Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/026ed8-ab9c-4753-9b20-2ba9d516f944/1/ZRDCbzpPrHAKx7DjSQuPoXXwitg.mft
File: ZRDCbzpPrHAKx7DjSQuPoXXwitg.mft (raw, json)
Hash identifier: eTGI6SvSqHNh8jXuEmodt1FO324TVhE3oPtB0Ba+pmI=
Subject key identifier: 11:24:9D:59:3F:19:E3:3B:12:C4:D3:10:56:1B:45:D1:80:D8:2F:19
Authority key identifier: 65:10:C2:6F:3A:4F:AC:70:0A:C7:B0:E3:49:0B:8F:A1:75:F0:8A:D8
Certificate issuer: /CN=6510c26f3a4fac700ac7b0e3490b8fa175f08ad8
Certificate serial: 019A70A4FAA07DEDABAEB955AC44BCBA90CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZRDCbzpPrHAKx7DjSQuPoXXwitg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/026ed8-ab9c-4753-9b20-2ba9d516f944/1/ZRDCbzpPrHAKx7DjSQuPoXXwitg.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 02:00:51 +0000
Manifest this update: Tue 11 Nov 2025 02:00:51 +0000
Manifest next update: Wed 12 Nov 2025 02:00:51 +0000
Files and hashes: 1: ZRDCbzpPrHAKx7DjSQuPoXXwitg.crl (hash: TKlFhdgjfSR1hXHbseuKcD9MZFsRdL8X/s+ah3Xk08c=)
2: y6XKa07TTPMFsjvwx8e568cVXPU.roa (hash: C/iy2HFJBUXxZmfuDRQqFLZ88BpL9CevYMYDHGoS6P4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/026ed8-ab9c-4753-9b20-2ba9d516f944/1/ZRDCbzpPrHAKx7DjSQuPoXXwitg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/026ed8-ab9c-4753-9b20-2ba9d516f944/1/ZRDCbzpPrHAKx7DjSQuPoXXwitg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZRDCbzpPrHAKx7DjSQuPoXXwitg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a4:fa:a0:7d:ed:ab:ae:b9:55:ac:44:bc:ba:90:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6510c26f3a4fac700ac7b0e3490b8fa175f08ad8
Validity
Not Before: Nov 11 02:00:51 2025 GMT
Not After : Nov 12 02:00:51 2025 GMT
Subject: CN=11249d593f19e33b12c4d310561b45d180d82f19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e8:ee:82:a4:24:97:ad:85:f7:f5:9d:05:28:
d4:80:0d:7e:62:bd:24:97:64:74:98:5c:c1:92:67:
e8:38:11:dd:c6:c9:b1:d3:7b:16:7b:be:36:1a:bb:
e5:0b:38:76:11:e0:4c:10:c1:da:f2:69:f7:35:7e:
33:cb:c1:85:6e:11:6c:73:1c:a3:7f:2f:a7:78:1b:
75:06:65:b3:c3:ba:be:24:07:2c:97:3c:2f:3d:bc:
d1:4f:f0:90:0e:0e:db:00:21:1e:0b:7f:2f:8d:63:
c1:bf:5b:11:78:28:51:49:f8:a3:fe:c4:e6:fa:10:
75:f7:6c:d5:83:72:92:8b:94:fb:42:d4:93:72:83:
41:f1:da:2c:33:ba:b6:66:e3:6d:c1:0c:59:61:de:
a8:fb:ae:7f:17:b4:06:e6:ad:77:a0:62:5b:e8:cf:
3b:05:d6:f1:da:f0:a1:e1:c9:e7:a6:d7:58:62:9e:
93:12:7b:9f:2f:5c:c1:87:f7:4d:31:38:0d:ea:f0:
11:06:d4:7a:f2:70:28:7d:fa:f6:1f:66:41:12:ed:
a1:f1:1e:3c:f3:eb:8b:a6:ee:5f:7b:0d:0e:a2:47:
3e:17:5e:d6:3f:0f:8d:6d:f7:54:71:27:60:10:65:
a2:3d:14:0f:75:db:a9:3e:6b:23:c8:de:09:30:77:
33:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:24:9D:59:3F:19:E3:3B:12:C4:D3:10:56:1B:45:D1:80:D8:2F:19
X509v3 Authority Key Identifier:
keyid:65:10:C2:6F:3A:4F:AC:70:0A:C7:B0:E3:49:0B:8F:A1:75:F0:8A:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRDCbzpPrHAKx7DjSQuPoXXwitg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/026ed8-ab9c-4753-9b20-2ba9d516f944/1/ZRDCbzpPrHAKx7DjSQuPoXXwitg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/026ed8-ab9c-4753-9b20-2ba9d516f944/1/ZRDCbzpPrHAKx7DjSQuPoXXwitg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:a9:49:52:42:0c:f9:9b:cb:10:f6:37:54:0d:6e:03:39:13:
4b:db:5d:1b:2f:ca:12:44:2f:76:95:77:f2:4a:01:6f:5d:8b:
59:0b:e0:f0:79:e2:db:c7:e1:89:38:4d:d8:5e:22:b6:ac:7e:
64:cb:12:96:fa:d9:ac:52:4e:6e:d8:56:cf:9b:7a:12:3f:6e:
19:2d:ea:fa:96:ec:38:ad:f7:2f:e3:b7:6c:bf:bb:0d:90:b3:
26:ed:69:02:f8:2a:bf:ea:80:53:ae:76:fa:be:1a:0c:0d:3e:
3c:eb:1e:ee:53:ca:a5:6f:03:f9:3a:1e:d1:8e:51:0b:c4:4b:
e5:97:92:a8:ef:41:6c:3e:66:96:ba:fc:24:5a:0f:84:15:85:
be:8e:18:2e:f9:07:97:8c:71:79:63:4e:7c:bf:26:89:e6:06:
91:9f:57:b8:db:e5:bb:c9:f4:3c:76:ec:55:36:48:ba:24:db:
99:d3:a3:5a:74:92:4f:c2:b1:3e:a5:9d:e0:4e:e9:bb:72:14:
e0:23:5c:b3:58:84:a8:ac:f6:67:73:b2:d6:e2:60:5b:eb:c2:
08:58:00:39:64:1b:4e:d3:64:34:2d:08:e1:82:bc:fc:6c:61:
84:d0:2c:b8:9b:85:43:86:4e:85:c0:a9:56:1a:d2:ac:8c:a4:
a7:d6:6e:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:41:53 2025 by rpki-client