Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/6e3fba-4d3a-43cb-babf-5f2882de3ec7/1/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.mft
File: ZOkGJwIa3PpWJDQtPl-LSANaz7Q.mft (raw, json)
Hash identifier: V+uDiyzMMKyMbVBpiL6ZjI9B4VkJtizyDFKZV1bUBSg=
Subject key identifier: AF:57:DB:92:AF:F5:00:1B:82:B9:F3:7C:36:F9:4D:6D:08:2B:E0:1B
Authority key identifier: 64:E9:06:27:02:1A:DC:FA:56:24:34:2D:3E:5F:8B:48:03:5A:CF:B4
Certificate issuer: /CN=64e90627021adcfa5624342d3e5f8b48035acfb4
Certificate serial: 019A71B7C676FC79B1E2331ADA97A5EF38C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/6e3fba-4d3a-43cb-babf-5f2882de3ec7/1/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 07:01:00 +0000
Manifest this update: Tue 11 Nov 2025 07:01:00 +0000
Manifest next update: Wed 12 Nov 2025 07:01:00 +0000
Files and hashes: 1: ZOkGJwIa3PpWJDQtPl-LSANaz7Q.crl (hash: 5VR4rlriz0boVGQGTSmxDbnsx5Q8s+h6GYXxdjlsjXw=)
2: qoiJ2dkjuPKR2DINrHtiZnfckMQ.roa (hash: LgXeymWOOJplKwnla/9DQkVIgYhvAdLAg89NuJpLJ/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/6e3fba-4d3a-43cb-babf-5f2882de3ec7/1/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/6e3fba-4d3a-43cb-babf-5f2882de3ec7/1/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:c6:76:fc:79:b1:e2:33:1a:da:97:a5:ef:38:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64e90627021adcfa5624342d3e5f8b48035acfb4
Validity
Not Before: Nov 11 07:01:00 2025 GMT
Not After : Nov 12 07:01:00 2025 GMT
Subject: CN=af57db92aff5001b82b9f37c36f94d6d082be01b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:e7:e6:6c:50:2b:e9:16:41:f4:6f:68:26:f5:
e8:1f:b5:24:03:12:f8:33:a2:45:a6:4e:ae:88:f9:
c1:f4:f2:4e:c6:01:78:6b:c1:66:83:07:37:31:29:
e6:c4:b8:be:e0:b9:6d:0d:db:8c:dd:71:30:a8:0b:
a8:14:67:cb:19:fc:50:6b:68:93:88:1a:e7:a0:07:
c9:21:13:77:83:bd:76:4c:56:03:aa:2f:ea:0c:89:
5d:8c:23:ed:07:7b:bc:79:65:12:fe:8a:5c:10:e3:
26:19:60:50:7f:01:af:96:1e:88:c2:36:a8:d2:e4:
a4:42:d6:36:12:3f:cc:05:ad:e7:22:58:35:67:b1:
1c:42:47:47:9e:32:8a:e9:98:ec:e2:e3:ea:0c:2d:
46:97:4c:ea:f1:31:2e:e6:1d:88:80:19:d7:94:8d:
c9:4d:f9:f8:5a:e6:fe:5b:dc:05:8f:a8:f3:f5:de:
c4:3e:e5:bc:e4:e8:6a:24:14:d8:33:90:12:34:36:
4b:97:21:c3:85:e3:46:b5:68:70:c1:5b:59:0c:ce:
95:a5:23:7e:30:21:26:9c:a4:ec:7c:8e:d0:d7:64:
03:c1:bc:7c:05:c2:f6:c5:85:80:30:43:98:d9:3d:
5d:19:f0:3b:cc:cb:3e:de:c9:93:ce:63:6f:e9:f1:
b0:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:57:DB:92:AF:F5:00:1B:82:B9:F3:7C:36:F9:4D:6D:08:2B:E0:1B
X509v3 Authority Key Identifier:
keyid:64:E9:06:27:02:1A:DC:FA:56:24:34:2D:3E:5F:8B:48:03:5A:CF:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6e3fba-4d3a-43cb-babf-5f2882de3ec7/1/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6e3fba-4d3a-43cb-babf-5f2882de3ec7/1/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:a5:dc:cd:09:ef:0a:13:de:64:8e:35:0e:3f:57:db:29:8c:
ff:f8:cc:46:5f:1a:f5:d6:70:73:88:12:6c:6b:3e:54:ff:23:
ff:b3:92:1b:6a:9a:f6:64:45:6c:f0:f7:70:4a:6b:6f:0d:08:
58:62:9e:b1:a5:79:36:97:63:2d:9e:8a:49:c0:db:dd:4d:71:
0e:a1:63:26:b8:21:0a:2f:1c:65:5b:33:64:1e:42:d4:be:18:
0f:9f:e2:7f:b0:9c:60:7b:6d:7d:a7:64:9e:98:03:7a:34:d1:
67:fd:c3:c8:48:8d:85:a5:88:c4:27:18:fb:a0:88:8e:25:28:
e9:45:88:38:59:95:f7:62:b2:b9:a2:07:91:54:d7:33:00:ef:
ce:d9:4c:60:cb:37:70:5d:bd:41:dc:75:bb:3d:a6:d7:2e:1c:
9d:5b:bb:dc:90:9d:9c:54:c2:f5:42:e6:ab:79:15:23:ab:22:
1f:56:d1:8d:b1:8d:11:8a:71:51:2c:6d:89:2c:be:31:9e:eb:
91:61:df:2b:35:e8:10:11:a7:5a:b9:38:7b:5f:c2:ea:f7:69:
9b:5e:a1:70:7d:f1:8e:0b:43:a4:82:80:db:8d:40:22:c4:95:
10:33:c8:15:12:66:48:b1:91:86:ab:39:f9:9c:aa:f0:b3:e4:
58:b1:0d:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:40:59 2025 by rpki-client