Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/21b69a-a117-4b6d-86d5-9a15bc0d3988/1/ZbSNCjer_DS0HS0rroxoLtI-xCY.mft
File: ZbSNCjer_DS0HS0rroxoLtI-xCY.mft (raw, json)
Hash identifier: v/b649PuqBQwvXBRwG+bu9mfYnRR/wVK74c3wEpr3NE=
Subject key identifier: 64:A7:7C:5F:97:11:21:87:12:BB:BF:F4:E0:7C:A6:2A:0A:3B:A5:1C
Authority key identifier: 65:B4:8D:0A:37:AB:FC:34:B4:1D:2D:2B:AE:8C:68:2E:D2:3E:C4:26
Certificate issuer: /CN=65b48d0a37abfc34b41d2d2bae8c682ed23ec426
Certificate serial: 019A71B81C8363DC23BE4F5A7A7F99AA2D20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbSNCjer_DS0HS0rroxoLtI-xCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/21b69a-a117-4b6d-86d5-9a15bc0d3988/1/ZbSNCjer_DS0HS0rroxoLtI-xCY.mft
Manifest number: 141F
Signing time: Tue 11 Nov 2025 07:01:22 +0000
Manifest this update: Tue 11 Nov 2025 07:01:22 +0000
Manifest next update: Wed 12 Nov 2025 07:01:22 +0000
Files and hashes: 1: ZbSNCjer_DS0HS0rroxoLtI-xCY.crl (hash: F86CRCfGOAaX/hwFvfTNbPGCV9lzSGxviwDXD9cPriM=)
2: _3NEeq6GOXOiLdZdEWjfBKtdhh8.roa (hash: pTgzQ3b72uIy4BLhpeJN6uHM+SJH/WDu+3JWOoF47hQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/21b69a-a117-4b6d-86d5-9a15bc0d3988/1/ZbSNCjer_DS0HS0rroxoLtI-xCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/21b69a-a117-4b6d-86d5-9a15bc0d3988/1/ZbSNCjer_DS0HS0rroxoLtI-xCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZbSNCjer_DS0HS0rroxoLtI-xCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:1c:83:63:dc:23:be:4f:5a:7a:7f:99:aa:2d:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65b48d0a37abfc34b41d2d2bae8c682ed23ec426
Validity
Not Before: Nov 11 07:01:22 2025 GMT
Not After : Nov 12 07:01:22 2025 GMT
Subject: CN=64a77c5f9711218712bbbff4e07ca62a0a3ba51c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:01:69:bb:95:78:18:9c:eb:2f:41:16:84:67:
ea:42:3d:2b:3c:1a:3d:07:38:84:3a:40:00:97:8c:
b2:35:55:07:a5:15:e8:d5:80:57:87:27:a9:59:0d:
78:bd:61:e9:3f:ff:a6:42:e8:37:26:90:d9:be:73:
3c:be:8f:46:99:97:9b:06:a9:cd:e0:4b:50:47:a1:
33:61:5f:22:71:d0:c0:cb:76:e1:3d:84:94:8c:9b:
58:dd:25:95:44:1b:57:42:8e:83:cd:65:32:cb:df:
8f:ff:61:89:ef:bc:c4:46:7c:6d:b7:08:b3:01:7b:
c7:c5:77:03:ed:5d:92:9d:db:3f:8c:af:81:16:20:
63:37:75:ac:41:18:d0:9a:f9:63:fb:aa:9a:b3:1a:
c5:e4:ce:d4:20:04:52:04:02:d3:a8:de:07:bc:f2:
17:1c:f8:21:0d:9d:6c:75:36:59:d3:32:c0:f7:b5:
79:1e:00:4c:0e:37:ab:b7:7d:67:64:e6:ee:2d:7d:
c8:2b:af:26:af:3b:6f:20:58:d3:cb:d8:65:d8:9b:
13:83:4c:b7:22:84:bd:9e:90:0d:3d:9d:6d:32:ab:
c9:3c:fe:5f:03:19:58:43:58:0a:0f:2b:2d:44:64:
b7:b3:ce:54:78:83:02:72:ff:43:3d:9f:f3:b9:d9:
43:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:A7:7C:5F:97:11:21:87:12:BB:BF:F4:E0:7C:A6:2A:0A:3B:A5:1C
X509v3 Authority Key Identifier:
keyid:65:B4:8D:0A:37:AB:FC:34:B4:1D:2D:2B:AE:8C:68:2E:D2:3E:C4:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbSNCjer_DS0HS0rroxoLtI-xCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/21b69a-a117-4b6d-86d5-9a15bc0d3988/1/ZbSNCjer_DS0HS0rroxoLtI-xCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/21b69a-a117-4b6d-86d5-9a15bc0d3988/1/ZbSNCjer_DS0HS0rroxoLtI-xCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:75:d3:d3:be:c5:79:c7:db:fd:3e:b7:6f:63:61:f0:ec:b6:
4e:3d:c5:7b:d1:cb:30:98:65:cb:fd:04:61:58:fd:6c:94:b6:
e3:ef:ee:dc:0d:e3:bc:c0:7d:52:e0:9f:6f:32:8d:8b:f8:21:
73:ca:45:ac:ec:22:9b:90:d6:b5:e7:ee:0f:57:34:41:68:ce:
66:0b:25:72:76:d5:a6:76:7c:c9:b3:83:90:7d:de:ee:13:df:
fd:5f:af:dd:cd:0b:90:21:d5:ac:39:af:a1:cd:c6:6a:07:77:
8a:de:33:95:a0:48:e5:0c:a5:76:44:38:f4:08:9e:2d:e2:97:
4b:70:b1:43:a8:75:b9:a2:55:a5:8d:6e:78:38:61:eb:65:2f:
89:f8:b5:e7:9f:f8:2f:ba:4a:60:14:37:f7:ac:15:e8:8f:7a:
42:b0:a9:75:8f:f1:d7:8d:1a:0e:b2:de:07:7e:21:b2:36:07:
c1:a0:a0:57:00:7b:65:df:91:34:6a:c3:c6:b9:24:78:4d:02:
ee:6c:1d:34:b3:8a:e0:00:fa:6d:93:1d:9b:b0:ba:fb:2f:bd:
14:1c:8f:28:fe:04:de:db:5b:89:2a:5c:34:6e:da:4b:6f:5f:
6d:68:77:49:e8:5d:cb:5e:53:ab:bc:45:ca:d7:2a:c5:58:7d:
6c:fb:07:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:57:02 2025 by rpki-client