Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/763592-a480-444f-a881-402e62c54d32/1/ZrB43tN1kjDKLho76QZjjRMGuQg.mft
File: ZrB43tN1kjDKLho76QZjjRMGuQg.mft (raw, json)
Hash identifier: 1czotR5WJ2dgWCWLSXZcrhodXQumgnNBtkiUBdPFrok=
Subject key identifier: B2:03:49:BB:D0:F6:48:BD:9A:3B:43:D5:9D:98:E1:8C:27:22:E5:3F
Authority key identifier: 66:B0:78:DE:D3:75:92:30:CA:2E:1A:3B:E9:06:63:8D:13:06:B9:08
Certificate issuer: /CN=66b078ded3759230ca2e1a3be906638d1306b908
Certificate serial: 019A72CA58826261F35AF291925244DDA5F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZrB43tN1kjDKLho76QZjjRMGuQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/763592-a480-444f-a881-402e62c54d32/1/ZrB43tN1kjDKLho76QZjjRMGuQg.mft
Manifest number: 0A66
Signing time: Tue 11 Nov 2025 12:00:54 +0000
Manifest this update: Tue 11 Nov 2025 12:00:54 +0000
Manifest next update: Wed 12 Nov 2025 12:00:54 +0000
Files and hashes: 1: ZrB43tN1kjDKLho76QZjjRMGuQg.crl (hash: cIcq+d6xExV8yT5IOmM7qajJ8sFzPfNTRHSRh6p/GUE=)
2: mHxy9rJdZpH5hrd46ZQbudzuLF8.roa (hash: xwokQPLLEdy+DbSgYqJ8Dht6nsu849d5eiNxGGm9TUs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/763592-a480-444f-a881-402e62c54d32/1/ZrB43tN1kjDKLho76QZjjRMGuQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/763592-a480-444f-a881-402e62c54d32/1/ZrB43tN1kjDKLho76QZjjRMGuQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZrB43tN1kjDKLho76QZjjRMGuQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:58:82:62:61:f3:5a:f2:91:92:52:44:dd:a5:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66b078ded3759230ca2e1a3be906638d1306b908
Validity
Not Before: Nov 11 12:00:54 2025 GMT
Not After : Nov 12 12:00:54 2025 GMT
Subject: CN=b20349bbd0f648bd9a3b43d59d98e18c2722e53f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:57:13:3a:5a:b1:89:77:35:31:e7:bb:c8:4d:
d3:5f:dd:1a:b0:bd:39:14:6c:0c:73:c0:7d:55:28:
f9:b9:a9:85:05:25:fb:7f:f1:b5:5b:1b:2f:1a:42:
38:bd:49:2c:11:18:e5:e2:d9:88:6d:70:fe:b9:92:
be:3a:a1:e5:ac:5f:59:86:67:a6:cd:da:a6:36:24:
c4:f1:71:5c:04:a7:72:05:32:b7:a6:65:79:97:5a:
47:3f:88:9c:a5:31:b5:cd:7b:9e:3b:01:c1:c3:f2:
4f:2c:f7:9f:37:e2:97:4c:fa:1a:bb:6d:99:38:fa:
66:92:a4:e2:d6:4c:8b:4c:0f:8a:05:c9:b5:d5:ee:
cd:e1:8b:60:73:8d:58:9b:4a:7b:b0:81:12:60:f3:
91:0e:06:fb:89:06:21:1f:0f:6c:60:a0:24:98:bd:
4c:58:51:0d:5e:93:49:ae:52:9d:50:e1:2f:94:e4:
0c:47:12:2e:51:e7:b2:da:a1:9a:c8:39:25:ff:06:
00:69:15:be:5c:6e:80:89:0a:24:f6:07:3c:8d:09:
ad:19:81:e2:20:ea:b0:20:60:1a:30:b7:20:78:1c:
93:0d:6c:a1:51:49:3a:eb:fc:02:9e:eb:ca:de:89:
ad:50:fb:10:f6:b9:7f:60:b4:6e:c3:49:2d:ad:2b:
fa:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:03:49:BB:D0:F6:48:BD:9A:3B:43:D5:9D:98:E1:8C:27:22:E5:3F
X509v3 Authority Key Identifier:
keyid:66:B0:78:DE:D3:75:92:30:CA:2E:1A:3B:E9:06:63:8D:13:06:B9:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZrB43tN1kjDKLho76QZjjRMGuQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/763592-a480-444f-a881-402e62c54d32/1/ZrB43tN1kjDKLho76QZjjRMGuQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/763592-a480-444f-a881-402e62c54d32/1/ZrB43tN1kjDKLho76QZjjRMGuQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:78:45:54:0d:9a:af:43:7a:0e:fa:51:77:b0:2d:1c:11:bf:
f2:5f:33:7d:4e:ee:20:b5:69:e4:7e:2c:40:24:ed:45:30:7e:
f3:ad:4d:cd:19:66:7f:a5:99:65:cb:82:87:78:38:dd:a2:42:
12:08:da:2d:db:1b:f8:88:14:8a:fc:8f:b4:2a:a1:28:11:4a:
56:67:67:36:01:87:cb:68:b0:bf:73:72:b5:50:3d:a1:71:19:
51:8d:c1:a0:80:68:a7:24:4c:cb:14:0a:36:f8:b3:0f:c9:9c:
dc:a7:3f:50:9a:e6:68:1a:ed:24:59:b7:39:8a:8b:90:73:24:
21:05:db:11:35:bf:19:12:e9:3f:c0:ee:b4:3c:82:17:3e:63:
ba:c2:32:0c:cd:f8:a9:7f:d3:5b:22:60:f7:4d:c2:93:1a:9e:
34:ec:ca:67:fd:ea:f2:07:29:68:fc:a5:47:d2:ec:4d:f6:69:
a4:b4:ab:4b:ab:99:b8:a4:13:3a:16:e7:33:6b:d0:df:77:e2:
cc:8a:3b:5c:a5:70:2c:cc:e0:96:51:a2:2a:b1:e0:27:cb:de:
a7:60:05:8a:47:b4:6d:4c:7b:5b:80:75:eb:4f:93:b6:48:34:
e8:89:be:0f:3e:31:eb:59:42:4d:1f:24:9f:92:ad:3b:f5:61:
ef:25:f7:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:19:14 2025 by rpki-client