Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cf7d5c-04a5-48a7-b8c6-37a442e65f18/1/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.mft
File: ZKmFbbGrOyTwnpy5J0N2hmgwFBE.mft (raw, json)
Hash identifier: 6W0r47WBwQ0DQd9PUSXs2O3DTXgjMMgpJ1UMMr6GpjQ=
Subject key identifier: A9:0D:A7:D2:EA:6B:B5:22:60:66:67:FC:5A:98:96:87:D0:A7:1F:13
Authority key identifier: 64:A9:85:6D:B1:AB:3B:24:F0:9E:9C:B9:27:43:76:86:68:30:14:11
Certificate issuer: /CN=64a9856db1ab3b24f09e9cb92743768668301411
Certificate serial: 019A70A57C3DF9036E7BCC5014D6808847FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cf7d5c-04a5-48a7-b8c6-37a442e65f18/1/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.mft
Manifest number: 1328
Signing time: Tue 11 Nov 2025 02:01:24 +0000
Manifest this update: Tue 11 Nov 2025 02:01:24 +0000
Manifest next update: Wed 12 Nov 2025 02:01:24 +0000
Files and hashes: 1: ID_lbNPN5Y-E-d8mbQhTW4YaucM.roa (hash: pqF3+TVfZVLtWeeY0X/7rX4dAra1r0f5BNTNZcfYgyw=)
2: ZKmFbbGrOyTwnpy5J0N2hmgwFBE.crl (hash: qxEWTjXR/g6E72xqgvGK0MBlon4qSiwZI7280BNyB6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/cf7d5c-04a5-48a7-b8c6-37a442e65f18/1/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/cf7d5c-04a5-48a7-b8c6-37a442e65f18/1/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:7c:3d:f9:03:6e:7b:cc:50:14:d6:80:88:47:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64a9856db1ab3b24f09e9cb92743768668301411
Validity
Not Before: Nov 11 02:01:24 2025 GMT
Not After : Nov 12 02:01:24 2025 GMT
Subject: CN=a90da7d2ea6bb522606667fc5a989687d0a71f13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:fd:97:93:13:06:75:19:48:2f:ee:a1:d3:9f:
e5:2f:04:ae:38:b3:9a:6d:4d:e0:93:51:60:39:61:
82:75:d6:3a:a5:f1:05:17:21:1d:98:d0:18:e2:e6:
72:ed:7e:9b:9f:c2:b8:58:36:94:ad:42:24:4c:b3:
02:a1:b1:e7:7d:b4:63:9c:82:8a:22:76:be:1a:3a:
5d:91:5b:48:5e:d0:d0:fd:6b:c2:dd:c5:71:6f:23:
95:84:8e:79:9c:6e:5a:be:54:c7:14:db:8f:c3:6d:
2e:2f:c4:62:19:d5:1c:cf:ee:72:4c:41:ba:94:a6:
75:d4:0d:66:89:df:84:e7:ab:25:e8:a1:45:e7:2e:
f1:59:ce:32:5c:c0:9a:f6:b0:3c:c6:fb:51:0c:44:
4c:2b:19:10:ab:15:53:32:f1:94:4d:ba:a3:be:f0:
17:d9:b2:a7:9f:0f:b2:07:34:01:42:e9:8f:e9:b6:
c0:13:19:2e:01:d8:d9:56:5b:64:9b:37:6c:9d:40:
43:97:78:de:8f:8d:19:b1:0d:a5:4d:c9:f1:88:b6:
42:dc:c8:f0:24:a5:4c:ae:5f:ff:28:f3:08:7a:24:
5c:f1:2c:ec:b5:82:3f:00:2f:af:8a:35:9d:43:8d:
25:79:ad:ea:8f:58:0e:42:95:5e:da:45:66:6e:68:
5c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:0D:A7:D2:EA:6B:B5:22:60:66:67:FC:5A:98:96:87:D0:A7:1F:13
X509v3 Authority Key Identifier:
keyid:64:A9:85:6D:B1:AB:3B:24:F0:9E:9C:B9:27:43:76:86:68:30:14:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cf7d5c-04a5-48a7-b8c6-37a442e65f18/1/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cf7d5c-04a5-48a7-b8c6-37a442e65f18/1/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:be:6a:13:9e:11:ea:24:29:8e:8a:3d:04:dd:10:89:5f:f5:
9a:a7:03:58:ac:ef:16:d5:54:81:c2:02:d7:5f:11:0d:07:a4:
53:49:e5:f6:cf:55:31:80:1e:9a:5a:57:33:29:78:52:6c:cc:
28:db:ad:89:db:f4:20:d8:b1:4a:f6:97:df:09:d2:07:ef:35:
59:02:cd:e3:02:50:0f:5b:27:cb:1f:4c:2a:be:d0:fc:c3:ae:
06:4f:01:8a:85:a0:2f:98:fb:22:4d:b7:22:b3:92:71:99:8c:
4c:03:fb:7f:4a:54:75:54:d4:e1:38:f0:80:3b:0e:b8:b1:a7:
44:85:b0:2a:f2:ed:71:f7:17:4f:e6:a2:53:c7:ae:eb:19:27:
29:d5:c6:15:c9:30:53:ac:ed:60:b1:80:73:de:87:27:cb:0d:
b8:c6:24:83:ab:38:33:ab:3d:1f:84:7c:60:c0:36:4c:eb:3b:
8b:47:b2:00:42:f8:16:92:55:f0:15:33:2c:c5:0a:d6:37:8c:
c0:81:d4:b2:f9:2b:91:14:aa:91:fe:6a:08:1f:e2:9b:4d:f1:
04:04:48:35:6a:25:52:55:1a:40:97:31:ff:b3:0d:08:4d:33:
bb:65:7c:48:84:dd:ed:1c:28:f2:be:75:71:58:db:e5:e7:ea:
85:56:5a:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:01 2025 by rpki-client