Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/ZCurhFmUi3l0dkjhPpm50KWCUGo.mft
File: ZCurhFmUi3l0dkjhPpm50KWCUGo.mft (raw, json)
Hash identifier: RVZBysCSkJAJ+c/30JMq+HtURe0MMGJs6Q90p02uOPA=
Subject key identifier: AF:94:8D:CB:27:E0:06:1B:EE:EB:7D:B2:48:E1:15:63:FA:C7:1B:0B
Authority key identifier: 64:2B:AB:84:59:94:8B:79:74:76:48:E1:3E:99:B9:D0:A5:82:50:6A
Certificate issuer: /CN=642bab8459948b79747648e13e99b9d0a582506a
Certificate serial: 019A733874581E16AD384DBC60744B57B0C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZCurhFmUi3l0dkjhPpm50KWCUGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/ZCurhFmUi3l0dkjhPpm50KWCUGo.mft
Manifest number: 0A89
Signing time: Tue 11 Nov 2025 14:01:10 +0000
Manifest this update: Tue 11 Nov 2025 14:01:10 +0000
Manifest next update: Wed 12 Nov 2025 14:01:10 +0000
Files and hashes: 1: ZCurhFmUi3l0dkjhPpm50KWCUGo.crl (hash: 4N0UUXDjJ4Hale9VwHqm4NgtXr14peRPDVudzh4E+oM=)
2: paYy_Hhxnm4PBAs2Lf2_YVwZO6U.roa (hash: ATfmnjPDFCrMSy8LdJNeeiWeAqOBvNXLV0H5uqzb3IU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/ZCurhFmUi3l0dkjhPpm50KWCUGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/ZCurhFmUi3l0dkjhPpm50KWCUGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZCurhFmUi3l0dkjhPpm50KWCUGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:38:74:58:1e:16:ad:38:4d:bc:60:74:4b:57:b0:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=642bab8459948b79747648e13e99b9d0a582506a
Validity
Not Before: Nov 11 14:01:10 2025 GMT
Not After : Nov 12 14:01:10 2025 GMT
Subject: CN=af948dcb27e0061beeeb7db248e11563fac71b0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:58:80:2b:07:17:db:f6:62:bf:50:c6:4d:43:
ab:a8:0f:3d:d5:7e:91:4b:f2:84:31:cc:ca:3b:26:
e6:a0:ce:ea:99:ef:3d:31:52:5c:d5:30:eb:10:5a:
94:2c:24:34:17:2a:73:e1:ad:1e:b0:9e:69:b9:fd:
d5:4f:7b:55:f6:b6:3f:5a:6c:2c:78:25:e6:bc:09:
39:85:59:8d:3b:dd:67:f2:9b:a1:47:a5:3a:37:a1:
ef:bd:3d:00:9f:ee:a4:75:f7:5e:2b:72:51:4d:5a:
b5:61:51:ff:55:31:3a:1e:f8:7f:f9:20:1f:66:2c:
39:f8:68:8b:89:8d:ef:03:3c:05:5f:b9:b2:12:44:
45:ef:5e:b8:9a:be:a6:72:10:6c:7c:ac:c6:5d:8d:
03:4c:c9:d9:35:a7:fc:9d:07:9b:92:8d:50:83:b6:
36:af:a0:c5:29:dc:45:e7:6a:2c:03:c4:01:5c:56:
48:51:de:91:3c:b3:fe:42:cf:93:7d:01:cf:09:06:
49:81:03:a9:b5:14:9f:fb:92:c8:ce:ba:1b:74:d5:
5e:e1:5a:89:ef:8a:6b:cb:dd:8c:26:ec:a8:fd:19:
a1:df:16:00:59:f6:54:db:46:a5:68:8a:89:d8:a2:
b7:07:62:59:a3:80:2c:f9:d1:df:81:63:0d:99:ed:
2a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:94:8D:CB:27:E0:06:1B:EE:EB:7D:B2:48:E1:15:63:FA:C7:1B:0B
X509v3 Authority Key Identifier:
keyid:64:2B:AB:84:59:94:8B:79:74:76:48:E1:3E:99:B9:D0:A5:82:50:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZCurhFmUi3l0dkjhPpm50KWCUGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/ZCurhFmUi3l0dkjhPpm50KWCUGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/ZCurhFmUi3l0dkjhPpm50KWCUGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:bb:b7:67:19:9d:d3:bd:38:c2:2e:73:6b:99:b3:a1:9b:0a:
7a:ac:58:39:c0:77:4e:60:18:8c:c1:40:ec:da:17:23:8c:fd:
0f:aa:92:6f:e3:6d:f4:fd:a5:22:e1:83:9d:6d:15:57:38:88:
2b:65:50:8d:e4:60:4b:c5:e4:aa:cd:09:aa:42:1d:11:22:6b:
e6:f5:e9:c7:7d:9c:d0:2a:64:bc:02:e9:2a:5d:b1:18:ea:4d:
c1:82:74:d1:4a:e4:ee:5b:62:c5:a7:0c:4f:d6:83:0c:db:36:
fb:4d:4e:e8:1a:27:e0:77:6a:72:cf:33:e5:97:50:c9:d8:a0:
93:89:9a:d6:9a:22:9f:f3:69:81:f1:69:a6:8e:37:a9:f0:7e:
0a:d0:aa:37:74:69:82:36:ca:e1:0a:46:f2:27:0d:df:86:28:
38:0d:22:eb:c5:40:7b:75:62:b5:9c:16:b4:59:c3:99:3e:15:
9a:3e:77:dc:95:6a:c8:56:f2:9b:df:05:c4:4f:bb:f4:bd:5c:
8d:af:2e:d8:80:f6:d7:1a:01:69:fe:16:98:1e:95:d2:77:73:
bc:f1:7b:32:6c:77:6c:2f:e4:eb:95:e0:ec:27:c7:a6:aa:1d:
40:3a:47:94:c8:d4:af:c0:dd:b3:95:9a:52:ad:60:34:ed:ce:
fe:16:00:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:22:21 2025 by rpki-client