Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/cab79f-abc1-4a62-bc69-442299f412fd/1/ZOZ_frwKgQuIwKrTQMJu3LRd5l8.mft
File: ZOZ_frwKgQuIwKrTQMJu3LRd5l8.mft (raw, json)
Hash identifier: Pnpo4xXH8Y+PG6GFQ8QCnjthqS3UPOFGxsPm3w57v6Y=
Subject key identifier: 76:DC:FA:E5:2D:26:EE:78:C6:B5:B8:C3:66:70:72:07:33:78:6E:42
Authority key identifier: 64:E6:7F:7E:BC:0A:81:0B:88:C0:AA:D3:40:C2:6E:DC:B4:5D:E6:5F
Certificate issuer: /CN=64e67f7ebc0a810b88c0aad340c26edcb45de65f
Certificate serial: 019A733802DF64203CF3BCB13ED31358963C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZOZ_frwKgQuIwKrTQMJu3LRd5l8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/cab79f-abc1-4a62-bc69-442299f412fd/1/ZOZ_frwKgQuIwKrTQMJu3LRd5l8.mft
Manifest number: 114C
Signing time: Tue 11 Nov 2025 14:00:41 +0000
Manifest this update: Tue 11 Nov 2025 14:00:41 +0000
Manifest next update: Wed 12 Nov 2025 14:00:41 +0000
Files and hashes: 1: ZOZ_frwKgQuIwKrTQMJu3LRd5l8.crl (hash: 2+VrGw0Owx8vQYhkZtqxXuKFQgcQKv9kUlQGFmMvDJ8=)
2: natM_WPGOslxNGy-WWG31EWqeRQ.roa (hash: tw5Pi8YXZ8+HgAyIg5gw92v0qWpZtmlxf2AnJMSdWBA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/cab79f-abc1-4a62-bc69-442299f412fd/1/ZOZ_frwKgQuIwKrTQMJu3LRd5l8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/cab79f-abc1-4a62-bc69-442299f412fd/1/ZOZ_frwKgQuIwKrTQMJu3LRd5l8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZOZ_frwKgQuIwKrTQMJu3LRd5l8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:38:02:df:64:20:3c:f3:bc:b1:3e:d3:13:58:96:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64e67f7ebc0a810b88c0aad340c26edcb45de65f
Validity
Not Before: Nov 11 14:00:41 2025 GMT
Not After : Nov 12 14:00:41 2025 GMT
Subject: CN=76dcfae52d26ee78c6b5b8c36670720733786e42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:86:8d:37:d9:19:45:c1:d5:4f:3e:ea:5f:b0:
4b:c4:de:71:18:13:fd:fa:8c:5d:75:60:07:0d:8c:
5f:a6:b3:7f:ec:63:d1:51:92:a5:09:47:a6:9c:13:
3c:97:91:96:62:4e:04:5c:57:49:50:34:27:ec:ce:
97:8d:be:0f:8c:6b:3d:63:c6:df:8a:b6:e6:91:42:
eb:96:f0:c0:8b:fa:7a:88:95:75:90:61:ed:ea:2d:
4f:9a:c6:dc:61:71:6b:7c:91:fb:49:dd:de:6d:ba:
1c:63:cf:64:bb:a5:8f:60:d1:11:76:d9:1e:a7:be:
fc:bb:13:c6:fc:c8:19:53:c2:6b:be:c9:92:70:bb:
2f:b7:e5:c4:02:47:da:52:96:ce:75:14:d3:a0:3d:
c6:fc:b1:ad:30:cf:e9:39:f6:6a:e3:37:f2:cc:ab:
28:e4:8e:e3:7b:de:5d:bb:a7:fb:66:17:5e:67:49:
61:04:f5:2b:bd:23:cd:e9:5f:e8:4d:68:03:b6:ac:
04:96:d3:cb:52:ae:6c:f2:93:cd:95:8e:26:df:60:
6d:3e:a6:74:e6:6e:9c:cf:f4:db:0d:58:29:fd:15:
1e:bc:56:c5:08:4d:f3:ad:3c:45:ed:c1:98:e0:8f:
b6:8d:a6:5a:29:df:3a:b8:10:ce:73:98:47:c7:66:
ac:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:DC:FA:E5:2D:26:EE:78:C6:B5:B8:C3:66:70:72:07:33:78:6E:42
X509v3 Authority Key Identifier:
keyid:64:E6:7F:7E:BC:0A:81:0B:88:C0:AA:D3:40:C2:6E:DC:B4:5D:E6:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZOZ_frwKgQuIwKrTQMJu3LRd5l8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/cab79f-abc1-4a62-bc69-442299f412fd/1/ZOZ_frwKgQuIwKrTQMJu3LRd5l8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/cab79f-abc1-4a62-bc69-442299f412fd/1/ZOZ_frwKgQuIwKrTQMJu3LRd5l8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:b4:09:4e:eb:a5:cc:6a:29:de:34:bd:80:e3:53:92:85:93:
0e:93:e9:7f:cf:76:ee:9f:8c:8d:fc:c7:f4:89:a3:82:22:d9:
89:fc:e2:a1:d2:54:69:a0:c2:c0:84:52:6b:95:b3:c9:4c:40:
e1:52:a2:e0:ed:6e:a8:24:ef:d5:ed:6b:d7:8e:3c:b5:78:fa:
39:ae:c5:f4:13:81:67:d0:b9:ba:f1:62:d5:5b:b0:d9:5d:52:
1c:52:d0:e4:34:be:48:57:25:70:a9:da:d1:5f:c6:97:ea:4a:
ea:8a:c0:6f:f3:00:37:26:8a:f7:f7:75:46:23:e8:be:a7:d6:
ab:d3:95:49:04:5c:40:ec:e8:54:37:6d:b6:38:bf:10:23:3a:
b8:8d:42:80:c8:03:3d:f1:c6:fc:70:f5:ba:ef:73:01:67:71:
8d:a4:5f:d0:38:12:ba:8c:ba:88:a6:4b:f2:46:c3:0d:ff:92:
53:3c:df:9a:ed:58:51:3a:04:26:7c:b4:a3:92:29:40:af:62:
c2:3b:9a:1e:4b:18:76:3e:a5:80:c0:33:90:03:fe:bb:82:d3:
68:b3:96:a4:40:b9:dc:3b:54:c4:f1:de:be:22:a6:33:84:9f:
a5:cd:1d:aa:14:d6:fb:d4:a6:5b:0e:0f:11:89:a0:49:dc:7a:
b9:a1:d8:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:52:33 2025 by rpki-client