Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/e49bc5-68c5-4ce2-a9b9-03c6feaf1d9f/1/ZO-Yrb9C1brNJMrbCt8JLEV22vM.mft
File: ZO-Yrb9C1brNJMrbCt8JLEV22vM.mft (raw, json)
Hash identifier: pM+FOuzmA8P22o1REC7brB+v8UlBeaG/9TGs00UjqNk=
Subject key identifier: 64:59:2B:8E:07:59:A6:D4:E7:D0:AC:EB:29:E9:EA:36:3A:0B:6C:C2
Authority key identifier: 64:EF:98:AD:BF:42:D5:BA:CD:24:CA:DB:0A:DF:09:2C:45:76:DA:F3
Certificate issuer: /CN=64ef98adbf42d5bacd24cadb0adf092c4576daf3
Certificate serial: 019A71EEF24D7A05B46A6494CB96DB871C05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZO-Yrb9C1brNJMrbCt8JLEV22vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/e49bc5-68c5-4ce2-a9b9-03c6feaf1d9f/1/ZO-Yrb9C1brNJMrbCt8JLEV22vM.mft
Manifest number: 1726
Signing time: Tue 11 Nov 2025 08:01:16 +0000
Manifest this update: Tue 11 Nov 2025 08:01:16 +0000
Manifest next update: Wed 12 Nov 2025 08:01:16 +0000
Files and hashes: 1: O6yhVl-p8zPN_CcTQWHTkGKQoq0.roa (hash: HphO2Xf8amyd/7vc+hBrhD7m5RPblIsLscX8rs+h9y4=)
2: ZO-Yrb9C1brNJMrbCt8JLEV22vM.crl (hash: dZgezxD68nl2ecdRGR1iQm6Z9BoAoK+ksMMi7alDBRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/e49bc5-68c5-4ce2-a9b9-03c6feaf1d9f/1/ZO-Yrb9C1brNJMrbCt8JLEV22vM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/e49bc5-68c5-4ce2-a9b9-03c6feaf1d9f/1/ZO-Yrb9C1brNJMrbCt8JLEV22vM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZO-Yrb9C1brNJMrbCt8JLEV22vM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:f2:4d:7a:05:b4:6a:64:94:cb:96:db:87:1c:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64ef98adbf42d5bacd24cadb0adf092c4576daf3
Validity
Not Before: Nov 11 08:01:16 2025 GMT
Not After : Nov 12 08:01:16 2025 GMT
Subject: CN=64592b8e0759a6d4e7d0aceb29e9ea363a0b6cc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:42:10:86:40:45:ea:82:de:06:fc:6d:7c:af:
94:c4:01:31:39:21:b3:e8:96:df:4f:58:c3:db:66:
65:84:23:5e:8b:0e:6b:f5:03:40:0e:5f:a7:bc:85:
04:40:26:23:78:15:ca:25:11:ef:1c:12:bf:ae:71:
7a:41:44:77:1b:f6:a0:65:6e:43:8b:6f:43:31:46:
13:ae:29:26:54:8d:a5:1c:5c:50:01:64:f3:b8:47:
19:58:35:02:51:b2:8b:0d:6b:42:b6:5c:90:58:34:
4b:ce:fd:93:09:4b:d0:60:38:a9:0f:32:2f:c5:32:
0a:2e:98:14:5f:28:d1:a0:74:68:65:9a:13:96:2a:
93:b0:68:31:9a:9c:7f:f3:37:cb:27:5c:66:83:75:
f3:8d:ca:9e:9f:92:7c:6b:0a:f5:85:28:59:4d:bc:
09:55:5f:0e:94:f7:29:97:48:69:bd:16:ba:a1:58:
ab:55:38:75:28:7e:09:dd:ca:9b:7f:89:c2:82:6b:
f2:25:4b:c7:66:8b:c5:ae:5b:8b:c8:34:57:ea:90:
53:7b:35:89:e0:e5:06:df:24:47:44:fd:43:c0:55:
08:70:5f:04:ee:50:59:f0:4e:6a:55:80:d0:4a:72:
8e:6c:5e:dd:17:47:98:59:ee:da:ba:f5:06:0d:8f:
7a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:59:2B:8E:07:59:A6:D4:E7:D0:AC:EB:29:E9:EA:36:3A:0B:6C:C2
X509v3 Authority Key Identifier:
keyid:64:EF:98:AD:BF:42:D5:BA:CD:24:CA:DB:0A:DF:09:2C:45:76:DA:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZO-Yrb9C1brNJMrbCt8JLEV22vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e49bc5-68c5-4ce2-a9b9-03c6feaf1d9f/1/ZO-Yrb9C1brNJMrbCt8JLEV22vM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e49bc5-68c5-4ce2-a9b9-03c6feaf1d9f/1/ZO-Yrb9C1brNJMrbCt8JLEV22vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:33:8d:69:f4:bb:40:db:12:91:34:8f:0c:92:5b:b6:cc:e3:
a1:a6:e8:bc:4f:e1:28:d1:72:ac:dc:43:57:dd:65:d7:cc:1e:
e1:6d:d8:97:b0:70:ef:ae:1d:2d:f2:08:29:02:5e:db:08:3e:
6e:6d:01:42:65:b8:47:fd:44:bc:02:d6:1f:af:ec:91:11:33:
5f:0a:7e:ad:4f:d9:43:0f:82:50:d6:aa:54:e2:a9:d5:09:87:
de:07:a4:30:26:c8:be:c8:6e:85:6e:73:88:92:48:f9:63:ae:
d5:d5:44:12:48:44:f3:87:ac:34:33:11:67:e7:23:62:5b:ab:
5f:6c:42:a0:53:29:0d:d1:61:eb:c5:5d:78:78:89:08:9b:39:
af:d5:88:a3:5f:83:a8:0f:9e:48:2b:9d:12:b1:e6:d9:61:ac:
40:2c:cc:31:d8:81:ea:01:88:fd:b4:de:be:05:6d:51:05:2b:
94:08:b2:3a:2b:f7:84:be:04:e6:ac:d5:b0:48:df:a3:51:3c:
81:ca:14:3e:00:40:52:b6:10:74:ba:a9:68:9c:cf:25:95:71:
b5:51:b8:35:56:77:cf:60:f4:2a:f9:ff:0e:aa:9f:da:35:cd:
5d:f6:76:ee:af:ae:1b:04:c4:44:99:2a:d9:2d:69:fd:79:59:
4f:6a:65:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:03:41 2025 by rpki-client