Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/86d2ae-7c37-4344-a1e6-e8edf29245c0/1/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.mft
File: ZwR7mHvpdCeFuo6LM6wHe_nHoiI.mft (raw, json)
Hash identifier: cox+uBzeS56AecGuMZegzI/SBC52B+OUMn9Kg/NLjLo=
Subject key identifier: CC:E2:88:7E:BB:24:C4:C0:CB:C4:4F:5E:AB:11:9E:FC:AD:2A:34:63
Authority key identifier: 67:04:7B:98:7B:E9:74:27:85:BA:8E:8B:33:AC:07:7B:F9:C7:A2:22
Certificate issuer: /CN=67047b987be9742785ba8e8b33ac077bf9c7a222
Certificate serial: 019A71B86AF738C8092CB8335F228B635AD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/86d2ae-7c37-4344-a1e6-e8edf29245c0/1/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.mft
Manifest number: 0EBA
Signing time: Tue 11 Nov 2025 07:01:42 +0000
Manifest this update: Tue 11 Nov 2025 07:01:42 +0000
Manifest next update: Wed 12 Nov 2025 07:01:42 +0000
Files and hashes: 1: ZwR7mHvpdCeFuo6LM6wHe_nHoiI.crl (hash: 1Vhm6KZ/FG94ajgTAZu7Um01DUUENTegHjM1DTPw6Mk=)
2: bmxfR1YI28e9AvruScrILUTRG3I.roa (hash: cqN9qg0IAUOQT2Uuvb3v+aRnSBYZJQOZClfPWFzUISg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/86d2ae-7c37-4344-a1e6-e8edf29245c0/1/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/86d2ae-7c37-4344-a1e6-e8edf29245c0/1/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:6a:f7:38:c8:09:2c:b8:33:5f:22:8b:63:5a:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67047b987be9742785ba8e8b33ac077bf9c7a222
Validity
Not Before: Nov 11 07:01:42 2025 GMT
Not After : Nov 12 07:01:42 2025 GMT
Subject: CN=cce2887ebb24c4c0cbc44f5eab119efcad2a3463
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e8:5f:6c:1a:93:88:91:f1:db:b6:0a:dc:4d:
88:ae:c7:31:5e:64:30:7e:77:29:24:33:5d:7a:57:
ba:39:f8:dd:ad:10:5b:5b:9e:0e:0c:3c:40:ba:86:
98:ac:1d:9b:56:a4:6e:7a:8e:74:0e:71:dd:ba:de:
52:17:3a:6d:c7:41:d9:b2:7d:13:b5:2e:b5:69:fd:
e7:70:a2:45:91:7c:a8:ba:60:35:c0:c2:07:7c:0b:
59:15:c3:94:0c:bc:8a:d8:22:0b:4d:03:17:35:04:
f2:ac:c4:fa:9a:0d:98:a6:b3:10:f0:d6:12:33:c9:
eb:ed:34:e7:38:9f:59:85:05:4a:3a:7b:a1:53:73:
98:8f:c2:60:3e:d3:c1:f1:f8:27:89:83:90:0f:b3:
2b:16:b9:3d:73:4e:c7:f4:02:cb:79:73:0a:5e:84:
bc:f7:0e:52:4f:4c:dc:04:fd:29:1e:7f:e1:ae:bd:
cc:88:ed:22:3c:62:fd:44:5e:7f:3f:ff:ba:38:3c:
28:b2:20:39:ae:dd:07:e5:5f:fd:6d:e0:7c:16:06:
a9:e1:ed:51:41:2d:fc:ee:32:85:7d:96:78:dd:a7:
7e:9b:ea:b4:bc:1f:5e:5d:59:ac:71:49:4d:e3:e7:
5e:9d:5d:a9:aa:6e:84:da:f3:07:4e:4f:17:cd:0f:
fb:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:E2:88:7E:BB:24:C4:C0:CB:C4:4F:5E:AB:11:9E:FC:AD:2A:34:63
X509v3 Authority Key Identifier:
keyid:67:04:7B:98:7B:E9:74:27:85:BA:8E:8B:33:AC:07:7B:F9:C7:A2:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/86d2ae-7c37-4344-a1e6-e8edf29245c0/1/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/86d2ae-7c37-4344-a1e6-e8edf29245c0/1/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:9a:e3:5f:96:79:39:4b:97:f4:2b:f2:0b:84:99:20:b3:96:
57:61:53:05:14:9f:cf:5a:1e:e5:03:26:a1:0d:5a:21:4d:8e:
71:29:42:94:04:2b:cf:bb:e8:a7:69:23:40:15:42:95:24:ba:
38:6f:ea:20:4b:18:7f:bf:78:fd:f3:f3:75:9d:61:53:f0:52:
73:82:7c:09:09:1d:47:71:29:45:cd:85:dd:db:de:8c:a4:1d:
d4:23:ee:d2:d8:b1:b3:17:a2:58:66:85:11:b9:0a:49:de:b3:
44:3f:7e:96:9d:dd:a3:93:68:3f:a5:6e:4b:62:16:75:10:73:
b3:d4:88:bb:7c:2b:ea:3d:56:31:e6:db:4f:87:6b:e9:41:04:
b1:46:4e:6c:a0:8e:3a:fa:83:82:96:eb:cf:93:07:3f:d8:14:
64:ae:95:83:93:99:d4:ba:e1:29:08:a8:86:9f:1d:22:f9:e1:
aa:07:52:10:59:d4:bd:fb:6a:b5:e7:b3:ce:3b:c2:c5:05:25:
95:ce:12:17:44:5c:f4:7c:01:7a:05:a5:a5:c4:04:9c:6d:19:
35:f8:ec:96:c6:70:e2:a0:fd:a3:d4:74:c9:9c:47:b9:b6:fb:
15:3b:97:c3:0c:04:f4:10:c0:00:81:67:6f:6b:73:3c:ef:81:
0a:1f:25:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:56:41 2025 by rpki-client