Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/736a4a-39e0-4119-b4cb-082d924c2f33/1/ZctPbNhIn93Rc5cKDvRNThVHpAU.mft
File: ZctPbNhIn93Rc5cKDvRNThVHpAU.mft (raw, json)
Hash identifier: qjkzOjoUv6ha6FpibRfYAFmAOUPLeYAOho7liKuBhfY=
Subject key identifier: A3:10:0F:0F:81:88:FD:65:9F:E9:E2:E4:95:26:CB:99:01:E3:50:02
Authority key identifier: 65:CB:4F:6C:D8:48:9F:DD:D1:73:97:0A:0E:F4:4D:4E:15:47:A4:05
Certificate issuer: /CN=65cb4f6cd8489fddd173970a0ef44d4e1547a405
Certificate serial: 019A72934CB763365334F3AF0758C3E3B568
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZctPbNhIn93Rc5cKDvRNThVHpAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/736a4a-39e0-4119-b4cb-082d924c2f33/1/ZctPbNhIn93Rc5cKDvRNThVHpAU.mft
Manifest number: 0E86
Signing time: Tue 11 Nov 2025 11:00:47 +0000
Manifest this update: Tue 11 Nov 2025 11:00:47 +0000
Manifest next update: Wed 12 Nov 2025 11:00:47 +0000
Files and hashes: 1: 23ACakt78guGwZL3RTi3BKpWsN0.roa (hash: ghjCo7Sw3s2bis0gLmZ8QzY5m7KOd3dJNA0mX218fws=)
2: ZctPbNhIn93Rc5cKDvRNThVHpAU.crl (hash: S10jOtrmP6b55HxRDSg6ZZbc1mapQ2zsrNarFVECPjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/736a4a-39e0-4119-b4cb-082d924c2f33/1/ZctPbNhIn93Rc5cKDvRNThVHpAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/736a4a-39e0-4119-b4cb-082d924c2f33/1/ZctPbNhIn93Rc5cKDvRNThVHpAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZctPbNhIn93Rc5cKDvRNThVHpAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:4c:b7:63:36:53:34:f3:af:07:58:c3:e3:b5:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65cb4f6cd8489fddd173970a0ef44d4e1547a405
Validity
Not Before: Nov 11 11:00:47 2025 GMT
Not After : Nov 12 11:00:47 2025 GMT
Subject: CN=a3100f0f8188fd659fe9e2e49526cb9901e35002
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d5:a6:89:4a:5f:9d:1d:68:8c:46:76:2b:c0:
3d:a2:6d:01:90:f4:b1:31:99:a9:0b:95:0d:67:61:
47:32:f3:e8:77:72:a6:66:da:21:c0:70:fe:df:ba:
06:ac:6f:39:e3:b3:e2:1e:15:57:27:16:e9:f0:a3:
b2:91:09:65:45:f8:03:02:a4:ba:1a:55:9a:86:0f:
d1:8f:62:ea:d5:fa:97:0f:42:93:0a:d2:a9:23:65:
e9:95:a5:28:f8:0b:d6:35:1f:33:ca:82:3e:3d:37:
d8:42:55:84:a7:a2:39:c3:b0:94:a9:6c:4d:7e:80:
86:56:90:bd:c9:46:7a:b6:97:f6:5f:56:88:41:1d:
c3:35:1e:fb:90:f9:cb:09:4d:53:e2:74:0a:78:f4:
3e:28:8c:6e:9b:45:a6:c8:4f:5e:22:de:03:0c:01:
a3:44:b4:d0:7c:dd:34:a3:e0:2a:69:f0:a4:e4:5a:
e7:f9:16:ab:a8:e0:75:3d:50:fa:35:97:8a:10:b4:
78:7c:14:29:b0:a9:9c:5a:d1:0f:17:55:9c:90:ef:
06:63:d6:6f:d8:94:50:a3:20:e8:da:0e:0f:23:33:
ce:b5:39:d5:05:c9:11:64:51:b0:dc:6e:73:4f:25:
5d:fc:b0:dd:09:54:eb:46:d0:1c:6f:8f:de:3e:0d:
2b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:10:0F:0F:81:88:FD:65:9F:E9:E2:E4:95:26:CB:99:01:E3:50:02
X509v3 Authority Key Identifier:
keyid:65:CB:4F:6C:D8:48:9F:DD:D1:73:97:0A:0E:F4:4D:4E:15:47:A4:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZctPbNhIn93Rc5cKDvRNThVHpAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/736a4a-39e0-4119-b4cb-082d924c2f33/1/ZctPbNhIn93Rc5cKDvRNThVHpAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/736a4a-39e0-4119-b4cb-082d924c2f33/1/ZctPbNhIn93Rc5cKDvRNThVHpAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:82:c0:bb:74:ec:28:40:c8:3b:fb:53:65:27:a9:41:c8:a9:
34:3e:fb:dc:0b:ab:48:a2:e6:10:64:82:fb:60:73:8a:3f:9e:
cc:29:36:27:0f:7c:e0:12:b1:14:5e:73:7f:d1:d5:47:70:e3:
0a:74:2e:3b:dd:5d:50:04:4a:00:29:c7:49:73:6c:ee:37:23:
40:86:df:86:78:4e:d2:82:47:8e:0f:9d:83:3d:19:e3:f3:5e:
40:16:8f:e7:92:86:20:91:67:04:a9:4e:89:aa:66:7f:f7:a4:
62:ba:c2:39:3f:f0:8b:d5:ae:c4:15:43:13:37:b1:d1:38:94:
c8:4b:54:bb:6d:c6:58:38:5d:2c:c3:0a:95:0b:9b:20:62:90:
0f:d9:05:2f:17:26:69:10:d6:cc:24:ab:0c:d8:df:e1:0e:56:
ae:aa:ea:43:b9:fb:da:c2:95:da:47:13:bf:17:09:a9:2f:b7:
8f:d7:42:7e:d5:7d:52:0b:02:25:1e:2d:22:8b:0c:79:45:c1:
f6:c9:cc:e7:6d:48:aa:e1:d3:05:1c:3b:cc:ae:43:e8:b5:94:
34:c6:39:96:7e:82:65:ad:17:18:08:3c:44:19:45:8c:8c:3f:
0f:4d:f0:b7:b1:a8:79:eb:b4:f1:70:bb:75:07:dc:cb:d3:7c:
95:d8:f7:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:19:39 2025 by rpki-client