Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/6a2e5f-9bb9-43a4-b452-460c89b392b3/1/zNLcTzj5a21HeWmI7N3wxtDE6DI.mft
File: zNLcTzj5a21HeWmI7N3wxtDE6DI.mft (raw, json)
Hash identifier: StzVxLrq7rBvz9q0YoZ/jjIWjFHE5vIPcszbuUNkOKY=
Subject key identifier: 16:3F:35:D6:18:D0:D5:C7:8B:48:39:28:6E:9E:BB:23:A1:87:13:08
Authority key identifier: CC:D2:DC:4F:38:F9:6B:6D:47:79:69:88:EC:DD:F0:C6:D0:C4:E8:32
Certificate issuer: /CN=ccd2dc4f38f96b6d47796988ecddf0c6d0c4e832
Certificate serial: 019A72266B8C64C2E137B2492D35F94E50AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNLcTzj5a21HeWmI7N3wxtDE6DI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/6a2e5f-9bb9-43a4-b452-460c89b392b3/1/zNLcTzj5a21HeWmI7N3wxtDE6DI.mft
Manifest number: 02D4
Signing time: Tue 11 Nov 2025 09:01:51 +0000
Manifest this update: Tue 11 Nov 2025 09:01:51 +0000
Manifest next update: Wed 12 Nov 2025 09:01:51 +0000
Files and hashes: 1: ckBMIFhsxRrJd8g3723Ngrkob0E.roa (hash: 2+AxiQZG50JBBA5rPTQbIhRHNAnVw7yeAiKa0FFBttM=)
2: zNLcTzj5a21HeWmI7N3wxtDE6DI.crl (hash: 7hoapybxh8Xnj20Fe+7wto0XW7mkMLitoWu/qIzEYcg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/6a2e5f-9bb9-43a4-b452-460c89b392b3/1/zNLcTzj5a21HeWmI7N3wxtDE6DI.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/6a2e5f-9bb9-43a4-b452-460c89b392b3/1/zNLcTzj5a21HeWmI7N3wxtDE6DI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zNLcTzj5a21HeWmI7N3wxtDE6DI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:6b:8c:64:c2:e1:37:b2:49:2d:35:f9:4e:50:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd2dc4f38f96b6d47796988ecddf0c6d0c4e832
Validity
Not Before: Nov 11 09:01:51 2025 GMT
Not After : Nov 12 09:01:51 2025 GMT
Subject: CN=163f35d618d0d5c78b4839286e9ebb23a1871308
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:fe:9c:42:84:32:8b:e2:46:ac:72:63:06:c8:
48:f5:2e:1e:de:60:8e:e6:c6:e6:70:86:1c:1f:3a:
87:6b:d0:e2:6e:09:e4:a4:50:b0:5d:ae:53:01:29:
6c:dd:3f:b8:35:e7:93:79:7c:14:ae:9a:42:3e:f3:
83:02:09:9b:f5:23:49:07:86:2e:eb:23:91:b9:4a:
a3:b4:2c:24:4e:2e:28:0a:4b:3a:95:24:ef:fb:7f:
cf:67:8b:aa:fe:c8:dc:42:cc:73:30:ac:a1:62:7c:
5e:62:15:d3:c0:30:71:9e:1c:c4:d5:d0:ba:85:40:
74:f9:54:11:76:32:1a:63:6e:b6:82:f3:12:df:8f:
3b:c3:7c:bc:66:63:c4:51:f6:b0:65:3f:27:a5:d4:
ce:b6:11:b7:84:d2:98:95:49:37:c5:5a:05:64:91:
0b:51:77:f1:ad:74:67:f0:7e:e9:77:5a:24:97:66:
77:46:94:a1:dc:34:e9:94:82:72:fa:50:84:cd:f0:
a4:be:27:bf:63:66:51:ee:4e:23:b2:27:6f:71:4c:
52:83:fc:17:ff:a1:db:c2:85:36:5c:e0:bb:f5:ce:
78:bd:7c:66:00:09:e4:a2:32:df:23:bb:8d:4b:63:
4a:d2:fb:49:6c:7d:bf:89:4e:59:2b:71:8c:56:5a:
ae:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:3F:35:D6:18:D0:D5:C7:8B:48:39:28:6E:9E:BB:23:A1:87:13:08
X509v3 Authority Key Identifier:
keyid:CC:D2:DC:4F:38:F9:6B:6D:47:79:69:88:EC:DD:F0:C6:D0:C4:E8:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNLcTzj5a21HeWmI7N3wxtDE6DI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/6a2e5f-9bb9-43a4-b452-460c89b392b3/1/zNLcTzj5a21HeWmI7N3wxtDE6DI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/6a2e5f-9bb9-43a4-b452-460c89b392b3/1/zNLcTzj5a21HeWmI7N3wxtDE6DI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:94:f2:7e:45:e7:67:ba:d5:34:ed:15:99:06:22:06:e4:6a:
26:20:42:5a:09:22:0d:27:35:44:09:2b:89:c9:5b:de:f1:50:
d7:9e:80:0a:50:47:9a:a6:47:01:5e:e5:7b:2d:ac:05:a5:0f:
f5:71:dd:fe:f3:23:7c:1c:1a:d0:44:0d:a4:f7:ee:68:41:b0:
6d:eb:ef:a3:8a:99:21:3d:fc:61:b8:10:a6:d8:cb:59:76:f7:
59:a0:0a:1a:ee:7f:62:a3:55:02:8e:ec:fc:c7:51:73:a6:42:
dc:24:42:f7:26:a3:83:37:b0:ce:bc:c2:f2:be:5b:ed:9b:25:
2d:6d:ab:81:f2:cd:c4:93:55:b5:18:1b:aa:e7:77:a7:a6:f7:
a0:76:16:ba:cf:fd:ba:6b:e7:5e:68:21:7b:09:c3:cf:76:dc:
71:24:ab:00:2a:9a:fa:90:fa:a4:60:98:3e:3e:07:8c:eb:85:
0c:a2:ab:ed:74:bf:ec:ae:c4:a2:fe:04:97:14:4f:0c:da:d3:
7d:0f:a5:d8:90:bf:e1:c2:a0:c7:21:c4:3a:c4:3f:75:a7:db:
b2:4b:7c:ca:0c:4a:3c:5d:1d:c3:92:21:ac:2b:05:b9:85:d1:
86:45:25:80:5c:48:24:95:9b:e1:c6:0c:90:1c:e3:16:59:82:
bb:56:aa:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:52 2025 by rpki-client