Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/975e68-8662-43b9-8ed2-aae97e65015c/1/ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.mft
File: ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.mft (raw, json)
Hash identifier: acl/nnRbhZXPkCMf8rGQwA0sMAIESlj6kdLHJ9y55hs=
Subject key identifier: F1:B1:6F:EA:73:1D:33:55:3B:B1:37:D7:C7:DD:EA:77:4E:43:78:BB
Authority key identifier: 65:E0:06:2E:54:A5:FC:B6:A0:C9:9E:59:85:57:FE:D6:F3:7A:46:29
Certificate issuer: /CN=65e0062e54a5fcb6a0c99e598557fed6f37a4629
Certificate serial: 019A71B81D028B8FC6E8074DA2731B7FDEFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/975e68-8662-43b9-8ed2-aae97e65015c/1/ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.mft
Manifest number: 1260
Signing time: Tue 11 Nov 2025 07:01:22 +0000
Manifest this update: Tue 11 Nov 2025 07:01:22 +0000
Manifest next update: Wed 12 Nov 2025 07:01:22 +0000
Files and hashes: 1: 1DNJXUdN9aHYwhJ0OLj39VSopnQ.roa (hash: QBTrHThXdQY8h/nmwy8ckGzuWyt8cYLb33EN8JyG6aE=)
2: ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.crl (hash: xTdrq76qJHbjQA1optmD78ydsMAZgQTeKzVIN4s2hc4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/975e68-8662-43b9-8ed2-aae97e65015c/1/ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/975e68-8662-43b9-8ed2-aae97e65015c/1/ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:1d:02:8b:8f:c6:e8:07:4d:a2:73:1b:7f:de:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65e0062e54a5fcb6a0c99e598557fed6f37a4629
Validity
Not Before: Nov 11 07:01:22 2025 GMT
Not After : Nov 12 07:01:22 2025 GMT
Subject: CN=f1b16fea731d33553bb137d7c7ddea774e4378bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:76:1d:2b:89:bf:f9:84:a7:74:8d:a7:b9:f1:
95:ca:5e:9f:bc:d2:4f:a7:31:46:73:58:1d:f2:c8:
b0:d5:16:88:b4:bb:cb:2d:44:e5:ac:da:1d:f5:c9:
47:c9:f5:35:77:31:7e:13:c4:9c:46:6a:c4:37:ad:
fa:f2:26:7e:c2:eb:b7:fd:0d:60:a5:77:64:79:49:
95:a9:fc:15:96:91:2d:44:d6:b0:8a:17:98:17:0a:
b2:4c:e1:2e:77:56:24:51:77:3f:27:43:6d:3f:50:
6e:f4:b4:95:bf:45:2a:3a:3c:1c:44:b3:5f:02:88:
ca:72:29:54:1c:66:9a:9c:e3:4e:c7:d1:1c:d1:5e:
20:8f:13:0f:8c:43:68:08:2d:51:0b:c9:3d:57:b6:
15:ca:a2:08:d9:eb:ed:3d:75:ec:42:6c:a4:14:76:
b6:b1:4b:9b:f1:47:c6:7a:66:3f:67:8e:ce:76:df:
09:b2:49:a9:20:38:15:2c:10:bd:81:20:5a:e2:62:
ff:a8:14:98:cc:a6:8a:5d:00:1a:73:34:27:e1:b3:
d8:55:01:91:dd:e6:f9:7c:a9:6a:7e:bc:2d:1c:41:
b5:47:37:24:2a:63:af:de:96:72:df:8d:1d:33:40:
0c:ca:59:8b:9f:61:50:b8:d5:b3:05:81:4f:ca:2d:
54:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:B1:6F:EA:73:1D:33:55:3B:B1:37:D7:C7:DD:EA:77:4E:43:78:BB
X509v3 Authority Key Identifier:
keyid:65:E0:06:2E:54:A5:FC:B6:A0:C9:9E:59:85:57:FE:D6:F3:7A:46:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/975e68-8662-43b9-8ed2-aae97e65015c/1/ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/975e68-8662-43b9-8ed2-aae97e65015c/1/ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:56:27:7f:de:c5:9b:3c:b3:06:0d:ce:9b:ab:85:51:ba:33:
73:97:8d:a5:6e:01:ab:1d:cd:da:ef:f7:df:67:6d:4c:29:1b:
91:c2:9c:9d:c2:29:64:d7:bc:f5:69:3c:39:dd:1d:6f:26:a1:
85:d5:3e:42:1f:b2:c7:ad:cb:eb:f6:55:10:d8:5e:4c:f2:46:
03:5f:01:f6:c2:6d:bc:72:7b:e9:62:30:9a:0c:12:61:a9:e2:
0b:e5:c0:9f:6b:e4:15:02:ba:6e:fc:60:8f:1e:a9:45:60:a1:
8b:6b:4a:18:fc:71:f9:43:ab:03:18:74:7e:11:08:a3:91:fe:
2a:de:9d:6c:e7:c6:62:84:c4:97:f7:4e:c2:4b:c6:83:b8:32:
79:28:36:1e:1c:0c:dc:6e:3f:ae:af:ef:9b:e4:3e:8f:d7:4b:
43:8a:a0:d7:41:55:e6:b1:68:70:a8:bc:d3:db:37:0b:0e:29:
bb:9d:ab:36:bd:72:2b:6b:86:0c:8b:66:8f:0d:aa:b5:db:58:
cf:e5:28:8f:64:1f:f5:17:c6:3b:97:d1:86:81:67:5c:3c:ed:
da:86:35:46:57:70:2e:3b:9d:53:bd:29:dc:ac:c5:1a:36:93:
d2:33:2a:99:59:b9:3a:e3:8d:9d:79:1b:27:cb:a0:78:59:76:
86:ce:7c:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:58:02 2025 by rpki-client