Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/7d43ea-1ef7-4bdd-8d4d-f277745cf5a3/1/ZhGLThyeVUPR6nDDtz-OP-4C3qI.mft
File: ZhGLThyeVUPR6nDDtz-OP-4C3qI.mft (raw, json)
Hash identifier: 53qqsY2Lxq1p2o+DkLi8a8HWjFMQ+EIcjYttfX/Pt0I=
Subject key identifier: A8:7C:A2:79:A3:B3:C5:B1:56:43:FA:CF:12:05:B5:10:09:14:28:4E
Authority key identifier: 66:11:8B:4E:1C:9E:55:43:D1:EA:70:C3:B7:3F:8E:3F:EE:02:DE:A2
Certificate issuer: /CN=66118b4e1c9e5543d1ea70c3b73f8e3fee02dea2
Certificate serial: 019A31FE16C50D0FA97BE60C18523520D895
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZhGLThyeVUPR6nDDtz-OP-4C3qI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/7d43ea-1ef7-4bdd-8d4d-f277745cf5a3/1/ZhGLThyeVUPR6nDDtz-OP-4C3qI.mft
Manifest number: 122C
Signing time: Wed 29 Oct 2025 22:02:06 +0000
Manifest this update: Wed 29 Oct 2025 22:02:06 +0000
Manifest next update: Thu 30 Oct 2025 22:02:06 +0000
Files and hashes: 1: ZhGLThyeVUPR6nDDtz-OP-4C3qI.crl (hash: vWN5lp2OZDjCqrfmRcJ2V2WIlycaTeT0wcls90azmHI=)
2: duKwaDi_zRpAEa-uPqbKM14YVII.roa (hash: TetSzhXv2DRZxntyXp+bNMJwwDRAUYL5O4ug5nil6iw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/7d43ea-1ef7-4bdd-8d4d-f277745cf5a3/1/ZhGLThyeVUPR6nDDtz-OP-4C3qI.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/7d43ea-1ef7-4bdd-8d4d-f277745cf5a3/1/ZhGLThyeVUPR6nDDtz-OP-4C3qI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZhGLThyeVUPR6nDDtz-OP-4C3qI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Oct 2025 22:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:31:fe:16:c5:0d:0f:a9:7b:e6:0c:18:52:35:20:d8:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66118b4e1c9e5543d1ea70c3b73f8e3fee02dea2
Validity
Not Before: Oct 29 22:02:06 2025 GMT
Not After : Oct 30 22:02:06 2025 GMT
Subject: CN=a87ca279a3b3c5b15643facf1205b5100914284e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:bc:ba:6d:79:92:be:d1:73:99:f2:04:84:ea:
5b:53:59:c1:7a:2e:eb:aa:3b:88:f2:7c:6c:07:53:
a1:41:ea:4d:82:20:e8:b2:45:cb:35:b9:59:c3:cd:
50:45:fb:6e:8a:1c:51:2c:6d:69:fe:df:88:fe:70:
8d:fe:de:b6:52:c2:99:e5:04:df:2d:cb:45:f0:f3:
61:7a:3a:9e:82:fa:1d:c7:75:94:3f:66:9a:9b:6b:
ae:93:89:c2:77:2a:fb:58:d4:68:ff:a6:11:51:e4:
6b:35:2e:1b:a7:f6:93:db:5b:7d:7f:f5:3e:87:0b:
a5:8a:29:e6:36:da:88:fa:3e:fd:16:0e:14:7c:ea:
c0:b0:4d:98:24:27:01:0e:25:50:20:ca:7a:6c:45:
84:ee:61:b5:3c:f2:49:22:9c:3b:27:63:8a:e0:43:
69:65:14:e4:c1:b8:95:62:b0:26:0b:f3:be:93:aa:
bd:15:3e:38:49:78:72:68:37:29:2c:8f:dd:bf:d8:
9d:e5:55:62:49:4e:2a:e3:2c:0e:91:f8:79:02:cc:
cc:10:f5:42:93:b3:9a:b6:9b:e5:d1:0b:4e:de:a0:
0f:12:a8:93:8d:0d:6b:f4:7e:43:d3:6e:a3:5f:4c:
f1:52:c3:4a:2f:16:41:98:b8:48:dd:49:1e:78:5e:
9a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:7C:A2:79:A3:B3:C5:B1:56:43:FA:CF:12:05:B5:10:09:14:28:4E
X509v3 Authority Key Identifier:
keyid:66:11:8B:4E:1C:9E:55:43:D1:EA:70:C3:B7:3F:8E:3F:EE:02:DE:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZhGLThyeVUPR6nDDtz-OP-4C3qI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/7d43ea-1ef7-4bdd-8d4d-f277745cf5a3/1/ZhGLThyeVUPR6nDDtz-OP-4C3qI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/7d43ea-1ef7-4bdd-8d4d-f277745cf5a3/1/ZhGLThyeVUPR6nDDtz-OP-4C3qI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:64:52:f6:20:38:dc:10:7a:b4:41:25:72:da:29:2b:c2:e0:
cc:f4:63:74:5f:82:05:57:e1:d7:57:c7:33:ff:a5:cf:b0:d3:
02:68:c3:e1:0c:f8:e1:e5:2f:02:56:d0:47:4e:41:7c:a2:d4:
ca:92:53:cd:47:92:d8:a8:1a:ed:fd:72:dc:3b:06:4d:1e:72:
d3:f7:07:7f:25:ff:1a:d9:62:a0:93:9f:49:e1:54:77:46:09:
e3:c7:f5:c7:66:c5:9e:2d:ef:8c:8a:a5:47:e6:5d:33:c0:cf:
2d:c1:44:a8:78:e8:0f:02:31:8d:b5:52:78:21:3c:ac:a2:c4:
23:9e:98:cd:2a:95:20:a1:38:86:a8:30:bb:0b:8c:b0:52:80:
49:fe:c5:d3:5e:9c:0c:f6:f2:75:6e:d0:79:34:e3:13:f5:df:
1f:8a:c4:ac:a8:bf:ba:41:14:d0:9e:61:8f:f5:c2:26:db:2c:
f7:28:e5:dd:06:fe:02:cb:61:a9:34:ad:e1:7e:66:fc:73:f3:
0c:96:55:d4:b6:dc:d2:7d:dd:7a:1d:b8:83:b4:6d:5a:48:8b:
39:d6:8c:18:e5:02:68:16:12:e2:f5:a5:15:58:ff:d6:0e:4e:
2d:58:35:d9:15:69:9a:d5:19:15:95:8a:47:d1:1a:4b:60:28:
a3:f8:f7:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 30 03:29:24 2025 by rpki-client