Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/6c3125-fff1-4da0-8a32-7664e8a21fc7/1/ZJauOK7ay77u4eCTlW2zKHrntT0.mft
File: ZJauOK7ay77u4eCTlW2zKHrntT0.mft (raw, json)
Hash identifier: NLnCA4/IHjMNzWTnOKWEFSu6vgbUPeSzwCmmGplHMzs=
Subject key identifier: DF:08:F7:FD:B2:67:7D:0E:0E:51:57:8A:F6:5D:B9:D1:A7:01:15:A2
Authority key identifier: 64:96:AE:38:AE:DA:CB:BE:EE:E1:E0:93:95:6D:B3:28:7A:E7:B5:3D
Certificate issuer: /CN=6496ae38aedacbbeeee1e093956db3287ae7b53d
Certificate serial: 019A72264FD1C537F80C7ADFC4ADFDE03EAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZJauOK7ay77u4eCTlW2zKHrntT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/6c3125-fff1-4da0-8a32-7664e8a21fc7/1/ZJauOK7ay77u4eCTlW2zKHrntT0.mft
Manifest number: 1561
Signing time: Tue 11 Nov 2025 09:01:44 +0000
Manifest this update: Tue 11 Nov 2025 09:01:44 +0000
Manifest next update: Wed 12 Nov 2025 09:01:44 +0000
Files and hashes: 1: OsY0TtzQwg_k6WVAlCJ4j1X5_HQ.roa (hash: xdb+Fodrj/gwgOeHGwol/lGn/WJOAqWqApZA+WvwzsI=)
2: ZJauOK7ay77u4eCTlW2zKHrntT0.crl (hash: mwLdGeYY7YJkUOkpAN7UbAXJgWiQxud8lUpjsLHpzGA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/6c3125-fff1-4da0-8a32-7664e8a21fc7/1/ZJauOK7ay77u4eCTlW2zKHrntT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/6c3125-fff1-4da0-8a32-7664e8a21fc7/1/ZJauOK7ay77u4eCTlW2zKHrntT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZJauOK7ay77u4eCTlW2zKHrntT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:4f:d1:c5:37:f8:0c:7a:df:c4:ad:fd:e0:3e:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6496ae38aedacbbeeee1e093956db3287ae7b53d
Validity
Not Before: Nov 11 09:01:44 2025 GMT
Not After : Nov 12 09:01:44 2025 GMT
Subject: CN=df08f7fdb2677d0e0e51578af65db9d1a70115a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:59:0d:9c:90:a5:88:36:0f:97:05:7d:4d:12:
4a:89:2e:d8:5d:44:5a:0b:43:f4:83:93:9c:d0:c2:
c2:1b:95:69:a1:0e:9a:9c:ba:ea:7b:1a:c9:8c:55:
19:77:f9:f5:86:66:84:93:36:65:17:96:14:61:99:
7a:21:20:08:1d:e6:90:ea:a1:92:59:33:92:ea:1b:
45:a1:f2:b1:ba:75:88:d9:ee:5b:83:9a:2a:e4:2c:
06:93:16:1d:46:f1:42:36:5c:da:07:4d:23:ed:5d:
1c:d2:4f:21:61:8b:20:f9:7b:97:17:3f:98:47:7d:
75:5a:9e:15:5c:df:6e:9d:e2:a6:e4:3b:81:71:34:
2f:a0:3e:0d:5d:39:15:a6:13:4e:26:5e:72:3c:3c:
19:63:e8:ea:4c:ec:05:34:5b:2e:20:4a:a0:e4:ef:
a4:98:67:68:82:aa:a9:cb:55:61:4a:2b:71:1c:3e:
0d:98:ca:fa:cf:7d:13:b0:e9:8d:7f:ff:35:cb:30:
95:21:26:5b:4a:4b:cf:d3:df:76:1e:19:37:07:20:
fb:61:f3:87:9b:04:86:2b:ee:ca:d6:d8:b1:18:16:
1a:da:3b:da:77:7f:37:91:20:d5:5a:85:7b:c7:a7:
57:61:b3:35:64:01:93:ef:7c:74:33:ab:cd:17:8b:
e3:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:08:F7:FD:B2:67:7D:0E:0E:51:57:8A:F6:5D:B9:D1:A7:01:15:A2
X509v3 Authority Key Identifier:
keyid:64:96:AE:38:AE:DA:CB:BE:EE:E1:E0:93:95:6D:B3:28:7A:E7:B5:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZJauOK7ay77u4eCTlW2zKHrntT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/6c3125-fff1-4da0-8a32-7664e8a21fc7/1/ZJauOK7ay77u4eCTlW2zKHrntT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/6c3125-fff1-4da0-8a32-7664e8a21fc7/1/ZJauOK7ay77u4eCTlW2zKHrntT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:d1:ea:c5:04:d0:92:3d:fe:cf:f9:f0:ee:f4:55:76:1a:f1:
3c:d7:c6:46:54:c9:5c:e2:5c:2a:1b:54:d1:8b:8c:64:2d:a4:
6a:40:19:9c:d4:60:85:56:ec:41:b1:25:c9:24:03:f7:a3:4b:
6b:84:af:6b:47:06:be:5a:5a:a8:8b:bc:42:0c:bf:d6:81:bc:
a1:19:a0:50:11:ce:38:2c:23:26:2a:34:4c:1e:33:d1:36:17:
c2:55:61:53:65:cd:ab:1c:63:90:4f:a2:1a:7a:f0:7b:41:91:
c2:74:94:be:6b:85:6c:24:73:0b:a1:98:54:5c:f6:94:f1:b4:
db:04:2b:9e:84:6e:63:03:ee:55:8a:3f:c7:5a:bf:55:8c:49:
bb:34:a4:79:14:34:5b:a6:01:cc:42:d0:d1:76:c1:8d:a6:62:
e9:20:58:c0:d7:90:8b:74:35:d4:90:45:2d:e3:44:d7:2a:34:
96:3e:7b:0d:5f:21:06:88:3b:5d:59:a4:41:98:0b:8e:d1:1e:
1f:af:c7:14:48:4c:ad:b5:e2:90:c6:be:79:14:9a:20:d1:48:
31:08:6e:2d:d4:8e:6e:05:5e:96:8b:93:2f:f7:3c:9f:05:95:
05:6c:5e:c1:86:d2:4d:b7:38:17:de:a6:ce:25:df:1f:cf:42:
23:e7:01:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:39:43 2025 by rpki-client