Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/b8d400-e6e8-41ef-ad24-55c3a28e62c3/1/ZgwymWrhJGGJciLi2cwJOTCSfd0.mft
File: ZgwymWrhJGGJciLi2cwJOTCSfd0.mft (raw, json)
Hash identifier: 5dW/UTnitrtw1OP/1MknsxUzt9RukcPnBDGBSc7hxOM=
Subject key identifier: 29:1E:56:EB:09:1E:B5:5C:A1:45:36:87:79:57:8D:E6:2E:C2:7C:D1
Authority key identifier: 66:0C:32:99:6A:E1:24:61:89:72:22:E2:D9:CC:09:39:30:92:7D:DD
Certificate issuer: /CN=660c32996ae12461897222e2d9cc093930927ddd
Certificate serial: 019A7112F1127B93DE6BF3502536EEBF8A7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZgwymWrhJGGJciLi2cwJOTCSfd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/b8d400-e6e8-41ef-ad24-55c3a28e62c3/1/ZgwymWrhJGGJciLi2cwJOTCSfd0.mft
Manifest number: 1723
Signing time: Tue 11 Nov 2025 04:00:58 +0000
Manifest this update: Tue 11 Nov 2025 04:00:58 +0000
Manifest next update: Wed 12 Nov 2025 04:00:58 +0000
Files and hashes: 1: ZgwymWrhJGGJciLi2cwJOTCSfd0.crl (hash: Z6ltypzNv4GE2rk/M5OZ+hk76ioX8amiZr30UC7B8rs=)
2: eTKPP1Wu3aoon8pt_QrTkfCfijI.roa (hash: 40MqBGQjbWUX+1wVm2enGIIcrfvo/5OK7+JG7rETf4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/b8d400-e6e8-41ef-ad24-55c3a28e62c3/1/ZgwymWrhJGGJciLi2cwJOTCSfd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/b8d400-e6e8-41ef-ad24-55c3a28e62c3/1/ZgwymWrhJGGJciLi2cwJOTCSfd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZgwymWrhJGGJciLi2cwJOTCSfd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:f1:12:7b:93:de:6b:f3:50:25:36:ee:bf:8a:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=660c32996ae12461897222e2d9cc093930927ddd
Validity
Not Before: Nov 11 04:00:58 2025 GMT
Not After : Nov 12 04:00:58 2025 GMT
Subject: CN=291e56eb091eb55ca145368779578de62ec27cd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:aa:dc:bb:95:d5:70:50:fb:29:18:d5:3e:17:
a4:a8:ea:74:c3:43:52:9e:e6:6b:c8:84:e1:c7:f3:
fb:50:72:f0:25:fa:48:64:67:05:2a:bb:0d:dc:bd:
29:57:69:1d:8d:07:f6:32:1c:3e:b2:96:af:b8:9f:
fb:fa:36:e7:18:b1:3f:dc:ef:f9:32:08:55:4a:ca:
99:ec:f8:d2:fe:c5:3b:82:07:45:bc:59:5b:c7:c5:
51:36:01:85:fa:1a:4e:88:f3:e6:0e:6c:58:9b:57:
a3:f0:89:48:41:e9:75:78:a1:41:2c:fe:5b:ed:03:
8d:d2:a6:3b:45:e6:3c:a3:00:82:c2:61:48:d8:64:
59:67:54:08:af:fc:24:8a:9b:fc:78:c7:17:a3:55:
24:a9:a4:78:73:a2:69:d6:2e:2a:11:d4:82:e3:70:
54:1e:df:4e:7f:b7:22:bb:ee:ee:c1:ef:c6:c7:9c:
45:c1:b6:ed:ba:c2:d4:4e:ec:0c:50:c9:42:74:89:
4e:f9:12:cd:5c:bc:9b:ac:97:ce:e4:1d:01:07:2f:
29:a5:40:3c:4a:ff:97:91:82:e1:82:27:98:b2:6b:
b2:b3:2b:04:11:70:1c:29:24:65:f1:7c:50:5f:b2:
b5:b7:14:e6:bb:38:d4:fd:19:ca:23:a5:94:0c:8e:
9b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:1E:56:EB:09:1E:B5:5C:A1:45:36:87:79:57:8D:E6:2E:C2:7C:D1
X509v3 Authority Key Identifier:
keyid:66:0C:32:99:6A:E1:24:61:89:72:22:E2:D9:CC:09:39:30:92:7D:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZgwymWrhJGGJciLi2cwJOTCSfd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b8d400-e6e8-41ef-ad24-55c3a28e62c3/1/ZgwymWrhJGGJciLi2cwJOTCSfd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b8d400-e6e8-41ef-ad24-55c3a28e62c3/1/ZgwymWrhJGGJciLi2cwJOTCSfd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:b9:4d:5c:38:11:6f:2e:aa:e3:27:f9:32:00:d9:3e:21:91:
9c:e5:bd:ed:5f:c4:cc:1d:9a:b6:cf:fd:ee:3e:4d:70:15:12:
02:bf:22:22:9d:3d:28:65:11:39:78:7d:b7:77:63:4d:e1:5b:
07:f3:bf:5b:a7:b9:2c:74:67:31:10:4e:05:83:75:f2:69:01:
9e:77:30:be:00:42:6a:45:a4:1f:59:1a:39:7a:cf:2e:a0:03:
37:45:34:11:da:36:db:c4:0d:7b:1d:20:55:50:db:aa:77:c5:
f6:a4:61:59:72:e6:86:bd:88:a6:2b:f5:d4:3d:12:3f:a5:d5:
1c:30:75:91:66:a2:5f:2c:4b:d3:b4:3b:36:48:78:f3:2a:4b:
00:8c:fa:45:e3:31:1d:85:a6:24:3a:b5:91:24:f5:ff:63:9a:
fb:84:0c:a0:3a:cc:16:d5:c3:90:b2:31:4a:d1:50:cb:ec:b0:
dc:bc:15:e3:af:8a:25:58:27:32:54:60:05:4a:28:e4:30:f6:
03:a1:01:d2:d0:66:4d:b9:85:eb:9f:73:29:8f:be:cd:9d:9a:
04:0e:73:b7:52:4f:3c:49:91:85:e4:24:13:38:43:dd:cc:e5:
7d:61:6d:35:af:e9:56:b8:94:d2:ef:3a:4a:e0:d7:ec:c2:a6:
16:ea:65:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:39:06 2025 by rpki-client