Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/e4ce7c-ad7b-4006-8e6a-80352d1413d9/1/ZpJ7Kya1IUuWZdjchfQUcJcUmWw.mft
File: ZpJ7Kya1IUuWZdjchfQUcJcUmWw.mft (raw, json)
Hash identifier: kVMa/ouQiGCq6WMiYxaDoiaNCXOB/zbsIrRlat96nFE=
Subject key identifier: D9:BE:A1:FF:4A:56:CA:57:9A:D7:1E:2D:A9:8E:AA:93:2A:F7:53:9A
Authority key identifier: 66:92:7B:2B:26:B5:21:4B:96:65:D8:DC:85:F4:14:70:97:14:99:6C
Certificate issuer: /CN=66927b2b26b5214b9665d8dc85f414709714996c
Certificate serial: 019A7112D874C60BDC4408BE72BFBF83BB0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZpJ7Kya1IUuWZdjchfQUcJcUmWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/e4ce7c-ad7b-4006-8e6a-80352d1413d9/1/ZpJ7Kya1IUuWZdjchfQUcJcUmWw.mft
Manifest number: 1351
Signing time: Tue 11 Nov 2025 04:00:51 +0000
Manifest this update: Tue 11 Nov 2025 04:00:51 +0000
Manifest next update: Wed 12 Nov 2025 04:00:51 +0000
Files and hashes: 1: ZpJ7Kya1IUuWZdjchfQUcJcUmWw.crl (hash: AOtX0QBEVFKhSQ5a5REZTaCfCREvv5Agy/hSYhkLr5c=)
2: z14kTSlHc0FGtPp_p4eZCWL53uI.roa (hash: o0QCjev3qiHHVGYnELxUtNoSu9oIG3V8qNROrWFFFEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/e4ce7c-ad7b-4006-8e6a-80352d1413d9/1/ZpJ7Kya1IUuWZdjchfQUcJcUmWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/e4ce7c-ad7b-4006-8e6a-80352d1413d9/1/ZpJ7Kya1IUuWZdjchfQUcJcUmWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZpJ7Kya1IUuWZdjchfQUcJcUmWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:d8:74:c6:0b:dc:44:08:be:72:bf:bf:83:bb:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66927b2b26b5214b9665d8dc85f414709714996c
Validity
Not Before: Nov 11 04:00:51 2025 GMT
Not After : Nov 12 04:00:51 2025 GMT
Subject: CN=d9bea1ff4a56ca579ad71e2da98eaa932af7539a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:b4:59:23:b3:22:9f:8e:db:e6:30:cc:25:d4:
c0:22:65:17:02:63:6a:1c:11:f1:30:1a:10:c9:ee:
c8:93:4f:24:41:cb:75:98:7e:76:d2:2e:92:58:46:
d0:da:51:09:34:1b:bf:0d:ee:7d:e5:80:f3:73:4c:
1a:36:11:5e:57:05:32:c1:0e:2d:98:d1:6a:97:e3:
dc:c9:ca:17:40:ac:00:9e:99:69:c5:ac:90:dc:86:
95:ca:38:bc:a6:26:9b:70:b3:13:ee:b0:2c:ee:cb:
c6:b8:bd:14:11:22:18:7f:98:dd:93:9e:0c:86:90:
e4:48:a4:e1:a5:bc:4c:17:3d:f1:d6:36:1a:aa:11:
b2:4d:06:dd:0d:b1:7d:92:90:69:ee:6d:0f:4f:f4:
e8:23:a5:7d:76:bf:be:54:64:67:86:8c:b4:fb:8c:
17:32:55:7e:29:32:a1:f6:79:e3:22:e5:2f:b3:0e:
97:14:9e:68:dd:b8:70:9e:25:7b:03:40:7b:a1:97:
4f:4f:0a:e4:22:30:e7:00:19:65:7f:02:8c:7e:d4:
68:1d:9b:2d:33:40:be:59:9c:34:a6:e2:16:e4:56:
83:6d:03:4b:ef:51:ea:12:18:c4:67:d2:01:73:46:
98:8e:8e:d1:40:bc:17:79:80:60:ba:cb:c9:c2:c1:
37:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:BE:A1:FF:4A:56:CA:57:9A:D7:1E:2D:A9:8E:AA:93:2A:F7:53:9A
X509v3 Authority Key Identifier:
keyid:66:92:7B:2B:26:B5:21:4B:96:65:D8:DC:85:F4:14:70:97:14:99:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZpJ7Kya1IUuWZdjchfQUcJcUmWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/e4ce7c-ad7b-4006-8e6a-80352d1413d9/1/ZpJ7Kya1IUuWZdjchfQUcJcUmWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/e4ce7c-ad7b-4006-8e6a-80352d1413d9/1/ZpJ7Kya1IUuWZdjchfQUcJcUmWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:e2:15:47:b4:36:77:bd:eb:91:c9:6d:3a:ec:91:ee:88:34:
dd:24:45:60:4b:27:54:7e:c4:9c:75:9b:de:95:3b:a5:9f:3d:
53:dd:34:b4:e7:a0:23:36:aa:81:d2:65:29:21:47:05:b2:1a:
d8:a1:72:ec:89:d9:a0:0b:f1:04:29:66:63:af:bc:98:17:52:
7f:e8:87:07:10:8d:e3:b5:a5:ea:63:89:b1:5f:34:d5:52:4f:
8a:e1:6e:8c:3f:9b:32:46:6c:15:b2:78:1e:cc:70:38:e1:a5:
bd:91:1c:ea:1a:4a:9d:88:a7:46:08:01:fc:8e:e0:48:69:4b:
57:cd:79:3a:8a:c1:c2:af:0e:79:c6:65:c1:9e:71:74:bb:19:
fc:eb:84:2a:d2:87:fb:4a:bb:eb:92:1d:38:a1:80:55:69:e2:
df:60:64:5b:0d:14:81:1f:43:a2:4a:37:8c:d2:ae:ab:0f:36:
3f:c6:91:0b:14:af:19:16:09:2b:07:6a:27:49:d1:a0:14:ae:
e3:78:c4:34:84:e8:dd:00:4e:f3:89:88:3c:64:7b:4c:d0:28:
3f:aa:01:a7:a6:1a:9b:f3:ad:03:22:5a:12:7e:81:c6:57:46:
e6:4c:7c:13:78:da:4d:b9:55:5e:a5:c8:92:df:84:f6:54:d9:
61:6e:18:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:43:01 2025 by rpki-client