Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/02b357-abf7-408b-8b09-0d59d9d11505/1/Zf_wATbIP1OjisPurJcQp5k2skw.mft
File: Zf_wATbIP1OjisPurJcQp5k2skw.mft (raw, json)
Hash identifier: YuSoIXNnKNqzliIaamp/bpFMWXDywuTaTlFUpFxjQ9c=
Subject key identifier: 83:C8:F6:86:05:95:73:BE:CE:7C:59:B5:FA:8A:AE:42:87:82:A4:85
Authority key identifier: 65:FF:F0:01:36:C8:3F:53:A3:8A:C3:EE:AC:97:10:A7:99:36:B2:4C
Certificate issuer: /CN=65fff00136c83f53a38ac3eeac9710a79936b24c
Certificate serial: 019A725C57D1CED62DF6EEB7D9121AA4EBDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zf_wATbIP1OjisPurJcQp5k2skw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/02b357-abf7-408b-8b09-0d59d9d11505/1/Zf_wATbIP1OjisPurJcQp5k2skw.mft
Manifest number: 0617
Signing time: Tue 11 Nov 2025 10:00:45 +0000
Manifest this update: Tue 11 Nov 2025 10:00:45 +0000
Manifest next update: Wed 12 Nov 2025 10:00:45 +0000
Files and hashes: 1: Zf_wATbIP1OjisPurJcQp5k2skw.crl (hash: IR1SzLHXyfi0GYsjeoqg9IjfQkg6qSb6kVpfvkzBfBM=)
2: qV1VADgnM-UwMyvnzX700wlOQrY.roa (hash: fchq7gmgdQ6iV6UqjjJyNU6Y7myn1bicxh9WArTx5O4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/02b357-abf7-408b-8b09-0d59d9d11505/1/Zf_wATbIP1OjisPurJcQp5k2skw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/02b357-abf7-408b-8b09-0d59d9d11505/1/Zf_wATbIP1OjisPurJcQp5k2skw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zf_wATbIP1OjisPurJcQp5k2skw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:57:d1:ce:d6:2d:f6:ee:b7:d9:12:1a:a4:eb:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65fff00136c83f53a38ac3eeac9710a79936b24c
Validity
Not Before: Nov 11 10:00:45 2025 GMT
Not After : Nov 12 10:00:45 2025 GMT
Subject: CN=83c8f686059573bece7c59b5fa8aae428782a485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:bb:6f:14:27:30:e4:dd:1e:73:30:df:12:b4:
7e:b8:8f:9d:a9:3a:75:69:7e:14:2a:96:1f:20:be:
d6:a7:4d:88:39:e5:3a:73:19:8c:e4:56:c9:d7:81:
b6:98:e8:40:b9:4d:94:73:60:d8:c4:4d:62:09:d3:
a0:06:f2:1c:53:fd:e3:94:ea:30:9e:87:bc:08:ee:
a5:4a:3a:83:e8:87:e0:88:01:fc:a9:e2:a9:41:0f:
65:ba:de:75:05:1c:52:8c:3c:48:a7:e3:9a:0e:d6:
57:4a:ae:ce:2a:2f:eb:58:56:ed:8d:76:16:3c:9c:
ba:e6:98:69:4c:0d:09:a9:39:23:15:19:f2:4f:c1:
f2:e2:21:97:37:80:16:65:cc:9e:2e:97:9d:e1:f6:
cd:99:31:df:2f:4c:97:f4:2c:9d:4d:c5:c7:f2:ca:
c5:e1:d8:b8:33:19:c9:f6:55:b9:6c:9d:b8:22:42:
16:cf:96:e4:72:33:58:55:f5:ea:85:3c:4d:fc:5e:
bf:a5:32:e1:52:06:00:4d:dd:aa:42:96:ea:6e:a0:
d4:07:99:ff:d0:b9:08:83:5b:01:75:5d:ee:71:d7:
76:81:86:67:8e:e7:b3:61:6a:f3:6f:73:ba:72:9d:
e2:39:55:e9:ad:9b:86:85:11:0b:63:b2:7f:95:6c:
ab:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:C8:F6:86:05:95:73:BE:CE:7C:59:B5:FA:8A:AE:42:87:82:A4:85
X509v3 Authority Key Identifier:
keyid:65:FF:F0:01:36:C8:3F:53:A3:8A:C3:EE:AC:97:10:A7:99:36:B2:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zf_wATbIP1OjisPurJcQp5k2skw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/02b357-abf7-408b-8b09-0d59d9d11505/1/Zf_wATbIP1OjisPurJcQp5k2skw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/02b357-abf7-408b-8b09-0d59d9d11505/1/Zf_wATbIP1OjisPurJcQp5k2skw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:f4:9d:d4:2b:dc:8f:0b:d0:59:52:23:3d:e7:a8:99:5b:0f:
38:76:42:e9:67:cd:a3:77:5a:e0:b4:01:49:51:dd:a1:b5:01:
ed:e7:d4:e8:d2:d1:44:d4:0e:27:33:ae:bc:53:43:53:a1:40:
24:5f:bf:3b:06:5c:2a:d1:6e:80:02:9d:6b:2c:17:20:7e:10:
c8:fe:b8:cb:5b:b9:a6:07:84:f7:8f:58:cb:dc:4f:c8:69:c4:
c5:51:5a:65:60:11:79:4c:60:5d:70:52:c7:56:9e:a8:ed:37:
90:51:fa:89:71:5e:fd:99:f0:84:7e:5d:fd:e6:a7:18:f3:f4:
ff:4c:8a:30:41:be:24:f5:f1:28:46:b6:f1:32:43:cb:71:15:
2a:81:40:2b:9b:67:7b:b3:27:19:47:ae:e3:ff:91:89:ad:d1:
4f:db:25:e3:c6:46:61:ce:ae:ac:d4:99:53:d0:3e:d8:50:58:
04:ba:cd:fe:c8:d0:b4:dc:5a:10:0d:f0:2c:db:e8:cb:67:06:
3e:81:13:0a:61:f4:fc:d5:73:e8:22:9a:b2:86:21:dd:88:0f:
55:3a:d0:90:44:f6:96:95:30:3f:a5:3a:d5:8d:bc:80:c1:59:
43:a1:17:21:1e:fc:90:ab:46:ed:62:fb:e4:d8:be:4e:97:f8:
da:9d:da:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:23:52 2025 by rpki-client