Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/6155d5-31ba-4239-a753-f287b7b6d7b2/1/ZUq8jkXeIx-4KbyiK7Lwsx4fevU.mft
File: ZUq8jkXeIx-4KbyiK7Lwsx4fevU.mft (raw, json)
Hash identifier: 9Yh5EKgvJQKadY+K/SEs48GmWksUzo81/i2SCIHgMco=
Subject key identifier: 0A:7F:77:76:95:92:01:C0:6A:02:F4:97:D9:1F:98:3C:7F:E9:35:1F
Authority key identifier: 65:4A:BC:8E:45:DE:23:1F:B8:29:BC:A2:2B:B2:F0:B3:1E:1F:7A:F5
Certificate issuer: /CN=654abc8e45de231fb829bca22bb2f0b31e1f7af5
Certificate serial: 019A20D1EDD237B267006627DA24E1FD781A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZUq8jkXeIx-4KbyiK7Lwsx4fevU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/6155d5-31ba-4239-a753-f287b7b6d7b2/1/ZUq8jkXeIx-4KbyiK7Lwsx4fevU.mft
Manifest number: 037B
Signing time: Sun 26 Oct 2025 14:00:19 +0000
Manifest this update: Sun 26 Oct 2025 14:00:19 +0000
Manifest next update: Mon 27 Oct 2025 14:00:19 +0000
Files and hashes: 1: PCsNRmePbsa0e_oFwYPynvY9VHo.roa (hash: RquScR+SoymapgsuHQnGU+jgf18EzJeo/wdLZPwz40M=)
2: ZUq8jkXeIx-4KbyiK7Lwsx4fevU.crl (hash: L76plrR0i9HG2G9IY9CKwwcVFcqTuakj5zY3ZAjWBKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/6155d5-31ba-4239-a753-f287b7b6d7b2/1/ZUq8jkXeIx-4KbyiK7Lwsx4fevU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/6155d5-31ba-4239-a753-f287b7b6d7b2/1/ZUq8jkXeIx-4KbyiK7Lwsx4fevU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZUq8jkXeIx-4KbyiK7Lwsx4fevU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:20:d1:ed:d2:37:b2:67:00:66:27:da:24:e1:fd:78:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=654abc8e45de231fb829bca22bb2f0b31e1f7af5
Validity
Not Before: Oct 26 14:00:19 2025 GMT
Not After : Oct 27 14:00:19 2025 GMT
Subject: CN=0a7f7776959201c06a02f497d91f983c7fe9351f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:3f:ba:7a:b4:56:f3:eb:7a:e3:e2:d3:aa:29:
23:d6:35:d2:ba:bb:83:73:7a:03:8e:a0:59:09:76:
0f:00:aa:fd:b8:a4:12:2b:9b:57:b7:6e:92:86:3e:
3a:7c:71:0d:38:7f:ba:4b:4c:9f:cf:82:5e:91:07:
49:a7:76:43:f5:49:b9:b6:de:8a:7d:17:fd:4c:96:
36:c0:f1:07:f1:95:78:af:13:ef:5b:64:f1:3a:6f:
4d:5d:b1:8c:15:ba:9f:75:a9:ad:21:d1:f1:06:88:
6f:fe:4e:09:e5:62:c7:c0:ac:16:37:bf:ba:2e:c8:
13:ea:84:13:25:a2:b2:63:7f:fe:7f:43:00:c3:ed:
43:30:61:82:04:af:aa:d8:df:fe:37:be:03:7f:ea:
05:7d:93:21:5c:9e:0d:9a:e0:df:a9:89:0e:41:81:
3e:b9:93:df:94:0b:dc:03:82:d1:c2:65:8c:3d:7d:
27:d6:01:3e:19:21:a2:4a:ab:01:ad:ce:c9:62:4b:
2b:d0:15:c2:32:56:07:05:25:df:3e:e6:05:a8:9d:
04:c3:5f:a9:bc:e4:3d:0b:6d:30:c8:65:a4:1f:1b:
25:af:84:3a:a2:0c:ed:4c:7f:63:76:90:89:09:61:
02:71:7b:4f:7d:46:cb:f3:cb:c8:7f:9a:44:61:57:
ca:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:7F:77:76:95:92:01:C0:6A:02:F4:97:D9:1F:98:3C:7F:E9:35:1F
X509v3 Authority Key Identifier:
keyid:65:4A:BC:8E:45:DE:23:1F:B8:29:BC:A2:2B:B2:F0:B3:1E:1F:7A:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZUq8jkXeIx-4KbyiK7Lwsx4fevU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/6155d5-31ba-4239-a753-f287b7b6d7b2/1/ZUq8jkXeIx-4KbyiK7Lwsx4fevU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/6155d5-31ba-4239-a753-f287b7b6d7b2/1/ZUq8jkXeIx-4KbyiK7Lwsx4fevU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:eb:f7:ad:97:d3:f1:54:65:bb:b2:b2:fd:e2:14:09:2d:b9:
73:89:e7:8d:68:d6:a2:ad:aa:c4:43:80:60:74:90:ed:f8:c0:
3f:0a:75:cb:be:a0:e0:05:27:52:f7:eb:82:1e:71:e9:d2:c3:
06:fb:31:b7:b8:55:38:39:06:b3:36:7c:d5:02:56:c1:c4:33:
22:00:cd:5c:4a:96:c3:eb:49:1a:b6:99:5a:0b:ba:df:29:c3:
2a:95:b4:02:d8:85:c4:bf:3c:c5:5c:6a:69:cb:87:e9:1a:fc:
05:04:00:9b:22:80:53:4e:93:3c:00:26:5c:00:b0:f9:a1:4a:
33:39:61:b7:87:06:31:c1:e3:0b:cc:19:8d:03:9d:43:bb:60:
a6:5a:84:75:55:3b:78:ce:48:19:bd:52:68:ff:92:c6:f6:b6:
fa:dc:a4:d3:30:21:75:a6:c0:e3:de:ea:88:ce:63:19:64:b2:
77:76:66:45:e8:d7:3a:d8:e0:19:66:5f:12:a6:53:fc:9a:ff:
75:b6:48:18:5a:86:6d:98:97:41:95:2e:cd:c1:68:a4:63:ac:
ee:1a:70:a3:33:45:a6:08:09:5b:bb:da:7c:8a:26:20:16:41:
9a:59:48:b3:20:a8:df:44:bf:ce:c1:98:56:84:63:83:74:b1:
9b:95:19:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 20:27:56 2025 by rpki-client