Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/e5ea19-0b7b-431f-91bf-abcc905d9ffe/1/ZUdEPmINY8jk9UpnF4R00fkJr2g.mft
File: ZUdEPmINY8jk9UpnF4R00fkJr2g.mft (raw, json)
Hash identifier: uUaSBGDrx8YS5on9LIVSm56uuHxO/jB8nFa+9R5HUYE=
Subject key identifier: 4B:B8:99:07:D1:BA:7E:C9:CA:C9:45:90:CE:2F:F1:27:18:A9:16:24
Authority key identifier: 65:47:44:3E:62:0D:63:C8:E4:F5:4A:67:17:84:74:D1:F9:09:AF:68
Certificate issuer: /CN=6547443e620d63c8e4f54a67178474d1f909af68
Certificate serial: 0199FE0FCED607F38CB86E2D302C09F61116
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZUdEPmINY8jk9UpnF4R00fkJr2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/e5ea19-0b7b-431f-91bf-abcc905d9ffe/1/ZUdEPmINY8jk9UpnF4R00fkJr2g.mft
Manifest number: 0763
Signing time: Sun 19 Oct 2025 20:01:12 +0000
Manifest this update: Sun 19 Oct 2025 20:01:12 +0000
Manifest next update: Mon 20 Oct 2025 20:01:12 +0000
Files and hashes: 1: ObZz_0AF61xVwJZ1enhy0gnRgCQ.roa (hash: x882U2h8oBPYNUh4TnbQfiF4AFln2XESGCfJHIw0DG8=)
2: ZUdEPmINY8jk9UpnF4R00fkJr2g.crl (hash: V/UnA5sz/sMelXzaO9VjK4f0r1rZTIP2kf0RtZfqEAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/e5ea19-0b7b-431f-91bf-abcc905d9ffe/1/ZUdEPmINY8jk9UpnF4R00fkJr2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/e5ea19-0b7b-431f-91bf-abcc905d9ffe/1/ZUdEPmINY8jk9UpnF4R00fkJr2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZUdEPmINY8jk9UpnF4R00fkJr2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:0f:ce:d6:07:f3:8c:b8:6e:2d:30:2c:09:f6:11:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6547443e620d63c8e4f54a67178474d1f909af68
Validity
Not Before: Oct 19 20:01:12 2025 GMT
Not After : Oct 20 20:01:12 2025 GMT
Subject: CN=4bb89907d1ba7ec9cac94590ce2ff12718a91624
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d4:bf:87:22:9f:29:65:81:dc:4d:d4:96:34:
c1:17:da:6b:b6:e6:cc:f4:c0:cb:0c:ba:eb:cf:ca:
b8:ef:fd:f8:9f:0b:f4:a7:4f:35:9c:94:59:bd:9b:
84:99:e1:f3:65:c4:1f:1a:10:d5:70:1d:ae:83:8a:
fa:aa:3a:f8:1e:3e:61:9f:9e:24:b8:23:5c:88:cf:
2b:53:5c:dc:74:75:25:54:41:d8:e6:30:b9:e1:77:
3c:29:83:fa:79:9d:a4:a9:01:46:ca:57:4c:8b:72:
5e:c3:85:ea:7d:e2:11:53:c1:1d:e0:e4:19:61:07:
d2:26:86:ea:b2:17:35:6f:15:d2:31:94:0b:59:35:
9c:57:db:b4:d1:90:0f:6b:81:08:e6:41:38:f8:ad:
96:a0:3f:89:4f:b4:b6:28:cb:e9:fa:e3:91:e1:df:
91:36:3b:10:77:0a:53:02:0f:c3:d1:57:ab:97:4c:
8f:54:9d:1b:ce:be:e4:68:b0:3f:a7:d4:13:a6:f3:
aa:1b:a8:c9:3e:79:53:df:1e:23:c7:de:39:fb:45:
c5:37:b3:48:de:f3:62:b1:3d:94:25:f3:9d:47:77:
61:40:76:61:9e:a6:31:6e:88:0f:aa:d7:47:92:72:
c3:d3:d5:d8:ce:1c:ba:87:32:b3:71:12:d1:4d:b2:
bd:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:B8:99:07:D1:BA:7E:C9:CA:C9:45:90:CE:2F:F1:27:18:A9:16:24
X509v3 Authority Key Identifier:
keyid:65:47:44:3E:62:0D:63:C8:E4:F5:4A:67:17:84:74:D1:F9:09:AF:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZUdEPmINY8jk9UpnF4R00fkJr2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/e5ea19-0b7b-431f-91bf-abcc905d9ffe/1/ZUdEPmINY8jk9UpnF4R00fkJr2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/e5ea19-0b7b-431f-91bf-abcc905d9ffe/1/ZUdEPmINY8jk9UpnF4R00fkJr2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:13:68:f0:20:c5:6d:f3:01:c1:c2:37:20:52:fd:c2:0f:4a:
95:c8:e1:4a:19:0e:d2:9a:4f:f1:29:6c:fd:d5:d1:56:0b:7d:
22:42:9e:55:a0:78:aa:05:a5:cf:58:8c:2f:3f:8a:e8:ca:d1:
a3:f1:ab:12:48:7f:a6:cf:d5:57:d8:06:9d:35:c4:62:64:ec:
9f:c4:b8:d7:e8:39:81:82:e4:0f:64:f0:d1:8f:fd:4e:79:a9:
64:12:73:19:ad:6f:66:c9:76:34:cb:a7:13:d4:6b:14:20:5e:
34:d4:0c:ad:96:3a:9b:b9:b2:bf:1e:39:ff:62:c1:95:42:45:
4d:b9:9b:4c:9a:47:a6:29:db:13:ad:5f:f2:64:b6:6b:d8:f3:
40:aa:92:7e:2b:04:b1:2f:27:7e:4c:27:6d:de:85:79:4f:51:
05:ed:77:56:3e:e2:e3:18:63:11:18:55:e2:83:cf:89:76:be:
74:4b:3a:56:59:b9:df:8d:88:8c:b7:dc:18:a3:3f:b8:6c:fc:
22:d0:77:1c:3d:4c:eb:f1:13:08:70:e3:f7:76:46:90:bf:c5:
98:d9:59:29:6c:39:2b:14:de:ab:ff:c4:ec:08:0d:ec:7b:6c:
ef:02:25:9b:31:35:46:87:ef:16:7c:25:3d:6f:48:c9:85:7b:
8d:86:d0:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:15:27 2025 by rpki-client