Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.mft
File: ZW0zxfFuPN2WCuBcgNn282_FU_I.mft (raw, json)
Hash identifier: NbcXp7I4kS/Kg91vbl8UoDPQdwazd50+bHihzHARUEc=
Subject key identifier: 42:CB:F5:FF:FB:85:D6:43:8A:B1:80:D4:2F:EB:D3:88:93:2C:0E:B9
Authority key identifier: 65:6D:33:C5:F1:6E:3C:DD:96:0A:E0:5C:80:D9:F6:F3:6F:C5:53:F2
Certificate issuer: /CN=656d33c5f16e3cdd960ae05c80d9f6f36fc553f2
Certificate serial: 019A70DC47FBB517AC0AD29B4F7C12076A39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZW0zxfFuPN2WCuBcgNn282_FU_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.mft
Manifest number: 0B86
Signing time: Tue 11 Nov 2025 03:01:15 +0000
Manifest this update: Tue 11 Nov 2025 03:01:15 +0000
Manifest next update: Wed 12 Nov 2025 03:01:15 +0000
Files and hashes: 1: DPh5nDPtcpqJ9naux6sZ9u0Dr1s.roa (hash: YTfkEG3kyAd2IQ6e7j/lkPx7FnYmaQ7XszGFKecXlqc=)
2: ZW0zxfFuPN2WCuBcgNn282_FU_I.crl (hash: U/EmwunsOjdNfS+yPQryZXMVagWAOaVSzL7JS+Gnnz8=)
3: hopE5nbQY5r20JQ6uaXH5JYpOWc.roa (hash: fzI2vMoCED9Ide/Md9CqSUe230wfYxn1MlpAm1WYjvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZW0zxfFuPN2WCuBcgNn282_FU_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:47:fb:b5:17:ac:0a:d2:9b:4f:7c:12:07:6a:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=656d33c5f16e3cdd960ae05c80d9f6f36fc553f2
Validity
Not Before: Nov 11 03:01:15 2025 GMT
Not After : Nov 12 03:01:15 2025 GMT
Subject: CN=42cbf5fffb85d6438ab180d42febd388932c0eb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:dd:f5:0b:5a:41:1d:f9:a5:4b:03:a2:52:b1:
61:e8:14:c9:31:57:74:72:2d:c7:69:3d:50:0b:b5:
8d:e1:38:07:02:55:62:a9:a2:18:b6:15:be:79:75:
47:76:91:24:10:b7:13:28:ff:27:fd:e0:9b:31:17:
1a:44:c2:7b:74:16:86:b2:26:e9:43:f1:57:54:1c:
f0:66:44:d1:48:b1:84:3e:bf:52:31:4f:75:88:3e:
c2:04:ca:a1:3d:a7:1d:44:cf:6c:b3:06:e1:61:51:
31:c6:e7:96:fc:70:04:d3:7a:a1:f3:07:77:32:fa:
2d:d0:30:a6:cf:e3:c8:79:28:31:78:74:1d:ab:4c:
98:d1:e8:48:8d:e6:67:61:8a:7b:d8:97:af:44:e0:
14:3a:dd:22:c1:31:c1:54:e0:e7:5e:df:58:fc:c4:
0e:33:4e:1e:2b:76:46:9b:e3:a4:46:1d:11:41:dd:
5d:54:dd:5d:12:49:60:f8:13:9f:19:e5:cf:77:84:
fb:e8:3a:80:6e:0f:ac:ca:82:53:a7:86:bf:91:88:
e7:c0:15:32:67:95:45:7f:f9:8c:38:ea:b2:51:a5:
91:78:09:20:92:e5:90:d6:1f:68:00:b3:0a:cb:58:
09:ea:2f:49:4b:7f:ec:99:c6:d1:59:9c:f2:b3:0d:
af:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:CB:F5:FF:FB:85:D6:43:8A:B1:80:D4:2F:EB:D3:88:93:2C:0E:B9
X509v3 Authority Key Identifier:
keyid:65:6D:33:C5:F1:6E:3C:DD:96:0A:E0:5C:80:D9:F6:F3:6F:C5:53:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZW0zxfFuPN2WCuBcgNn282_FU_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:4b:29:81:c6:80:d7:5e:4f:36:d1:50:76:77:81:ff:2e:cb:
41:b6:90:c1:20:95:04:49:24:b1:53:21:d8:db:3c:c9:f1:f2:
39:39:89:04:7b:22:e9:7f:5c:78:28:bc:6f:a0:dc:fe:a7:a7:
6b:7c:45:23:9d:d1:c5:23:3e:60:33:12:fd:11:cd:4d:b9:25:
2f:a1:40:8e:e9:f7:23:3b:0d:88:96:20:2d:9d:1f:2d:63:cc:
96:13:59:70:38:9d:5b:8d:11:17:4b:1f:36:d4:00:0c:f1:86:
f1:f0:e2:c4:9d:99:17:fe:c3:a6:13:06:10:33:3a:5f:6f:d0:
25:0d:8c:ea:58:ac:e0:7f:e9:cb:d5:a0:21:4d:b6:21:67:74:
10:6a:9e:df:8e:e4:1b:99:e8:f2:08:62:ae:e3:6a:21:f8:9f:
30:84:e7:c2:19:9e:99:09:ba:bc:91:fe:17:4f:de:ae:a2:17:
31:5a:46:4f:9b:e3:f5:6b:97:e7:73:99:71:42:7e:07:8c:2b:
13:ca:8d:f2:d7:79:d5:be:b1:f0:65:64:d7:f2:b2:e0:f2:d0:
39:8e:fc:87:7a:3a:3b:92:ce:80:11:6e:7f:e7:b2:c3:af:37:
fe:72:45:3e:1f:47:08:51:58:36:b6:94:5f:da:f0:8b:72:6e:
4e:d4:85:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:46:13 2025 by rpki-client