Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/6414f1-d468-4d97-b299-d768a77d57f4/1/zlWB0nSK_Pd5Znl397ZznuT5_A0.mft
File: zlWB0nSK_Pd5Znl397ZznuT5_A0.mft (raw, json)
Hash identifier: PE8dCwgs97Klg2chIXMolHULs38BenvHmEiJ5mQ4vbM=
Subject key identifier: C4:8D:A8:B6:33:17:BD:DA:EB:00:10:7A:06:FD:E8:E7:4A:15:ED:6D
Authority key identifier: CE:55:81:D2:74:8A:FC:F7:79:66:79:77:F7:B6:73:9E:E4:F9:FC:0D
Certificate issuer: /CN=ce5581d2748afcf779667977f7b6739ee4f9fc0d
Certificate serial: 019A71B8997229201A06A6F513C19F9F95EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zlWB0nSK_Pd5Znl397ZznuT5_A0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/6414f1-d468-4d97-b299-d768a77d57f4/1/zlWB0nSK_Pd5Znl397ZznuT5_A0.mft
Manifest number: 108B
Signing time: Tue 11 Nov 2025 07:01:54 +0000
Manifest this update: Tue 11 Nov 2025 07:01:54 +0000
Manifest next update: Wed 12 Nov 2025 07:01:54 +0000
Files and hashes: 1: i-wVHRnuTYtFq7EOptpWJBt3Mdw.roa (hash: dyBwX82dFdjJwih5rdCwN8ZxNRpPJvl5rysORp718qc=)
2: zlWB0nSK_Pd5Znl397ZznuT5_A0.crl (hash: hyI25H9qVdEV1GYcZRzX03NreVO3lIfr+GZcQf0EeM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/6414f1-d468-4d97-b299-d768a77d57f4/1/zlWB0nSK_Pd5Znl397ZznuT5_A0.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/6414f1-d468-4d97-b299-d768a77d57f4/1/zlWB0nSK_Pd5Znl397ZznuT5_A0.mft
rsync://rpki.ripe.net/repository/DEFAULT/zlWB0nSK_Pd5Znl397ZznuT5_A0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:99:72:29:20:1a:06:a6:f5:13:c1:9f:9f:95:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce5581d2748afcf779667977f7b6739ee4f9fc0d
Validity
Not Before: Nov 11 07:01:54 2025 GMT
Not After : Nov 12 07:01:54 2025 GMT
Subject: CN=c48da8b63317bddaeb00107a06fde8e74a15ed6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:83:9f:2c:75:fe:2e:46:c4:ce:4e:65:be:f1:
57:bd:73:b3:8d:3a:20:3b:84:f3:5c:b1:c7:64:91:
f9:80:27:1e:c3:b7:40:0c:49:d4:8c:19:e5:ad:25:
97:f2:67:1c:c6:ef:d8:ff:56:b5:50:83:64:bb:32:
9a:e3:71:7d:54:7d:fb:4d:69:4c:bd:25:01:0d:a5:
b7:64:e9:01:b1:6e:60:0b:49:46:83:1e:1b:09:d3:
14:10:ec:9d:e9:78:d9:63:d6:13:57:dc:d8:b3:2e:
cb:78:23:b9:6b:d3:3f:5e:4e:3d:54:f2:e7:83:5b:
38:5e:b4:a0:49:e4:f7:2e:db:86:f1:f8:cb:7c:f1:
26:7b:45:89:be:31:29:21:d2:99:be:48:12:cf:f5:
a5:68:61:ff:52:82:ab:17:63:b8:2b:7d:c2:a7:14:
30:ba:2b:2e:b4:b1:87:98:ae:a7:ab:b8:41:db:57:
43:3c:e7:d2:29:35:03:fe:3b:64:23:cb:ec:92:6b:
37:c8:2e:68:2f:4d:c8:17:22:b3:41:30:91:b3:ff:
a2:8a:c5:3b:ca:dc:95:2c:b3:7c:ce:76:8c:8c:6b:
c6:3c:63:09:55:a0:f9:86:e1:5c:cc:9d:ca:e9:18:
33:0e:f5:57:24:86:c4:d6:32:f7:32:4f:53:fc:e1:
27:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:8D:A8:B6:33:17:BD:DA:EB:00:10:7A:06:FD:E8:E7:4A:15:ED:6D
X509v3 Authority Key Identifier:
keyid:CE:55:81:D2:74:8A:FC:F7:79:66:79:77:F7:B6:73:9E:E4:F9:FC:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zlWB0nSK_Pd5Znl397ZznuT5_A0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6414f1-d468-4d97-b299-d768a77d57f4/1/zlWB0nSK_Pd5Znl397ZznuT5_A0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6414f1-d468-4d97-b299-d768a77d57f4/1/zlWB0nSK_Pd5Znl397ZznuT5_A0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:bf:de:13:f9:d3:d3:1e:6b:f9:e7:87:8f:75:5f:05:2b:79:
01:13:4d:5c:9e:4a:98:8d:a9:8b:43:fa:96:0c:92:31:57:7e:
7c:ad:ec:49:11:8e:bc:11:73:a5:15:54:f0:a0:d4:64:5b:4e:
33:c3:b0:a1:b0:8e:7f:6e:92:51:45:2c:7b:58:f4:37:1b:df:
74:cc:7f:e4:e3:01:a6:68:e5:d9:78:35:cb:df:f3:c8:70:29:
59:0a:f5:65:85:92:63:90:e2:79:1b:13:8c:24:39:2f:38:8c:
5b:33:80:f2:ec:f8:de:78:07:c3:a7:19:79:a7:2f:2d:6f:a6:
b2:2c:52:f4:e5:c1:7a:b9:44:65:c5:ef:2f:ee:fd:83:0a:d7:
20:d1:c4:3c:7c:98:56:02:5a:f0:dd:b6:a0:89:45:cb:ae:ef:
e9:43:9d:3b:1a:49:c4:e6:27:1c:f0:53:14:d1:ec:e6:ec:74:
bb:f5:57:e3:64:5e:4b:89:48:c2:c2:cf:4d:47:1d:3c:26:24:
93:bb:e1:1c:6d:32:ed:8b:35:56:9a:ea:a8:57:77:e0:d3:af:
69:e3:5f:fa:ee:95:ff:aa:3c:23:45:b7:7a:06:da:55:c6:71:
2f:64:c7:90:99:ba:b3:42:a6:6c:c9:99:17:ee:45:b0:43:49:
ed:3b:34:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:51:47 2025 by rpki-client