Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/ZakGbVtqwwGcIDf1edEbrhpe6nM.mft
File: ZakGbVtqwwGcIDf1edEbrhpe6nM.mft (raw, json)
Hash identifier: PmhezgBz1MhveJYmj1lUNqtCyg4IzrGHVmjtZH/f6mI=
Subject key identifier: 8C:79:31:0A:76:9C:F7:D7:E6:02:22:BE:49:CB:8A:D8:DF:91:CA:C7
Authority key identifier: 65:A9:06:6D:5B:6A:C3:01:9C:20:37:F5:79:D1:1B:AE:1A:5E:EA:73
Certificate issuer: /CN=65a9066d5b6ac3019c2037f579d11bae1a5eea73
Certificate serial: 019A4EF5BAEBEAFF3CDDBD74C0B7B40EA69C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZakGbVtqwwGcIDf1edEbrhpe6nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/ZakGbVtqwwGcIDf1edEbrhpe6nM.mft
Manifest number: 0451
Signing time: Tue 04 Nov 2025 13:01:58 +0000
Manifest this update: Tue 04 Nov 2025 13:01:58 +0000
Manifest next update: Wed 05 Nov 2025 13:01:58 +0000
Files and hashes: 1: HwGE0614r9XuIYTbb7FI9qw3QhA.roa (hash: NN98O8b8/m43VOkHIWYXipqgMBc9JvK22oHaFCTLRzA=)
2: ZakGbVtqwwGcIDf1edEbrhpe6nM.crl (hash: aEMRGwmPt8wGVTmU4e/MFqvR8z1FIqsPdmTK6qLc6H4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/ZakGbVtqwwGcIDf1edEbrhpe6nM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/ZakGbVtqwwGcIDf1edEbrhpe6nM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZakGbVtqwwGcIDf1edEbrhpe6nM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:ba:eb:ea:ff:3c:dd:bd:74:c0:b7:b4:0e:a6:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65a9066d5b6ac3019c2037f579d11bae1a5eea73
Validity
Not Before: Nov 4 13:01:58 2025 GMT
Not After : Nov 5 13:01:58 2025 GMT
Subject: CN=8c79310a769cf7d7e60222be49cb8ad8df91cac7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:fe:f6:6b:7a:39:19:c3:3a:c0:3f:4c:a5:46:
a7:7d:25:c0:a0:a2:d5:06:7b:87:1e:ce:cf:d7:c8:
27:1d:42:34:27:08:e0:d5:46:85:1b:9c:3f:9c:4c:
ec:3b:c7:f7:71:4d:80:2e:e5:ce:97:e8:5c:e0:c4:
d5:0c:f4:dd:67:77:e9:84:df:14:25:40:56:3c:25:
8e:51:fe:3a:6b:6c:49:bc:9a:d8:3d:a4:39:1b:19:
12:66:b7:e2:c9:99:0d:92:63:8b:f4:11:36:86:5f:
38:d8:ff:a5:2f:2d:5c:15:2e:9d:1d:64:83:ec:87:
8b:0b:05:b2:52:da:5f:4b:34:ea:66:11:4d:7c:f2:
89:50:45:9f:0b:eb:99:11:62:71:d4:31:b8:92:a3:
da:bd:b7:3c:21:39:f5:f1:2a:6f:8e:de:55:ea:e1:
f8:f0:39:71:39:1f:50:27:0f:ff:8e:8b:30:d4:1e:
c6:71:f2:6d:aa:61:8f:c5:2a:5f:71:57:3f:4e:ea:
4f:c8:3b:1a:84:79:2a:50:93:0d:3d:7c:b2:30:e7:
29:22:d7:65:8e:c7:4d:9f:98:d9:5d:61:9c:79:c5:
64:4b:cf:70:e4:e6:b9:db:33:96:de:d2:c3:56:e4:
08:9b:30:d8:a7:a9:8c:51:ce:e1:10:84:59:67:53:
d8:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:79:31:0A:76:9C:F7:D7:E6:02:22:BE:49:CB:8A:D8:DF:91:CA:C7
X509v3 Authority Key Identifier:
keyid:65:A9:06:6D:5B:6A:C3:01:9C:20:37:F5:79:D1:1B:AE:1A:5E:EA:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZakGbVtqwwGcIDf1edEbrhpe6nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/ZakGbVtqwwGcIDf1edEbrhpe6nM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/ZakGbVtqwwGcIDf1edEbrhpe6nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:03:e9:1f:50:e8:fb:f9:68:eb:4d:01:3b:67:a1:33:fd:0d:
40:ce:7c:b3:a6:5f:81:30:a5:ac:86:fb:fd:50:a3:8a:a5:f8:
47:1f:c6:1a:6e:3f:ff:8a:1e:c0:38:65:dd:a2:ca:32:b1:34:
c5:3e:b1:18:ca:94:dd:67:a3:11:35:34:e1:c7:5a:c1:b7:c0:
b7:52:32:2a:55:c9:38:1d:53:93:e2:dc:25:5f:7a:79:dd:6a:
4a:72:84:fc:54:db:1c:07:78:19:d2:c1:93:ff:fb:81:82:b7:
80:2e:6d:99:9b:7c:65:e8:5c:bd:a9:10:90:38:48:45:96:99:
35:fc:ff:9a:91:c8:1f:e1:c0:f9:49:15:16:00:b1:44:ac:cb:
cd:f5:56:d9:56:ec:e6:5c:54:37:0f:f1:f1:45:aa:23:99:2b:
e1:31:2c:0d:5c:26:de:14:a9:98:04:64:a4:82:ae:de:24:a3:
53:89:f1:df:31:ba:24:22:40:24:eb:dd:1c:ee:23:48:d9:c5:
a1:71:82:02:2d:bc:c7:34:f6:ee:a8:25:aa:25:3a:e8:d2:d6:
61:a4:e6:f0:34:8c:11:34:9f:6f:fe:07:c9:48:2d:75:a4:ba:
58:fd:14:d7:93:4b:f3:e1:c3:60:31:3e:ff:76:a0:2d:ad:ce:
4c:2b:fd:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:02:05 2025 by rpki-client