Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/d796e4-d654-4e7b-84d4-f01a62400821/1/ZP9Bok_EgnG5kjJ6La5aQzve0FA.mft
File: ZP9Bok_EgnG5kjJ6La5aQzve0FA.mft (raw, json)
Hash identifier: EyXPP4Dl6l8EPux8BjjLqMygMNQZV41rwzrSgAkEbZc=
Subject key identifier: 22:20:74:F2:96:39:B0:89:40:3B:15:13:FB:8A:10:9A:46:4C:3A:E8
Authority key identifier: 64:FF:41:A2:4F:C4:82:71:B9:92:32:7A:2D:AE:5A:43:3B:DE:D0:50
Certificate issuer: /CN=64ff41a24fc48271b992327a2dae5a433bded050
Certificate serial: 019A71EEDA6325C9B566A13D65C4395469FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZP9Bok_EgnG5kjJ6La5aQzve0FA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/d796e4-d654-4e7b-84d4-f01a62400821/1/ZP9Bok_EgnG5kjJ6La5aQzve0FA.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 08:01:09 +0000
Manifest this update: Tue 11 Nov 2025 08:01:09 +0000
Manifest next update: Wed 12 Nov 2025 08:01:09 +0000
Files and hashes: 1: ZP9Bok_EgnG5kjJ6La5aQzve0FA.crl (hash: E6c1O/jj2Y/VghfyXYVkIsVJ4GF7xysVgeGwaW96rKI=)
2: hQBjTq5KMkIiJgnQG8IwJwMqWkc.roa (hash: 2H6xUWWibA2OIWVz4dbFvNnKSleGcdT636P9g8q1NEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/d796e4-d654-4e7b-84d4-f01a62400821/1/ZP9Bok_EgnG5kjJ6La5aQzve0FA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/d796e4-d654-4e7b-84d4-f01a62400821/1/ZP9Bok_EgnG5kjJ6La5aQzve0FA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZP9Bok_EgnG5kjJ6La5aQzve0FA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:da:63:25:c9:b5:66:a1:3d:65:c4:39:54:69:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64ff41a24fc48271b992327a2dae5a433bded050
Validity
Not Before: Nov 11 08:01:09 2025 GMT
Not After : Nov 12 08:01:09 2025 GMT
Subject: CN=222074f29639b089403b1513fb8a109a464c3ae8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8e:5d:19:53:21:64:b8:9d:88:9d:89:53:cc:
63:ae:25:58:d9:69:2a:6e:5b:5e:54:10:ed:f8:69:
90:6e:cf:7f:64:9f:3e:da:26:f9:1a:8a:ac:38:da:
cc:75:23:46:3a:d7:9b:d0:0f:68:f1:64:27:05:a8:
08:f9:60:9b:5d:59:52:2c:dd:92:28:5a:cd:28:64:
52:cf:89:99:7f:2a:81:c4:88:59:0a:9b:54:b7:bb:
ed:7f:53:d1:0a:cd:6b:26:5e:5b:b9:32:ac:fa:48:
9d:10:06:aa:cd:85:79:27:72:fd:37:13:bd:22:0f:
d6:a0:64:44:9e:db:f1:6a:62:05:41:82:e9:06:94:
13:68:a7:7e:75:92:21:e8:aa:0b:55:f6:b7:45:97:
30:b2:2a:b3:15:da:6d:d1:f3:6b:12:dc:16:ab:be:
80:e1:b2:a1:60:2e:13:5c:e8:5a:88:f3:f6:03:8b:
2f:75:36:90:3c:10:14:93:b8:d4:c1:de:64:3b:75:
91:c6:d8:c5:58:13:f9:83:14:d5:8c:de:da:ab:31:
dc:8f:4f:2c:63:97:c1:ff:03:a5:b8:73:6a:a4:58:
17:fe:c2:4d:c8:9c:f5:39:62:64:4b:75:6a:cd:3f:
28:48:ae:ed:5c:77:2f:3f:e5:09:0e:df:95:65:19:
95:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:20:74:F2:96:39:B0:89:40:3B:15:13:FB:8A:10:9A:46:4C:3A:E8
X509v3 Authority Key Identifier:
keyid:64:FF:41:A2:4F:C4:82:71:B9:92:32:7A:2D:AE:5A:43:3B:DE:D0:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZP9Bok_EgnG5kjJ6La5aQzve0FA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/d796e4-d654-4e7b-84d4-f01a62400821/1/ZP9Bok_EgnG5kjJ6La5aQzve0FA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/d796e4-d654-4e7b-84d4-f01a62400821/1/ZP9Bok_EgnG5kjJ6La5aQzve0FA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:1e:80:bc:7b:5d:04:e5:b3:d3:4c:0c:94:67:f8:95:7e:1e:
7d:04:bb:b2:7e:6f:a6:32:07:a2:4a:ae:19:ef:85:81:dd:04:
83:3a:ba:00:db:06:f3:75:10:6b:6b:62:6b:d0:55:d1:b1:4e:
01:8a:2b:43:c9:47:01:50:1a:69:c6:98:5b:15:13:f4:ba:3a:
f6:a6:8f:a2:72:a8:f2:78:b7:80:43:fd:39:72:a5:ca:95:95:
b9:ff:07:db:e0:c5:a9:e1:da:92:d5:90:bd:ef:71:a6:e2:4e:
cf:27:9c:2d:a9:ad:fa:0e:7c:39:05:c2:e7:7f:1d:a8:2d:ad:
1a:16:3a:44:bd:5c:a5:b8:e2:a6:c7:bc:e9:35:2f:ca:69:5b:
ce:42:49:31:28:71:d7:fa:8a:c9:88:56:38:c3:b5:ed:11:cf:
2f:2b:18:07:8a:08:2c:54:87:3b:f9:bd:c0:69:8d:3b:a7:61:
26:c7:10:18:ee:ff:6c:e8:76:92:46:d4:86:54:ad:52:8a:39:
f6:f5:ec:42:79:8b:bf:33:ef:8e:f8:27:73:8c:2a:77:22:84:
9c:78:71:81:4b:57:42:0d:56:a6:a4:df:4b:b3:c7:98:24:dd:
cc:5e:a1:13:48:51:17:2e:a2:b9:8d:ce:c8:63:c1:da:93:56:
0e:28:0c:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:17:05 2025 by rpki-client