Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/d6d569-f491-43f1-94f2-0656d0b34b24/1/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.mft
File: ZFSQOrSFsWzKhi0V5tk_ug5N3gE.mft (raw, json)
Hash identifier: q9DmU+ACHACqVXrkvcUbJfRCgDBToHdt1KDaGLkoMGk=
Subject key identifier: 82:AB:00:A3:07:72:1E:FD:95:E7:8B:25:74:3E:20:5B:93:B4:EF:29
Authority key identifier: 64:54:90:3A:B4:85:B1:6C:CA:86:2D:15:E6:D9:3F:BA:0E:4D:DE:01
Certificate issuer: /CN=6454903ab485b16cca862d15e6d93fba0e4dde01
Certificate serial: 019A1A2B7550FEC1C8CF8636CC754B962AF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/d6d569-f491-43f1-94f2-0656d0b34b24/1/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.mft
Manifest number: 0291
Signing time: Sat 25 Oct 2025 07:00:46 +0000
Manifest this update: Sat 25 Oct 2025 07:00:46 +0000
Manifest next update: Sun 26 Oct 2025 07:00:46 +0000
Files and hashes: 1: GFCwLYZ1iVeKH5Z8sR6pOUA3Lm8.roa (hash: cER4WH5eXS4Lm/LZABdPjot9dROZgtRCRJnalyX5t/M=)
2: ZFSQOrSFsWzKhi0V5tk_ug5N3gE.crl (hash: CTF0zYiWave6Ux9xF9YJw0TD5TjKLPqnT0iRFXLnwBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/d6d569-f491-43f1-94f2-0656d0b34b24/1/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/d6d569-f491-43f1-94f2-0656d0b34b24/1/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 07:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1a:2b:75:50:fe:c1:c8:cf:86:36:cc:75:4b:96:2a:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6454903ab485b16cca862d15e6d93fba0e4dde01
Validity
Not Before: Oct 25 07:00:46 2025 GMT
Not After : Oct 26 07:00:46 2025 GMT
Subject: CN=82ab00a307721efd95e78b25743e205b93b4ef29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1f:6b:cd:47:94:27:b5:1d:ea:68:87:63:54:
b3:15:54:33:2e:c6:8d:80:95:d7:20:70:f0:42:63:
59:7d:93:4f:05:ee:4f:6c:ca:7f:e4:60:8c:03:b9:
b0:d2:f0:94:a4:de:13:13:d6:a1:2d:3c:49:ef:48:
fa:3f:93:fe:48:e4:16:a3:8c:86:95:c3:35:4d:0d:
4a:9e:88:85:a3:31:86:42:54:0c:47:c9:e7:51:f0:
35:79:7b:4c:77:35:42:91:d2:08:91:de:e5:54:38:
8d:3d:4e:f6:eb:53:19:9c:2d:4a:84:4d:8c:38:60:
52:1d:2e:0e:af:ee:95:e5:c6:68:ee:7f:be:10:2a:
98:4b:53:c7:2b:cc:43:0c:11:65:79:65:40:c6:19:
43:54:2c:5f:9d:fa:40:ba:d7:53:57:04:92:7c:87:
3c:4f:4c:0a:a5:09:34:1a:1c:5e:60:eb:7e:d5:d4:
48:ab:e7:01:d9:d8:d5:07:df:4e:31:62:ac:69:4a:
a6:fe:ee:55:64:70:0d:74:bf:09:00:a5:de:27:28:
80:6c:9e:31:f2:96:cd:8d:02:13:a4:ea:9b:cc:5c:
6e:5b:af:72:48:95:14:e3:fd:6b:5a:2c:a5:8f:45:
1e:8b:03:5c:1d:de:fa:7b:b2:db:ba:62:f5:3d:31:
81:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:AB:00:A3:07:72:1E:FD:95:E7:8B:25:74:3E:20:5B:93:B4:EF:29
X509v3 Authority Key Identifier:
keyid:64:54:90:3A:B4:85:B1:6C:CA:86:2D:15:E6:D9:3F:BA:0E:4D:DE:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d6d569-f491-43f1-94f2-0656d0b34b24/1/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d6d569-f491-43f1-94f2-0656d0b34b24/1/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:a8:b6:59:2e:23:34:2f:19:1d:5a:8b:b7:e9:61:ee:fd:a3:
1f:26:9e:82:29:e6:ab:80:49:bb:f1:fa:71:05:fc:f3:7c:1b:
ec:bd:c2:4e:c2:3d:32:79:01:e6:82:27:7c:93:e0:35:6c:36:
6e:74:da:8f:df:13:77:9d:05:d0:a2:b1:17:5b:21:b6:c8:95:
76:ae:d5:2e:6b:5c:9d:b5:20:f1:e1:ee:98:43:9c:d8:9b:99:
d6:99:19:87:85:20:96:9b:80:16:07:d6:ee:c9:eb:7a:45:05:
a0:5c:e9:07:d4:3b:d2:66:ed:72:9c:6b:fb:2d:e0:ac:36:cc:
73:ae:d1:12:9c:c0:ff:03:44:66:ba:d9:1b:1f:db:7f:85:90:
4c:74:e4:fe:6e:44:54:10:22:fc:cf:34:bf:35:d8:16:41:c3:
06:34:27:a0:9c:82:a2:4c:84:d9:5a:69:b1:5f:31:b5:44:97:
93:2d:bd:4c:bb:8c:2c:3c:ab:a9:89:ba:8b:ea:ff:f6:eb:51:
7a:ca:bf:e2:88:52:ae:55:60:18:43:f3:7c:37:2b:ff:21:69:
68:a7:0e:cc:b6:d8:96:5d:a7:2c:60:18:05:06:b8:4b:b3:7c:
cd:4b:05:6d:98:59:22:2d:f4:5e:ae:ee:4f:56:3e:d8:07:43:
a1:e8:9c:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 13:33:42 2025 by rpki-client