Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/3df62d-5d57-4d7e-9444-5351f1bde72f/1/ZKcVa4qon3bk04rywQn7wUkXsIY.mft
File: ZKcVa4qon3bk04rywQn7wUkXsIY.mft (raw, json)
Hash identifier: YzwjVcdVvknThPQM+OprxmpGkJHPuvFOXhD7pemcDEA=
Subject key identifier: C1:50:2E:57:8A:E2:27:E9:95:96:19:3D:AC:E1:83:82:C5:1B:0B:D6
Authority key identifier: 64:A7:15:6B:8A:A8:9F:76:E4:D3:8A:F2:C1:09:FB:C1:49:17:B0:86
Certificate issuer: /CN=64a7156b8aa89f76e4d38af2c109fbc14917b086
Certificate serial: 019A7225F61CC02EDC65B4C2D264D3943966
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZKcVa4qon3bk04rywQn7wUkXsIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/3df62d-5d57-4d7e-9444-5351f1bde72f/1/ZKcVa4qon3bk04rywQn7wUkXsIY.mft
Manifest number: 0FCE
Signing time: Tue 11 Nov 2025 09:01:21 +0000
Manifest this update: Tue 11 Nov 2025 09:01:21 +0000
Manifest next update: Wed 12 Nov 2025 09:01:21 +0000
Files and hashes: 1: WmCvFXCeg0oTa1TckRvrs8RNar8.roa (hash: Mzv2Vj1XxZUvLysQKOIpSBENViQwEO98u/fFHAl/Wq0=)
2: ZKcVa4qon3bk04rywQn7wUkXsIY.crl (hash: Bg+CcDeGD9Wghzm+r5pcGZQ/a1B2kJmEA6hg+He/Ejw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/3df62d-5d57-4d7e-9444-5351f1bde72f/1/ZKcVa4qon3bk04rywQn7wUkXsIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/3df62d-5d57-4d7e-9444-5351f1bde72f/1/ZKcVa4qon3bk04rywQn7wUkXsIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZKcVa4qon3bk04rywQn7wUkXsIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:f6:1c:c0:2e:dc:65:b4:c2:d2:64:d3:94:39:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64a7156b8aa89f76e4d38af2c109fbc14917b086
Validity
Not Before: Nov 11 09:01:21 2025 GMT
Not After : Nov 12 09:01:21 2025 GMT
Subject: CN=c1502e578ae227e99596193dace18382c51b0bd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:55:d1:64:dd:c7:95:43:6d:6d:3e:00:e8:53:
60:ed:3f:0c:55:22:a0:4d:66:d5:58:c4:81:e3:89:
5f:70:bf:73:63:b6:6c:e3:35:ab:e6:ae:dc:13:04:
e4:fa:b4:14:04:21:9c:9d:17:22:a2:73:c5:c2:2e:
56:c8:7e:fe:df:e1:7f:ff:7d:e1:ae:ce:66:fa:d9:
c1:75:d7:46:55:c0:45:41:ee:6e:31:ad:2f:5a:43:
f2:c3:32:69:fd:f4:fe:2b:c9:6f:14:25:cd:57:9b:
ae:42:86:de:54:ed:f4:ac:e1:76:a0:40:a9:c7:51:
91:7a:70:11:33:fc:32:a6:5d:76:18:fc:e2:dc:7a:
2c:d7:7f:9e:db:22:d7:61:ad:07:6d:51:1d:7f:21:
fe:9c:95:86:e7:e2:ff:de:18:a9:d9:b0:b6:f7:8a:
b8:23:41:46:ff:a0:c5:9f:40:2d:95:8d:89:69:39:
d4:1a:e9:3c:d8:d8:e7:16:4a:55:9d:e8:b9:5d:89:
9b:3a:7b:e0:2b:9c:31:12:6d:29:cf:51:17:cb:58:
1a:ce:6a:9d:9b:23:47:b2:ea:98:a2:2e:dc:d8:cb:
03:83:87:c1:dd:42:1b:32:53:53:8b:30:a0:28:93:
ee:14:24:23:57:22:5b:a6:73:46:61:90:36:4f:7c:
39:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:50:2E:57:8A:E2:27:E9:95:96:19:3D:AC:E1:83:82:C5:1B:0B:D6
X509v3 Authority Key Identifier:
keyid:64:A7:15:6B:8A:A8:9F:76:E4:D3:8A:F2:C1:09:FB:C1:49:17:B0:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZKcVa4qon3bk04rywQn7wUkXsIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/3df62d-5d57-4d7e-9444-5351f1bde72f/1/ZKcVa4qon3bk04rywQn7wUkXsIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/3df62d-5d57-4d7e-9444-5351f1bde72f/1/ZKcVa4qon3bk04rywQn7wUkXsIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:88:7c:2d:fb:66:2d:1b:8c:4c:b5:7b:38:71:2e:fd:70:48:
b9:c8:9d:31:35:1d:f9:93:3b:a3:9e:83:b3:ba:e7:ca:60:71:
79:2b:46:5e:77:fd:f8:04:7b:6b:2c:2a:cb:2d:9c:5b:aa:39:
f7:f5:01:33:2a:ea:16:f7:54:2a:ab:67:2b:23:d2:d5:e1:f4:
cd:e1:2d:0e:87:84:25:ed:e8:88:6c:67:da:ee:ed:fa:d9:e5:
67:cf:15:45:d0:6c:21:f9:5b:88:e6:d5:54:00:44:b1:b1:d9:
74:69:35:f9:cb:af:cf:47:b9:24:ef:d5:5b:89:4d:da:ec:51:
44:e6:a1:e6:67:13:08:36:0b:e0:b9:86:d2:3d:45:aa:00:b6:
b4:c8:14:9c:e9:78:de:eb:c4:78:dd:26:33:13:7e:f3:41:45:
1a:33:bf:3c:61:dc:3b:5b:ad:ef:12:8b:9e:5e:2d:d9:a0:b5:
25:52:7a:38:44:3e:6b:3f:a6:8c:eb:7e:cc:57:b4:76:05:f0:
19:3b:01:42:aa:4d:3a:5f:80:1f:b3:be:c3:53:96:c6:5c:55:
19:c5:22:8f:fa:29:67:7b:ee:17:28:16:64:56:31:2b:d6:74:
04:89:73:c0:f4:4f:f2:dd:40:69:51:b8:d7:ca:70:ee:dd:3c:
4b:36:a5:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:48:54 2025 by rpki-client