Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/43caf7-8fc6-4123-8a93-652e0f5e5be8/1/ZMJJPkwu6pMLHsLINj0tH_rm4X4.mft
File: ZMJJPkwu6pMLHsLINj0tH_rm4X4.mft (raw, json)
Hash identifier: SiQ7jp5XjInws1dpQNTufgC9h0aId2SpjIUfcqtfxkE=
Subject key identifier: 30:02:97:19:DE:07:64:92:B1:0D:CA:53:35:4E:B4:B8:66:44:82:64
Authority key identifier: 64:C2:49:3E:4C:2E:EA:93:0B:1E:C2:C8:36:3D:2D:1F:FA:E6:E1:7E
Certificate issuer: /CN=64c2493e4c2eea930b1ec2c8363d2d1ffae6e17e
Certificate serial: 019A725C52EAFE3053EBD6A01A7ADED0F38F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZMJJPkwu6pMLHsLINj0tH_rm4X4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/43caf7-8fc6-4123-8a93-652e0f5e5be8/1/ZMJJPkwu6pMLHsLINj0tH_rm4X4.mft
Manifest number: 018F
Signing time: Tue 11 Nov 2025 10:00:44 +0000
Manifest this update: Tue 11 Nov 2025 10:00:44 +0000
Manifest next update: Wed 12 Nov 2025 10:00:44 +0000
Files and hashes: 1: Wfeid4woSfByYkoo--aLxPo9zD4.roa (hash: QUVhvh15KGbcjHhaMo64Af/kJPBMQKRCzuutrYgGreU=)
2: ZMJJPkwu6pMLHsLINj0tH_rm4X4.crl (hash: xvoEAxT+ZbV3hQWVrduvpEY9LuXqj00eFvpme96Aimo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/43caf7-8fc6-4123-8a93-652e0f5e5be8/1/ZMJJPkwu6pMLHsLINj0tH_rm4X4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/43caf7-8fc6-4123-8a93-652e0f5e5be8/1/ZMJJPkwu6pMLHsLINj0tH_rm4X4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZMJJPkwu6pMLHsLINj0tH_rm4X4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:52:ea:fe:30:53:eb:d6:a0:1a:7a:de:d0:f3:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64c2493e4c2eea930b1ec2c8363d2d1ffae6e17e
Validity
Not Before: Nov 11 10:00:44 2025 GMT
Not After : Nov 12 10:00:44 2025 GMT
Subject: CN=30029719de076492b10dca53354eb4b866448264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:31:05:60:b2:30:42:9b:df:e5:2e:bb:98:e9:
27:80:47:9c:14:a3:b5:c1:44:1f:4b:08:82:51:08:
33:48:ec:4d:2f:c1:2f:e4:b4:4c:b2:23:76:af:b2:
81:3b:14:c9:ec:55:55:40:aa:5a:ea:9b:20:37:9d:
f3:f4:01:fd:9c:5f:de:01:ba:c0:60:b4:c3:0f:2e:
20:9a:6f:c6:c5:28:f1:35:0f:bd:d0:3c:6b:81:74:
59:c6:93:cd:4e:ce:da:85:7b:6e:66:70:7b:9a:57:
76:0f:69:06:f6:21:90:9d:fa:2a:a5:42:64:b0:e6:
89:ed:97:88:23:4e:72:90:78:fa:0a:b8:fe:ce:3f:
05:2a:73:5d:b9:94:a7:36:6e:7a:8c:af:e6:3b:c4:
aa:e9:ff:4b:92:ab:96:70:80:2a:38:ec:15:c6:9b:
0a:21:7b:38:ca:e9:8a:9d:16:69:b3:20:b6:01:3a:
ee:50:b3:da:e0:27:b3:65:95:9b:ff:ed:95:04:fb:
74:36:42:8c:a3:64:15:1d:f4:3c:87:3d:ca:88:b9:
d0:a4:2b:ab:0a:f3:65:0c:02:d6:6b:15:b0:81:b4:
2a:f1:b4:37:57:09:24:4b:9f:41:1f:c0:1a:7d:1e:
ef:71:01:45:6b:7a:13:65:ad:91:31:7e:29:2d:8e:
0c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:02:97:19:DE:07:64:92:B1:0D:CA:53:35:4E:B4:B8:66:44:82:64
X509v3 Authority Key Identifier:
keyid:64:C2:49:3E:4C:2E:EA:93:0B:1E:C2:C8:36:3D:2D:1F:FA:E6:E1:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZMJJPkwu6pMLHsLINj0tH_rm4X4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/43caf7-8fc6-4123-8a93-652e0f5e5be8/1/ZMJJPkwu6pMLHsLINj0tH_rm4X4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/43caf7-8fc6-4123-8a93-652e0f5e5be8/1/ZMJJPkwu6pMLHsLINj0tH_rm4X4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:fa:bc:c6:2e:3e:70:fc:a5:95:1b:ba:e3:d7:5f:cb:9c:ed:
2c:55:59:5b:8d:e4:36:1f:7e:1d:8f:2e:b8:2f:b7:70:4b:25:
99:c3:3b:b1:da:84:50:63:5e:c8:78:4b:78:6f:1d:d9:01:f6:
23:1b:14:20:4d:39:4a:90:74:b8:3a:cd:78:34:38:09:71:b7:
b0:07:75:3a:af:69:20:97:63:65:7e:d8:db:b1:6a:e6:70:0c:
ad:04:49:c8:80:86:ed:85:ac:64:53:bf:81:9d:7e:85:f3:27:
f9:d3:92:4c:23:fb:cd:d3:0a:96:71:7f:dd:9f:42:16:10:d5:
82:9d:bf:47:a4:0c:84:ce:5a:a0:01:33:b3:4e:97:f4:ab:32:
ef:3d:94:fc:b9:97:b2:fa:46:ff:c7:d4:d7:61:04:91:75:e4:
bb:98:0c:28:58:a9:d9:23:37:25:43:06:7f:bc:7a:e1:c8:c1:
e1:9c:66:ac:80:b0:e0:bb:d5:64:0b:b2:0f:b3:c9:60:62:de:
2a:9b:75:67:da:17:f0:f1:87:a5:93:92:0e:e3:ad:4e:77:a0:
ba:33:98:9f:36:75:41:0c:d1:fa:56:34:8e:3e:85:f1:fc:cb:
fc:91:ee:08:87:dd:d4:ed:b0:77:92:11:c7:af:af:0e:26:f8:
62:fd:53:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:43:05 2025 by rpki-client