Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/71a2cb-e43b-4059-86e4-505092092f43/1/ZC42_4zZyRWZuz_s7BBmQ9nyFo0.mft
File: ZC42_4zZyRWZuz_s7BBmQ9nyFo0.mft (raw, json)
Hash identifier: OfkygrF5C+BUI1EUsXOOM84fgen0JKM9mWFTSDczX9Y=
Subject key identifier: CD:01:D0:A8:00:C2:BE:8D:4D:F0:C0:DB:B7:E0:4A:73:10:C3:B4:2B
Authority key identifier: 64:2E:36:FF:8C:D9:C9:15:99:BB:3F:EC:EC:10:66:43:D9:F2:16:8D
Certificate issuer: /CN=642e36ff8cd9c91599bb3fecec106643d9f2168d
Certificate serial: 019A70A52D7E737C0D0A2A9D7A811CE6875E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZC42_4zZyRWZuz_s7BBmQ9nyFo0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/71a2cb-e43b-4059-86e4-505092092f43/1/ZC42_4zZyRWZuz_s7BBmQ9nyFo0.mft
Manifest number: 11E1
Signing time: Tue 11 Nov 2025 02:01:04 +0000
Manifest this update: Tue 11 Nov 2025 02:01:04 +0000
Manifest next update: Wed 12 Nov 2025 02:01:04 +0000
Files and hashes: 1: ZC42_4zZyRWZuz_s7BBmQ9nyFo0.crl (hash: CU8nOqSUIGnpC54oHkjRjm+79nDDsRBP6vZGkpiGjDE=)
2: qjMEBhnPSGniZnI84qDRLbjstP0.roa (hash: zxHWsvNMH3bRN0wwXS6+6h5nHO/vNMw7yKNF0sDPkqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/71a2cb-e43b-4059-86e4-505092092f43/1/ZC42_4zZyRWZuz_s7BBmQ9nyFo0.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/71a2cb-e43b-4059-86e4-505092092f43/1/ZC42_4zZyRWZuz_s7BBmQ9nyFo0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZC42_4zZyRWZuz_s7BBmQ9nyFo0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:2d:7e:73:7c:0d:0a:2a:9d:7a:81:1c:e6:87:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=642e36ff8cd9c91599bb3fecec106643d9f2168d
Validity
Not Before: Nov 11 02:01:04 2025 GMT
Not After : Nov 12 02:01:04 2025 GMT
Subject: CN=cd01d0a800c2be8d4df0c0dbb7e04a7310c3b42b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:cb:1a:51:9f:d4:62:df:ad:a4:33:9a:13:8f:
0f:a2:8f:61:b1:5a:74:d2:a2:4c:32:8d:fb:6f:ea:
7d:e9:3f:47:fb:03:1a:a2:d8:82:dc:42:c6:36:9a:
e5:48:e2:c0:17:f1:bb:ab:e1:ab:7a:43:2c:8f:a1:
4f:be:26:3e:a6:62:9f:c9:c5:0d:75:90:12:c5:d2:
02:b0:70:e0:ea:c7:d5:96:13:d9:08:e2:39:d7:68:
96:f1:04:52:ab:26:08:06:33:d4:3e:b5:b6:53:98:
e8:c3:83:e3:b1:86:e1:c1:f3:9e:be:04:a7:2d:5d:
7f:9a:62:65:33:9f:2f:49:e5:2d:5c:47:33:14:ab:
89:2c:f7:1a:fe:8a:f1:b6:2b:01:84:be:0b:88:67:
53:78:69:ae:c8:c1:3e:d2:94:80:3d:c1:eb:db:a1:
a3:23:ea:5b:84:68:56:ad:36:17:4d:73:b6:c5:e3:
6b:6f:6d:c1:20:59:1d:a6:ba:44:b6:7a:7b:f4:93:
21:fa:bf:ae:9a:7a:31:5d:1b:25:05:a7:e0:54:55:
e5:96:bf:b0:53:72:31:0b:a4:c2:14:d7:b0:1b:cd:
1f:17:4a:db:fa:38:68:88:09:89:2e:f0:3f:ca:c1:
14:33:34:48:bd:04:b2:b5:88:37:98:39:21:f0:b8:
da:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:01:D0:A8:00:C2:BE:8D:4D:F0:C0:DB:B7:E0:4A:73:10:C3:B4:2B
X509v3 Authority Key Identifier:
keyid:64:2E:36:FF:8C:D9:C9:15:99:BB:3F:EC:EC:10:66:43:D9:F2:16:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZC42_4zZyRWZuz_s7BBmQ9nyFo0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/71a2cb-e43b-4059-86e4-505092092f43/1/ZC42_4zZyRWZuz_s7BBmQ9nyFo0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/71a2cb-e43b-4059-86e4-505092092f43/1/ZC42_4zZyRWZuz_s7BBmQ9nyFo0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:15:c3:b0:37:a8:93:7f:f9:8f:23:69:5b:cd:00:bf:c0:fb:
38:66:10:c0:9a:12:88:0f:2e:51:b1:50:e7:c6:83:d8:f5:51:
c9:a5:87:00:a5:fd:89:a8:67:6a:51:d2:b2:ea:c8:5a:a2:36:
4c:28:0a:17:0a:9d:07:30:4d:8a:23:6e:48:57:2c:e7:63:ae:
bd:60:d1:ee:fd:d9:6f:25:34:6a:15:86:a6:72:86:f5:1d:60:
df:05:39:68:67:7e:ba:9c:19:33:07:2d:f0:c0:0e:01:67:32:
a0:36:a5:f3:d7:7f:5b:f8:ee:0c:7e:27:58:6a:9d:fb:a5:62:
b8:8f:d4:fe:c0:a6:8e:cb:d9:03:6d:ce:79:45:33:a8:e7:97:
28:3c:99:ef:b8:ea:d8:aa:98:e4:a3:72:6f:86:95:a9:fe:4e:
82:9b:6f:b5:f7:61:0b:a1:d1:91:c6:93:eb:1d:b2:fe:ba:43:
05:28:69:63:1e:a5:fa:12:58:b2:9a:d2:ed:e7:52:f9:40:c1:
e8:b7:58:33:ce:4a:ca:8e:36:60:c4:56:fc:0b:08:03:d9:b2:
60:f3:d5:a3:9c:7c:0d:bb:1d:92:07:b1:00:da:72:12:e0:95:
8a:cb:9d:3c:59:b5:aa:ed:38:93:ea:8f:04:49:6c:4d:29:d2:
1d:20:0c:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:39 2025 by rpki-client