Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.mft
File: ZboV1Huk9EgnZEctjZcUah67v4Y.mft (raw, json)
Hash identifier: pLJTgNRBdA/6W43KXcdzKWS42MBuY+JAP7Qx6LgD0G8=
Subject key identifier: 1C:7D:B9:DC:33:6E:C1:15:47:06:CE:F7:63:6F:2E:24:7D:00:0B:82
Authority key identifier: 65:BA:15:D4:7B:A4:F4:48:27:64:47:2D:8D:97:14:6A:1E:BB:BF:86
Certificate issuer: /CN=65ba15d47ba4f4482764472d8d97146a1ebbbf86
Certificate serial: 019A2A442145D15F125F8995AB09038D225E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZboV1Huk9EgnZEctjZcUah67v4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.mft
Manifest number: 1701
Signing time: Tue 28 Oct 2025 10:01:39 +0000
Manifest this update: Tue 28 Oct 2025 10:01:39 +0000
Manifest next update: Wed 29 Oct 2025 10:01:39 +0000
Files and hashes: 1: 4rAAYUq5t1ihC75pRZ-8BYtmpQo.roa (hash: 188bZwTUrt3prH8kliJVWf+ZzLbMtaC8U5VcRX/YSdk=)
2: 6To_-SlMxz3YG0ptLY8TCmc3uqU.roa (hash: uJB/UZHKN4C9IojJMtedYn8sR+djAWZ0k/CyzWBoJ6E=)
3: ZboV1Huk9EgnZEctjZcUah67v4Y.crl (hash: 8j85w1vCxqX8EPk0Zz1/imgvfvNHlcrxFSd8wELgnaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZboV1Huk9EgnZEctjZcUah67v4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 10:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:44:21:45:d1:5f:12:5f:89:95:ab:09:03:8d:22:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65ba15d47ba4f4482764472d8d97146a1ebbbf86
Validity
Not Before: Oct 28 10:01:39 2025 GMT
Not After : Oct 29 10:01:39 2025 GMT
Subject: CN=1c7db9dc336ec1154706cef7636f2e247d000b82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:0d:c8:a6:c0:b6:24:1f:b7:ed:eb:89:03:89:
f5:b5:93:61:11:c3:3e:50:e0:d0:af:67:36:c3:f7:
31:81:90:8b:2c:10:62:ff:3c:f9:19:46:87:15:20:
e6:b4:07:62:79:4e:fb:38:00:ce:cd:51:5a:aa:3e:
02:55:e5:bb:23:c6:64:9d:3b:ae:d3:f5:41:dd:ff:
bf:48:b6:c1:96:d6:e0:b7:40:89:de:9f:53:0a:c4:
85:6e:bb:96:b0:c7:13:9e:1d:6a:25:bc:c3:c9:2e:
93:de:cb:17:1b:6c:29:c3:b7:0d:54:8f:83:fd:9a:
f0:cb:34:cc:77:f9:c6:b4:5e:cb:63:d1:f6:7f:45:
8f:f9:09:3c:d4:25:f5:6c:97:1c:98:72:6c:1d:e4:
13:5a:72:5e:ee:0e:28:56:4e:8f:82:cb:9f:f0:01:
8c:b9:91:ff:2f:56:60:db:c1:bb:97:35:e6:ea:d5:
20:b6:eb:ca:a0:6f:88:8b:fc:62:7e:e3:5b:69:20:
96:98:f0:b5:b6:93:93:e9:d2:32:49:82:00:08:2c:
1f:62:6c:04:1c:6a:7e:03:20:66:eb:0e:e7:30:81:
42:4f:b2:ec:f1:9d:57:08:c9:70:45:4e:23:fd:fa:
7b:c6:10:23:93:ac:fa:7f:20:69:53:28:8f:eb:73:
02:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:7D:B9:DC:33:6E:C1:15:47:06:CE:F7:63:6F:2E:24:7D:00:0B:82
X509v3 Authority Key Identifier:
keyid:65:BA:15:D4:7B:A4:F4:48:27:64:47:2D:8D:97:14:6A:1E:BB:BF:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZboV1Huk9EgnZEctjZcUah67v4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:8e:dc:17:ec:28:d5:1d:5c:ab:ff:d6:c8:f7:51:00:02:7d:
31:b6:92:fa:94:b6:32:60:d3:33:ae:e9:c9:17:2e:34:3d:96:
c5:aa:b2:cd:e0:96:39:32:80:ed:7c:e0:20:70:2e:53:20:ab:
1b:2c:2b:bb:b1:05:81:a2:94:32:fc:68:a0:f1:56:18:99:ce:
bc:aa:4d:bf:7e:c3:62:8c:4c:db:87:1e:a7:fa:46:fd:5d:ca:
4f:e6:0a:47:86:21:06:11:84:45:2d:41:17:90:63:29:9c:3b:
a0:ae:89:42:ff:15:61:16:f8:01:f5:eb:80:75:d3:0a:d8:af:
4c:0d:1a:d9:30:de:fb:71:c8:d2:70:3d:a3:a4:a1:9e:6e:85:
99:6b:96:00:b0:0e:c7:d9:15:85:47:72:01:db:8f:9b:59:3e:
81:c2:60:94:36:2a:fa:20:ec:3b:4f:c1:3d:38:3c:93:6a:af:
5b:38:a2:46:65:e8:4c:20:cc:02:92:6f:a1:10:5b:52:70:c2:
90:5e:54:00:d5:5d:df:68:db:b2:39:03:53:7a:24:e7:71:24:
67:e5:80:c2:07:ac:33:54:61:97:d3:8f:e8:02:af:1e:5e:c4:
be:59:83:cc:af:f5:40:ee:08:8c:27:5e:40:ac:c4:9c:61:67:
cc:5e:61:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 17:02:43 2025 by rpki-client