Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.mft
File: ZU2WZypZ7DiV_BWEesobKdt5EkQ.mft (raw, json)
Hash identifier: 8mVymLr/iORntHOhhh1jnT0KHang/grE2JezgbcrPlw=
Subject key identifier: B5:66:AE:53:16:FC:4C:60:22:5E:61:2F:77:E6:BF:07:E5:33:AF:35
Authority key identifier: 65:4D:96:67:2A:59:EC:38:95:FC:15:84:7A:CA:1B:29:DB:79:12:44
Certificate issuer: /CN=654d96672a59ec3895fc15847aca1b29db791244
Certificate serial: 019A7293DD92145BE902F343D52AAF0457FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZU2WZypZ7DiV_BWEesobKdt5EkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.mft
Manifest number: 06A2
Signing time: Tue 11 Nov 2025 11:01:24 +0000
Manifest this update: Tue 11 Nov 2025 11:01:24 +0000
Manifest next update: Wed 12 Nov 2025 11:01:24 +0000
Files and hashes: 1: 3tamc3sOw67HPVcPTfi-B2O8yU0.roa (hash: VKiy/+EDaLvbaW8IRlukGidMdNs6XDi7iV1i6VLWYS0=)
2: ZU2WZypZ7DiV_BWEesobKdt5EkQ.crl (hash: OWJIuctRTfIzpGvQuc7/OyafJUqFIwWMqFr+DVF59K0=)
3: oMFhnG_2Z4roWQc3WgoG1HgKdEc.roa (hash: QGs1HFAKixXlw1vT4Oet6ENYZoHU7usshB/hp90M1GI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZU2WZypZ7DiV_BWEesobKdt5EkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:dd:92:14:5b:e9:02:f3:43:d5:2a:af:04:57:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=654d96672a59ec3895fc15847aca1b29db791244
Validity
Not Before: Nov 11 11:01:24 2025 GMT
Not After : Nov 12 11:01:24 2025 GMT
Subject: CN=b566ae5316fc4c60225e612f77e6bf07e533af35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:64:c7:63:c8:0c:c3:c7:e9:de:f4:df:82:ba:
6d:bf:04:59:d3:e9:f1:c0:19:05:57:aa:ac:43:19:
d4:3f:ff:1e:c7:9a:06:b3:64:1d:b8:87:62:2e:5b:
35:fa:f3:c6:b6:61:a8:65:c9:17:ae:d5:ab:49:5e:
60:e6:bb:13:7a:fe:b7:b3:64:29:ad:76:17:1b:f1:
1f:c4:25:21:49:1d:cf:13:16:59:86:2b:b9:66:f0:
cb:f7:91:de:18:5f:3b:35:96:8c:71:1a:53:f7:c8:
ab:bc:a2:0b:65:d8:9f:bd:6d:ff:46:29:a3:8c:8b:
67:aa:cf:2d:1b:61:52:da:33:2f:59:85:60:91:c3:
a2:f6:a8:48:56:7a:26:65:d5:86:98:7a:e2:f6:08:
f5:88:15:9a:61:d3:ec:fa:14:6a:ba:58:98:51:bc:
ab:96:5c:a5:ed:c6:27:2d:49:18:53:dc:6c:90:95:
4a:5d:93:20:10:29:ab:db:8f:be:68:ba:bc:93:92:
6f:f0:66:26:ea:7e:cc:e2:63:e7:c7:e1:c8:3d:9f:
05:d9:d3:86:91:4d:d0:61:07:cf:c9:b2:d9:12:7e:
66:25:04:47:1b:95:cc:4f:fb:7d:b1:c6:22:67:44:
47:08:6d:f7:b3:58:87:73:95:1d:1f:15:7e:81:3c:
f9:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:66:AE:53:16:FC:4C:60:22:5E:61:2F:77:E6:BF:07:E5:33:AF:35
X509v3 Authority Key Identifier:
keyid:65:4D:96:67:2A:59:EC:38:95:FC:15:84:7A:CA:1B:29:DB:79:12:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZU2WZypZ7DiV_BWEesobKdt5EkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:9a:2c:1f:3f:02:4e:9e:55:ae:2e:e2:4b:94:bf:02:45:99:
62:98:fa:75:b4:23:5c:13:c6:36:58:1e:36:36:54:19:a8:8f:
7a:c5:04:8d:9f:1d:45:45:84:18:2e:51:56:3b:27:0b:41:55:
7a:fc:21:4f:6b:13:ec:fc:d9:7f:f7:58:c4:84:76:00:82:37:
77:93:58:e8:03:92:49:d0:fa:b9:32:4f:88:35:f6:8f:b3:b1:
59:39:12:ed:73:6b:ed:94:69:2d:04:96:17:74:36:d5:27:96:
77:b9:4e:0e:4f:5f:74:cc:03:27:05:0b:b6:cb:52:1b:6a:0b:
21:ae:c4:cd:c1:3a:b9:8e:4b:7d:2e:d4:40:36:86:c6:16:7f:
99:f8:db:c8:80:f6:ca:6c:8a:b5:71:4e:d6:a4:2c:4a:cc:71:
bb:a5:78:a6:6a:07:70:4b:3e:d6:f2:c2:0f:5f:ba:19:c9:fe:
df:27:e3:58:ad:11:68:8c:3c:f3:fd:5c:c5:e5:08:8f:4e:22:
24:9d:0d:30:28:fa:75:ab:94:d6:d1:58:0f:f0:f9:aa:50:18:
7c:ca:4d:9c:b7:e3:ba:87:40:4b:d7:5c:7f:90:bf:89:5d:fa:
db:dd:30:21:f8:29:1f:b5:57:86:3a:23:8c:09:17:7b:69:42:
84:89:db:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:59:52 2025 by rpki-client