Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/50f9e5-913c-4be6-9949-4c8ad7c46203/1/ZxO5wEymmMC3-v0dF_wGi3CZ9qw.mft
File: ZxO5wEymmMC3-v0dF_wGi3CZ9qw.mft (raw, json)
Hash identifier: FxK0cPFfZzBGvahuWpCmjwTHMcmeHcasltdiRYjnusc=
Subject key identifier: 4D:35:85:A4:5C:B6:BA:62:A4:9C:82:42:59:1B:03:4F:FA:D4:35:AD
Authority key identifier: 67:13:B9:C0:4C:A6:98:C0:B7:FA:FD:1D:17:FC:06:8B:70:99:F6:AC
Certificate issuer: /CN=6713b9c04ca698c0b7fafd1d17fc068b7099f6ac
Certificate serial: 019A71EEE9E4A410EF9F2BC52C9FD49A43E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZxO5wEymmMC3-v0dF_wGi3CZ9qw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/50f9e5-913c-4be6-9949-4c8ad7c46203/1/ZxO5wEymmMC3-v0dF_wGi3CZ9qw.mft
Manifest number: 123E
Signing time: Tue 11 Nov 2025 08:01:14 +0000
Manifest this update: Tue 11 Nov 2025 08:01:14 +0000
Manifest next update: Wed 12 Nov 2025 08:01:14 +0000
Files and hashes: 1: 4nY9ANf4EVr4RYiqxYiIP5YrsGA.roa (hash: KpMPrAJwKfQpF/Ebmkogzzx0/khONPsTM4gj0VRrnV8=)
2: ZxO5wEymmMC3-v0dF_wGi3CZ9qw.crl (hash: vVf11dy9iVkbUuq6411M9Y0aBtKL6G1CAps0xm2FQGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/50f9e5-913c-4be6-9949-4c8ad7c46203/1/ZxO5wEymmMC3-v0dF_wGi3CZ9qw.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/50f9e5-913c-4be6-9949-4c8ad7c46203/1/ZxO5wEymmMC3-v0dF_wGi3CZ9qw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZxO5wEymmMC3-v0dF_wGi3CZ9qw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:e9:e4:a4:10:ef:9f:2b:c5:2c:9f:d4:9a:43:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6713b9c04ca698c0b7fafd1d17fc068b7099f6ac
Validity
Not Before: Nov 11 08:01:14 2025 GMT
Not After : Nov 12 08:01:14 2025 GMT
Subject: CN=4d3585a45cb6ba62a49c8242591b034ffad435ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e8:33:23:5d:25:e5:2f:74:3a:9f:dd:fb:d0:
cc:81:5b:fd:c2:de:ec:1e:ef:44:36:26:5f:c3:2b:
31:0f:2b:d8:76:f3:77:d0:71:ba:7b:e0:ef:c8:a2:
30:93:ff:87:10:84:69:76:05:bb:70:e3:7c:c7:84:
a1:cd:93:ac:f3:1a:6a:13:c6:34:c9:73:1e:9c:a9:
af:92:71:35:66:a2:a4:a5:f7:56:1a:de:82:91:20:
ad:c7:31:d5:67:6e:c4:93:ba:4a:30:ca:97:f2:4a:
58:27:95:b5:2e:49:ca:b3:e7:e5:d0:4a:fb:da:6e:
bd:c5:4a:c6:6c:4e:07:30:36:32:a9:b4:59:23:ea:
13:84:3b:c1:0a:2a:99:c5:a0:ff:7e:f6:89:fe:89:
ee:34:c7:d2:cd:75:17:ee:89:c9:f3:02:fd:85:f6:
64:da:cb:ff:26:ae:ec:82:31:e7:92:51:85:f0:57:
01:b5:dc:19:a5:f3:5e:04:be:84:26:d1:26:cb:a3:
b8:5a:c0:dd:03:71:6a:6e:45:5a:4c:1e:8f:3b:2f:
cb:14:79:eb:40:f6:67:c0:ae:7d:4f:58:6f:00:88:
d5:b9:b3:9b:d9:90:8b:da:45:07:9a:85:c9:36:9e:
cb:42:5c:56:6f:42:14:cf:2e:db:40:76:1b:41:bb:
69:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:35:85:A4:5C:B6:BA:62:A4:9C:82:42:59:1B:03:4F:FA:D4:35:AD
X509v3 Authority Key Identifier:
keyid:67:13:B9:C0:4C:A6:98:C0:B7:FA:FD:1D:17:FC:06:8B:70:99:F6:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZxO5wEymmMC3-v0dF_wGi3CZ9qw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/50f9e5-913c-4be6-9949-4c8ad7c46203/1/ZxO5wEymmMC3-v0dF_wGi3CZ9qw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/50f9e5-913c-4be6-9949-4c8ad7c46203/1/ZxO5wEymmMC3-v0dF_wGi3CZ9qw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:df:0f:81:4d:f2:96:aa:38:0c:19:3d:80:be:cb:67:74:9f:
98:93:60:7d:3c:f6:a3:38:46:47:57:5a:0b:77:4b:ac:0f:13:
a3:2e:46:0d:cd:fe:78:56:e1:7d:46:c8:98:76:8a:b2:21:e8:
aa:ba:c5:a7:91:ca:19:a8:e2:ff:c8:4c:cc:d0:dd:ca:01:ef:
82:3d:44:79:bb:a7:66:19:4a:0c:d5:5b:ae:5c:d2:0c:a4:3b:
d4:2d:2f:e8:de:2e:e4:a3:51:30:f1:cc:23:23:0f:67:9f:ea:
9f:9f:67:32:e2:78:1b:bc:d8:6c:21:da:7a:41:16:bb:9b:aa:
34:f8:94:8d:c3:cf:24:62:32:80:f8:ab:da:4e:88:1e:61:9d:
b1:1a:f0:44:3f:73:e4:d6:6d:e6:ac:cd:ba:be:74:16:96:a0:
86:41:45:59:ff:f0:ec:ca:19:c2:a8:89:32:da:7f:17:97:9f:
55:de:d8:2c:f7:3d:ec:dd:88:a9:70:38:0a:8e:11:87:67:11:
7a:b7:9b:77:a7:fc:34:52:ba:80:6e:e7:04:ab:2d:d5:6f:69:
1f:0b:ea:07:38:dc:3b:9e:72:bb:e9:04:4d:d3:97:ab:07:43:
f5:4c:bc:09:11:c3:ad:5e:cc:db:3e:bb:ad:0d:3b:0c:68:53:
ff:1b:98:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:41:52 2025 by rpki-client