Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/aad626-dace-44d8-818d-387afa0a534f/1/ZAsfh3LG70hOLNLWYmPy75j6OWg.mft
File: ZAsfh3LG70hOLNLWYmPy75j6OWg.mft (raw, json)
Hash identifier: fJfihqnekg5k5u9uwKN7q1xxo17TtHL7ti4Urd5GZDM=
Subject key identifier: A0:78:38:7B:50:72:83:D3:DB:7C:6D:D4:40:18:07:CD:7A:79:B1:AD
Authority key identifier: 64:0B:1F:87:72:C6:EF:48:4E:2C:D2:D6:62:63:F2:EF:98:FA:39:68
Certificate issuer: /CN=640b1f8772c6ef484e2cd2d66263f2ef98fa3968
Certificate serial: 019A7112E35D71200BA6F007EB5D477F827F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZAsfh3LG70hOLNLWYmPy75j6OWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/aad626-dace-44d8-818d-387afa0a534f/1/ZAsfh3LG70hOLNLWYmPy75j6OWg.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 04:00:54 +0000
Manifest this update: Tue 11 Nov 2025 04:00:54 +0000
Manifest next update: Wed 12 Nov 2025 04:00:54 +0000
Files and hashes: 1: 5sIyZUUxUKqIAWVgUkx5eBGU5N0.roa (hash: 3M5MqZOHY6IgU/oY5PEX9Quago5F235Gft3ZQVLU+EE=)
2: ZAsfh3LG70hOLNLWYmPy75j6OWg.crl (hash: ae45hEQijOY6yj24Y1iSxpEzVuhrxRTKyiQowDeBXec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/aad626-dace-44d8-818d-387afa0a534f/1/ZAsfh3LG70hOLNLWYmPy75j6OWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/aad626-dace-44d8-818d-387afa0a534f/1/ZAsfh3LG70hOLNLWYmPy75j6OWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZAsfh3LG70hOLNLWYmPy75j6OWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:e3:5d:71:20:0b:a6:f0:07:eb:5d:47:7f:82:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=640b1f8772c6ef484e2cd2d66263f2ef98fa3968
Validity
Not Before: Nov 11 04:00:54 2025 GMT
Not After : Nov 12 04:00:54 2025 GMT
Subject: CN=a078387b507283d3db7c6dd4401807cd7a79b1ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c3:74:5c:ab:7f:a0:4e:28:53:7f:ee:86:41:
6f:1b:16:45:8c:95:e6:82:84:d1:cd:f4:84:53:98:
46:da:bd:d0:ba:45:6f:e1:7d:15:cc:00:5c:c5:cc:
88:fc:1e:20:74:aa:37:e3:46:a5:75:68:ab:99:79:
3f:ed:e8:00:b1:42:20:14:22:40:e7:1b:d2:79:aa:
70:82:19:bf:22:f7:5e:ab:1d:4f:7d:32:33:b6:63:
d5:95:06:05:9c:b7:73:35:0b:62:4f:f6:11:36:69:
b9:97:4a:03:a2:e2:b7:de:1b:54:cb:2a:b7:25:1f:
ae:0f:a9:e5:4d:4f:1e:19:c5:15:76:38:29:ed:2c:
fc:8c:f1:31:57:c4:49:06:a7:4f:5d:52:98:f5:43:
31:49:97:2c:0f:4d:d4:cc:cb:9c:b5:d7:4b:57:7a:
19:2b:99:0a:d1:b3:97:36:9d:28:10:9e:2a:ff:f4:
92:72:43:b6:c1:76:87:5d:3a:d4:0d:97:da:99:fe:
09:ce:77:5f:46:4c:90:db:24:0e:e2:46:ad:d4:dd:
e6:22:b3:b9:12:70:8f:32:65:10:d0:66:cf:57:f6:
98:48:5d:18:cd:cb:08:53:09:01:4e:f3:64:ba:b6:
32:05:66:f1:f7:a4:4c:ac:5a:46:92:5f:a9:c0:18:
f9:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:78:38:7B:50:72:83:D3:DB:7C:6D:D4:40:18:07:CD:7A:79:B1:AD
X509v3 Authority Key Identifier:
keyid:64:0B:1F:87:72:C6:EF:48:4E:2C:D2:D6:62:63:F2:EF:98:FA:39:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZAsfh3LG70hOLNLWYmPy75j6OWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/aad626-dace-44d8-818d-387afa0a534f/1/ZAsfh3LG70hOLNLWYmPy75j6OWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/aad626-dace-44d8-818d-387afa0a534f/1/ZAsfh3LG70hOLNLWYmPy75j6OWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:4c:4e:c6:6a:29:16:9f:85:75:66:d7:76:88:13:15:a1:5d:
6f:c2:f9:12:c3:6a:57:24:8a:d4:73:ca:47:89:f0:12:b3:fd:
da:be:60:3a:16:2d:c5:ec:b8:99:1a:a4:7e:a3:af:e5:56:25:
c1:fe:50:d3:2c:07:40:77:a3:e2:36:3d:77:86:6f:4e:f0:9f:
73:24:4d:eb:dc:e9:b7:59:58:0f:32:fa:31:55:66:29:8a:f3:
11:31:33:52:81:8b:82:b9:59:59:68:98:0a:4c:84:ca:55:a2:
5f:92:25:27:70:ab:c1:3e:ed:56:43:bc:76:e7:6d:67:75:e6:
5e:59:cb:40:54:6a:90:a2:77:ab:7f:07:ca:ef:1c:c9:2c:b3:
47:a6:3a:4d:63:89:19:1e:56:7d:6b:f6:3c:a7:48:58:a5:ce:
3f:58:b6:40:a4:db:f1:e4:b3:58:17:c4:5e:e4:b4:40:c7:e6:
76:bd:18:65:ab:50:3d:dc:4b:7f:d7:52:b4:39:62:89:1c:48:
eb:35:1c:57:54:65:0a:1b:8a:af:f0:ce:67:3e:85:d1:67:b5:
1f:85:73:58:6e:a1:5e:81:7e:60:60:f1:15:08:ab:1d:50:dc:
a3:6b:d9:b4:40:ce:8c:e1:0a:47:94:b3:20:cb:3a:89:39:65:
df:cc:af:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:58:45 2025 by rpki-client