9B9YltKlI=
Subject key identifier: 4B:9A:C9:EB:9C:EE:8F:E3:D1:3B:29:D1:75:19:8B:EB:37:F3:98:27
Authority key identifier: 65:A6:65:B9:00:69:BD:71:85:06:02:E7:40:0C:52:97:93:26:9E:39
Certificate issuer: /CN=65a665b90069bd71850602e7400c529793269e39
Certificate serial: 019A23D340508A4E05A867964ECC9695C568
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.mft
Manifest number: 0644
Signing time: Mon 27 Oct 2025 04:00:38 +0000
Manifest this update: Mon 27 Oct 2025 04:00:38 +0000
Manifest next update: Tue 28 Oct 2025 04:00:38 +0000
Files and hashes: 1: 1-P9YegJEgTTrNaAEU3IIuc08RmY.roa (hash: VMR860mh90RZ0uHCWx/O5Sa1yv7ih7Q2heb0CHOeN9M=)
2: DeGtb7yujTyTVa3OH4DyZgT0oXs.roa (hash: nw8jgAJXgkkRIoQf1v0bYUYfpASn5VshZprEj2zsrkk=)
3: EMVR9NYVRq-EMjxpptyq2L_gJw8.roa (hash: ae6WIIHau+j7Ux1GHG57mV6lm8wtBV6sLPHMj084L2M=)
4: GjPy1tsdvgbyCKZxZGu0WrgmPwk.roa (hash: Gjo03csZv216WbwMAfrV2mPHc5TstpRZcbzipd7HL+w=)
5: ZaZluQBpvXGFBgLnQAxSl5Mmnjk.crl (hash: vFrFDyHfLRRmH9xH6aiVo4XND2ogKe7gDyCcpts7Uqs=)
6: kNJTv0u8R3n31XhM175qS3qSPYc.roa (hash: yEcxvFp6oLKPqomZkL6wGasrZzjv/ubXMRsnyY1hRmM=)
7: oBmDtOMzv9uYHMZKHsP_7TZtJDo.roa (hash: 1TEsgDEf5icrK07cJlsmMerQGE88qLGKElgw/ofxA2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 04:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:d3:40:50:8a:4e:05:a8:67:96:4e:cc:96:95:c5:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65a665b90069bd71850602e7400c529793269e39
Validity
Not Before: Oct 27 04:00:38 2025 GMT
Not After : Oct 28 04:00:38 2025 GMT
Subject: CN=4b9ac9eb9cee8fe3d13b29d175198beb37f39827
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:fe:eb:74:5f:c0:6a:ab:9d:bc:c3:05:19:18:
25:99:11:18:95:18:9c:f4:6e:76:66:29:db:3d:6a:
8a:41:99:32:00:8f:eb:6f:f7:e3:f7:41:d3:88:6f:
a4:02:02:e7:78:74:85:88:f2:24:ac:09:f8:a5:0e:
0e:f4:f8:cd:6b:ab:74:af:84:f6:27:16:c9:a2:1b:
55:cc:98:4a:3f:29:51:90:08:bb:46:5d:c6:70:da:
33:95:2a:68:bb:fc:eb:f6:8e:2a:6e:50:5f:d6:1d:
00:7e:2a:b0:dc:cc:9b:58:c2:81:0b:7b:1d:ac:7f:
37:0d:ab:be:59:7b:3b:45:bc:5b:96:5f:5d:18:bf:
00:08:38:89:6b:c5:1c:22:d8:63:c3:ca:13:cf:59:
87:0e:67:d2:25:0a:9c:6b:3c:8f:57:f7:e2:7c:e7:
82:b9:0e:42:ba:89:81:ee:d9:60:3a:b1:ce:2f:d1:
12:b4:95:09:0e:1f:18:6c:1c:28:59:36:6c:ad:52:
6e:a5:62:b3:eb:66:88:bd:b3:42:a4:7b:64:51:24:
ac:8e:74:ce:4b:96:9d:0d:cd:20:88:15:40:da:f7:
96:20:81:d6:35:d8:a2:fd:6d:0c:31:50:f6:40:ce:
50:0d:75:e8:07:e6:7c:ea:1a:42:2d:68:c9:93:8c:
12:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:9A:C9:EB:9C:EE:8F:E3:D1:3B:29:D1:75:19:8B:EB:37:F3:98:27
X509v3 Authority Key Identifier:
keyid:65:A6:65:B9:00:69:BD:71:85:06:02:E7:40:0C:52:97:93:26:9E:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:bc:e3:ef:d1:1a:08:6e:24:20:15:d8:39:04:77:8d:7c:fd:
aa:e3:94:03:df:d6:68:c1:f1:4a:0e:61:7d:b4:aa:5a:73:7a:
2e:13:36:89:01:b5:32:87:de:35:6d:5f:61:70:46:9c:35:1d:
82:f5:77:9e:c6:38:36:c0:60:49:63:97:d0:d1:64:f7:9b:78:
4f:89:10:c7:67:f0:ea:0b:f9:fe:bf:ea:21:6b:e2:33:51:67:
d0:65:c5:bf:13:e3:c4:b7:5b:a4:86:5d:78:96:a3:91:1a:80:
f9:0c:3a:ea:7a:05:e7:a7:c2:7c:9c:cb:02:e8:1b:54:6a:10:
42:2f:23:ce:a8:ab:70:82:df:c5:7b:a5:07:16:a9:e2:31:b5:
bb:d3:f5:37:6f:06:96:00:e3:78:fa:a4:e6:fd:9d:1b:9d:8a:
6a:2e:7c:e8:4c:cb:c7:bf:83:64:f7:f9:89:2f:23:84:7a:c7:
46:28:98:26:a2:54:84:57:89:02:1f:26:1f:41:dd:a6:0b:1c:
95:db:46:fd:80:0d:e0:8c:60:d8:da:e5:e8:39:95:46:60:c1:
12:51:64:d3:28:7a:0b:a4:95:99:2d:c7:ae:58:66:4f:bf:7b:
20:84:f1:14:a4:72:38:b0:65:11:18:e6:21:2f:5f:08:6b:7e:
6d:c3:1e:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 10:00:57 2025 by rpki-client