Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft
File: Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft (raw, json)
Hash identifier: NcxaCI2pIj4qdWVBMNZRx64n4XxvYXDWrvhVSW0nLAg=
Subject key identifier: 47:BB:FD:DC:43:BE:A5:4D:0E:B0:F7:A3:A8:5F:86:C5:17:4D:D9:DE
Authority key identifier: 66:5E:17:C0:8A:CD:C7:7E:94:4B:28:39:50:8F:1F:D7:11:E8:E9:7B
Certificate issuer: /CN=665e17c08acdc77e944b2839508f1fd711e8e97b
Certificate serial: 019A0AB865F4015AADCB05500EF114C7736D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zl4XwIrNx36USyg5UI8f1xHo6Xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft
Manifest number: 0685
Signing time: Wed 22 Oct 2025 07:00:48 +0000
Manifest this update: Wed 22 Oct 2025 07:00:48 +0000
Manifest next update: Thu 23 Oct 2025 07:00:48 +0000
Files and hashes: 1: ZhxwMRHWErqoZg_Itz4BRM1Zy1g.roa (hash: pA1I1yaFQSWAdVvtp/IDWYB864SqtxE1eJEw16TKrNs=)
2: Zl4XwIrNx36USyg5UI8f1xHo6Xs.crl (hash: wJ0vQl02r0vMbCDSe0MCR2cvxrW6JTALNyLI+wxtFB8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zl4XwIrNx36USyg5UI8f1xHo6Xs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0a:b8:65:f4:01:5a:ad:cb:05:50:0e:f1:14:c7:73:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=665e17c08acdc77e944b2839508f1fd711e8e97b
Validity
Not Before: Oct 22 07:00:48 2025 GMT
Not After : Oct 23 07:00:48 2025 GMT
Subject: CN=47bbfddc43bea54d0eb0f7a3a85f86c5174dd9de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:cf:38:85:d3:b3:03:15:7c:0d:f4:85:69:b7:
2f:5f:4d:4b:fb:ee:8a:af:6e:60:ec:ea:f4:ea:b4:
b7:cd:b2:e7:84:75:b9:ab:ec:d2:d2:18:bb:4d:31:
f2:9e:72:b3:27:f1:29:26:d0:12:ef:54:fc:ce:35:
50:4d:40:4c:8b:a3:1a:ae:de:4a:18:ef:ed:ab:18:
75:da:bc:af:09:6c:2b:c5:49:1f:56:d6:53:83:ad:
08:a4:d1:75:34:67:a9:97:38:26:78:47:e9:92:55:
57:04:49:29:7f:7c:db:f6:81:af:28:7c:b3:9e:48:
e4:31:62:dc:f3:36:47:a9:bd:4c:19:f8:4b:fd:63:
b8:1d:08:84:9f:15:75:29:76:25:2c:a8:0c:72:9c:
e2:fe:f6:18:d6:44:de:bf:e4:2c:3e:fe:49:ea:a1:
8a:ca:e6:1b:e9:f7:1c:5f:c4:bb:a9:1b:d8:5a:b1:
0a:a6:e7:67:f5:f4:12:dd:9a:45:07:11:74:7b:ca:
a1:d5:93:98:2d:a4:ed:25:23:1d:0e:47:0c:84:d9:
83:e7:05:21:54:67:1d:71:a1:ff:d9:54:97:de:bc:
e2:96:7d:d0:6e:ee:29:94:52:24:94:3e:34:f1:83:
39:a6:f3:23:00:55:21:32:c7:9b:de:c5:71:05:dc:
e4:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:BB:FD:DC:43:BE:A5:4D:0E:B0:F7:A3:A8:5F:86:C5:17:4D:D9:DE
X509v3 Authority Key Identifier:
keyid:66:5E:17:C0:8A:CD:C7:7E:94:4B:28:39:50:8F:1F:D7:11:E8:E9:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zl4XwIrNx36USyg5UI8f1xHo6Xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
eb:93:56:a8:1a:ef:59:6d:97:d7:ed:f5:47:f8:08:05:d5:02:
d2:4e:7e:03:cf:46:66:ae:80:80:c9:c9:42:96:bc:ec:ed:46:
a7:d8:7b:ab:ed:8c:a3:22:95:4f:9f:53:f9:60:0f:93:b7:0b:
bd:b7:cb:24:05:9d:d4:67:f8:50:f9:24:e1:ed:e7:69:87:9c:
42:4a:85:4b:17:ef:1b:d8:3e:e6:23:3b:ae:71:8f:61:bf:3b:
b4:a0:0e:82:51:32:de:29:50:14:76:53:29:ea:38:12:e4:64:
be:73:c4:10:a6:90:f3:6f:e6:c4:24:4d:fa:6c:c2:28:2f:93:
71:0e:9e:5b:a1:fd:6e:3e:b3:7d:fa:cb:b2:42:6b:2e:cf:69:
16:cd:95:82:5d:6a:38:fe:86:c3:d0:76:b3:ee:fc:45:52:7a:
09:7a:0b:51:15:b1:52:e8:f1:1c:10:e3:cf:fd:eb:e0:71:d0:
7c:bd:dd:17:6d:b1:59:9d:5b:e4:50:a3:43:d9:38:57:1d:43:
b4:a3:8e:2e:f9:72:a0:c9:35:4d:08:28:5a:aa:89:4c:63:d5:
2b:3b:c4:6c:6e:69:47:6b:56:d8:21:bf:6c:1f:16:17:ab:28:
29:3f:83:ef:03:fd:e9:b2:76:f2:07:11:ae:3f:a7:03:b1:d1:
a8:d9:2e:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 12:09:00 2025 by rpki-client