Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.mft
File: ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.mft (raw, json)
Hash identifier: Cc9UTkDfbdCTHP5XmK641XwEr5nqr6ggEUKxFZa5qdE=
Subject key identifier: 09:51:3E:02:EC:7F:18:CE:23:81:E4:78:76:24:AC:DE:7D:90:58:11
Authority key identifier: 64:1C:78:FC:17:48:BD:CC:6A:6C:88:C6:7D:28:3E:1D:02:D9:DC:C8
Certificate issuer: /CN=641c78fc1748bdcc6a6c88c67d283e1d02d9dcc8
Certificate serial: 019A2477B243ACF78C144B711A1A61C9C879
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.mft
Manifest number: 0FAC
Signing time: Mon 27 Oct 2025 07:00:15 +0000
Manifest this update: Mon 27 Oct 2025 07:00:15 +0000
Manifest next update: Tue 28 Oct 2025 07:00:15 +0000
Files and hashes: 1: 7KyvX2ge4BVj5LFVdOXXXemAkCg.roa (hash: Hc/1xIYUTBtB+16ukbbri4uoGukybMhi3rtoBVu7s8I=)
2: 8k4-DaJSUcckd3W12t-LKgUPXOY.roa (hash: FEgAXATsq5yqV5pU5s6y/DGmTndCuBZeOPWD+L+m2zs=)
3: ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.crl (hash: KzDdBRsB3/lxV897UXQSs1umMgPZZXzTlUxybfGvfmM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 07:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:77:b2:43:ac:f7:8c:14:4b:71:1a:1a:61:c9:c8:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=641c78fc1748bdcc6a6c88c67d283e1d02d9dcc8
Validity
Not Before: Oct 27 07:00:15 2025 GMT
Not After : Oct 28 07:00:15 2025 GMT
Subject: CN=09513e02ec7f18ce2381e4787624acde7d905811
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:69:26:f7:4f:18:56:1e:2a:f9:b9:dc:37:b8:
81:ef:ae:a0:3a:65:dc:27:71:80:fb:49:e3:ad:4a:
09:f4:8c:29:a6:a6:ad:14:56:a3:83:6f:87:c5:6c:
73:3e:b2:af:25:cc:fa:0e:6c:56:b5:04:1e:c2:48:
b9:f7:6e:44:89:35:f5:e5:57:25:95:71:b9:b6:6a:
be:db:7a:ed:09:9e:1e:49:6b:5f:5a:55:b6:fa:ab:
99:61:9e:05:bc:45:49:1b:bb:9c:65:92:8a:fc:ea:
dd:fb:76:f0:7f:c1:c1:f2:56:90:e8:c5:5c:50:f8:
3a:00:dc:16:c7:19:71:fb:21:31:71:ed:86:9a:45:
96:af:2a:b5:2d:f8:ba:25:92:a1:de:43:38:c5:8c:
ac:86:6b:b4:5d:46:81:2b:34:ea:21:f6:03:e1:98:
a3:03:2e:7c:b4:7e:20:2e:8f:8d:50:14:47:66:03:
14:25:57:29:78:aa:3a:2e:67:07:35:cb:e4:78:8d:
94:84:d8:5b:f8:f4:13:a6:f6:df:10:b8:77:eb:e1:
62:a7:0f:09:ed:c5:de:30:bc:a4:18:eb:c7:5a:a1:
0a:a5:36:dc:80:c7:65:31:2f:00:7e:d3:d4:d3:19:
89:ca:bd:07:6f:d7:51:4f:f9:44:69:57:d2:d1:c5:
b7:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:51:3E:02:EC:7F:18:CE:23:81:E4:78:76:24:AC:DE:7D:90:58:11
X509v3 Authority Key Identifier:
keyid:64:1C:78:FC:17:48:BD:CC:6A:6C:88:C6:7D:28:3E:1D:02:D9:DC:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:4b:f5:a9:7f:8b:50:07:41:3c:bc:c9:b8:11:fe:f9:1b:90:
5a:04:26:4b:ce:3b:91:22:06:46:20:04:2b:97:4b:eb:77:1c:
f7:fb:04:77:c9:7e:18:6c:5f:e6:05:59:b1:e8:e8:cd:2c:ab:
ab:59:b4:54:1e:1e:ee:d8:91:ca:5b:22:9c:50:39:8b:5d:a8:
f0:cf:db:51:ca:1c:33:20:a8:9c:99:27:93:15:fb:10:53:a1:
3c:40:05:e7:2f:56:98:51:36:e2:bf:c7:24:19:81:ce:06:2d:
b3:9a:44:3b:ad:63:82:9f:10:27:c6:e6:b1:6a:ab:86:e8:14:
dc:3b:99:3c:a2:bd:a5:aa:9e:de:f7:97:36:4e:87:10:27:51:
f3:aa:7e:c7:da:f1:d7:22:5a:0f:1d:60:68:8e:a7:ec:6a:c8:
bd:8a:d5:1c:4e:6f:5c:12:37:32:cd:1e:a1:04:3e:3e:a4:84:
8a:a7:b5:41:83:ac:ec:67:c5:61:6b:fd:0e:0d:e2:61:6f:8f:
24:d2:a1:05:ed:84:a9:30:64:93:00:94:d8:ac:b6:ef:9d:1a:
14:17:9b:8f:d3:f0:b4:5d:8d:8c:ae:be:2f:35:9d:ad:2a:79:
92:0f:6c:ad:24:76:6f:bd:08:b3:f5:7d:d5:20:eb:f5:d4:13:
f5:8f:98:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 17:03:32 2025 by rpki-client