Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.mft
File: ZE8DP3gurzKrCQiHddZKxLlLWxE.mft (raw, json)
Hash identifier: AWjkJioLHjBhDAzbLD1n59LgSSs5ElkGtrsDq6StixY=
Subject key identifier: 8C:CE:5C:97:5D:AB:32:41:AB:37:B5:38:60:93:0C:60:27:35:40:AC
Authority key identifier: 64:4F:03:3F:78:2E:AF:32:AB:09:08:87:75:D6:4A:C4:B9:4B:5B:11
Certificate issuer: /CN=644f033f782eaf32ab09088775d64ac4b94b5b11
Certificate serial: 019A21AE160C6FF840B6E889A452AD7AD31A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZE8DP3gurzKrCQiHddZKxLlLWxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.mft
Manifest number: 0C40
Signing time: Sun 26 Oct 2025 18:00:48 +0000
Manifest this update: Sun 26 Oct 2025 18:00:48 +0000
Manifest next update: Mon 27 Oct 2025 18:00:48 +0000
Files and hashes: 1: 0XSnGPN4ZFxk8_lhcPN-rPm0S40.roa (hash: 0ucYwJNSE17Uoa0pbkg3UfaLHULdDrli5vO57ag/Rro=)
2: 2eYoGLpYtYZxhv1MZN6vX2qdP5g.roa (hash: VgvyWftKXOdFJhTLD/7iPW28qCLdqt68A9FKNT0Kf7w=)
3: APnx_8mfcxrFZN4OeamIRjyf60s.roa (hash: LqDkg2crI+HJCMm5gdlU8GtHUckBwruDxKVGT27c+3Q=)
4: ZE8DP3gurzKrCQiHddZKxLlLWxE.crl (hash: dCcvdHiwOK5zDsFveTZUo+4laQwA6XUfKzHkKzXNYjM=)
5: da-rbdUwvdK-EaEtMFVJ4ALqn7g.roa (hash: AiZ5cHYaXgbmcSlAY4kq0VLaSsmy8Eu/WyjQzyBskpg=)
6: izFiBce-GnGDYR4txZafIHP1iLk.roa (hash: 6ASOVWTNVRRVxuY9ayMGRUVJ1id7JkowncNxWBHtm+M=)
7: k-ezMHwur8MdZRQR3hE_e0BhJJw.roa (hash: P4qrs0pkvJINK01RPHPSPt0K8P0Ok49T8HWuoZXmVYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZE8DP3gurzKrCQiHddZKxLlLWxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 14:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:ae:16:0c:6f:f8:40:b6:e8:89:a4:52:ad:7a:d3:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=644f033f782eaf32ab09088775d64ac4b94b5b11
Validity
Not Before: Oct 26 18:00:48 2025 GMT
Not After : Oct 27 18:00:48 2025 GMT
Subject: CN=8cce5c975dab3241ab37b53860930c60273540ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5c:6d:a0:17:e3:ce:11:78:ef:f4:e7:31:bd:
bc:fe:63:83:6b:98:6e:d1:c3:40:71:d9:7f:65:fb:
89:49:ec:d7:cf:da:ce:90:1b:c9:4d:de:ec:8b:1c:
7c:6c:07:50:1e:d3:e7:4f:30:10:8e:94:6f:75:63:
87:7e:b3:1a:20:9e:d7:74:57:aa:a8:0e:6e:f0:32:
2c:57:6c:8e:f6:3b:d8:68:73:d9:36:01:dd:0f:9c:
af:2f:bf:ad:da:14:d9:20:bb:49:fc:29:5f:2f:8c:
43:f6:be:4b:6e:f6:ec:cf:f9:0f:ac:2d:35:c7:83:
01:e0:0d:19:f8:2f:f8:8c:c9:d7:6f:27:0b:e8:8a:
03:36:13:e3:15:4c:ab:0c:28:02:9a:12:bb:5c:20:
c2:3c:a0:da:dd:25:2e:12:fc:b5:10:22:51:83:0d:
03:f3:46:ad:74:11:94:17:04:67:01:0e:c8:3e:3f:
f9:fe:fb:88:be:bb:be:eb:a7:4c:16:8a:32:19:78:
d0:96:1d:6f:bb:03:25:61:ef:9d:2a:56:54:d4:e7:
18:8b:a4:0c:c1:55:8a:3a:3a:0b:78:b0:55:77:4f:
3a:20:b9:8b:35:16:b6:28:ec:12:0a:7d:54:1e:3d:
6e:5b:f4:bf:a9:fb:c5:f6:82:c7:2c:c4:82:5e:1f:
18:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:CE:5C:97:5D:AB:32:41:AB:37:B5:38:60:93:0C:60:27:35:40:AC
X509v3 Authority Key Identifier:
keyid:64:4F:03:3F:78:2E:AF:32:AB:09:08:87:75:D6:4A:C4:B9:4B:5B:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZE8DP3gurzKrCQiHddZKxLlLWxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:70:59:55:16:30:a1:6e:ea:21:fd:62:1d:1b:ef:6c:cc:68:
f8:de:ce:45:65:34:30:24:80:60:b4:5f:bd:d6:98:bf:79:51:
65:52:3d:db:bc:b3:0a:02:ce:1e:29:79:3a:7a:3c:47:49:ae:
34:b5:98:cd:11:57:83:c2:32:fe:14:fd:d8:81:64:30:a1:62:
39:db:52:9a:b1:e5:61:5a:46:4f:1b:0d:bf:2e:4d:47:71:5d:
6e:a9:ea:54:e5:dc:57:f6:d1:58:6e:6a:79:77:dd:7a:d7:23:
06:ed:b6:2c:52:7c:93:1e:84:03:85:70:8c:47:23:8f:96:0f:
17:3e:93:55:11:39:da:44:0b:c3:64:94:fc:51:41:13:af:48:
be:ed:eb:14:de:90:6a:b1:71:b9:3b:96:02:e4:60:37:f4:80:
33:45:2a:dd:cd:71:8a:2c:80:cd:ee:d4:21:2b:80:93:b8:f7:
d2:08:db:d6:50:b7:73:8a:b8:de:81:95:0e:ca:d6:4f:c9:25:
a3:e0:de:fa:25:1c:8f:cf:1c:61:82:49:d4:7e:22:1b:c8:f9:
c4:73:ac:21:5a:c3:d0:40:cf:ea:9a:30:35:a5:06:e3:d8:2d:
ec:8d:48:9b:35:19:44:47:f3:af:6d:14:3e:c5:af:b0:d8:37:
ab:8a:a9:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 22:51:53 2025 by rpki-client