Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/663331-31dc-4ddf-84e0-5f90a2f90d03/1/ZsMHCnRbLBZ-EBoWHSZIobyXeZE.mft
File: ZsMHCnRbLBZ-EBoWHSZIobyXeZE.mft (raw, json)
Hash identifier: PGnzmcaS9dFTz8/VyrVQvoBXORwaITFfggfJ20miTaw=
Subject key identifier: 4A:F7:B4:73:8D:E4:C2:66:60:99:AD:A9:AA:EB:77:39:52:D3:20:18
Authority key identifier: 66:C3:07:0A:74:5B:2C:16:7E:10:1A:16:1D:26:48:A1:BC:97:79:91
Certificate issuer: /CN=66c3070a745b2c167e101a161d2648a1bc977991
Certificate serial: 019A70DBE28FEB9CDF04AA55EFCDC538B111
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZsMHCnRbLBZ-EBoWHSZIobyXeZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/663331-31dc-4ddf-84e0-5f90a2f90d03/1/ZsMHCnRbLBZ-EBoWHSZIobyXeZE.mft
Manifest number: 74
Signing time: Tue 11 Nov 2025 03:00:49 +0000
Manifest this update: Tue 11 Nov 2025 03:00:49 +0000
Manifest next update: Wed 12 Nov 2025 03:00:49 +0000
Files and hashes: 1: ZsMHCnRbLBZ-EBoWHSZIobyXeZE.crl (hash: fCw2ebtQkpsLL0yAxf1tuv8oD8l4WZaCeaOSoGoWrOg=)
2: l9bBsFfC3zzSetiD5kEe28rBj1w.roa (hash: afp7psmljpdsoVJb9q1FK7ToTJSaIK0ZgxojY+T/ZMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/663331-31dc-4ddf-84e0-5f90a2f90d03/1/ZsMHCnRbLBZ-EBoWHSZIobyXeZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/663331-31dc-4ddf-84e0-5f90a2f90d03/1/ZsMHCnRbLBZ-EBoWHSZIobyXeZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZsMHCnRbLBZ-EBoWHSZIobyXeZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:db:e2:8f:eb:9c:df:04:aa:55:ef:cd:c5:38:b1:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66c3070a745b2c167e101a161d2648a1bc977991
Validity
Not Before: Nov 11 03:00:49 2025 GMT
Not After : Nov 12 03:00:49 2025 GMT
Subject: CN=4af7b4738de4c2666099ada9aaeb773952d32018
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:b9:7d:71:a2:b3:1d:42:27:9c:d7:03:c8:9e:
80:7a:b6:c8:e2:6d:53:5b:08:3d:c7:8c:07:1d:25:
f4:e0:32:2e:48:7b:45:1e:1d:7d:d0:60:f8:a7:d7:
30:a1:68:c7:ff:d0:d3:8a:db:86:60:d2:e4:2d:04:
c5:5d:34:45:72:1b:53:91:a1:b6:06:e9:4a:be:55:
a9:11:e0:9a:19:e1:84:e8:ac:81:07:02:d8:09:10:
b8:84:a5:64:13:b5:08:0a:b0:c3:d0:e1:45:0d:dc:
dc:9c:04:1a:8c:48:52:7d:40:37:e6:a0:e1:fe:fb:
ac:b0:90:bb:90:97:56:77:48:a2:f2:b3:ca:fa:92:
bc:4e:c9:f4:47:66:50:ed:b4:4b:9f:45:b8:84:4f:
81:d5:9a:fa:e5:6e:9d:a6:9c:a8:0d:8f:0e:ac:83:
8f:89:d7:68:37:84:1f:f4:f6:28:5f:e0:5c:42:c2:
83:be:b0:e8:8c:a0:12:ce:d9:0f:4a:07:f9:89:06:
86:93:ec:bc:2f:d5:1c:5d:b9:c5:31:73:c2:ea:b7:
d2:bd:25:9e:0e:17:50:3d:78:e4:73:c6:32:e7:90:
6a:55:7c:41:e5:53:25:2b:d7:fb:16:37:aa:c4:8e:
32:73:ec:05:e0:05:0a:e3:8f:fb:e3:6e:38:e1:ea:
30:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:F7:B4:73:8D:E4:C2:66:60:99:AD:A9:AA:EB:77:39:52:D3:20:18
X509v3 Authority Key Identifier:
keyid:66:C3:07:0A:74:5B:2C:16:7E:10:1A:16:1D:26:48:A1:BC:97:79:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZsMHCnRbLBZ-EBoWHSZIobyXeZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/663331-31dc-4ddf-84e0-5f90a2f90d03/1/ZsMHCnRbLBZ-EBoWHSZIobyXeZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/663331-31dc-4ddf-84e0-5f90a2f90d03/1/ZsMHCnRbLBZ-EBoWHSZIobyXeZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:28:be:ba:21:c3:8c:90:d6:65:c1:47:32:31:64:1f:88:78:
11:cb:05:3e:44:c9:2a:e9:81:fe:7c:df:11:0d:5d:6f:02:49:
7b:91:e0:37:a9:a2:ae:d3:5a:b6:20:7e:50:ff:60:d7:76:d2:
6b:f7:9b:a6:3b:7b:9f:24:d7:12:e1:94:f3:5c:f6:11:e3:4c:
c3:a4:ec:db:3c:a0:ad:81:f1:ef:e7:c0:01:02:4e:d2:7f:fe:
8a:d3:a4:df:6e:56:f1:e9:90:11:b1:f4:e8:a2:15:82:70:be:
e0:d5:ca:0c:21:a9:1d:72:a7:f6:32:dc:da:22:bc:8b:db:ad:
eb:5d:0b:f0:4e:34:26:6c:24:4b:dc:44:05:c3:02:b9:a2:a0:
fc:4e:04:c3:19:3c:d7:c8:ee:73:90:f9:50:cf:ab:87:ff:5e:
f8:a5:2f:28:e5:3a:6d:57:03:ac:d9:0a:19:e3:fd:ab:b6:d7:
f3:9f:ce:64:b7:54:41:a2:23:2c:3f:05:2d:77:96:7b:0d:58:
c8:c4:14:a3:f8:bf:18:aa:82:e3:7f:95:43:67:a8:f6:11:a1:
90:8d:a8:68:46:6b:5d:60:ee:60:9e:61:24:a4:df:79:5f:97:
83:2d:eb:55:5d:62:53:f1:d0:af:6f:f0:1e:ba:c3:9c:e5:80:
66:9e:f4:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:37:21 2025 by rpki-client