Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.mft
File: ZVnPNNTPxZZAhi0eS3nUjZ5Njns.mft (raw, json)
Hash identifier: 3D2WxhpelDiYhl9fkmvcJTR7ZigeXl3OqynGZ01L7dU=
Subject key identifier: 75:D2:1A:D1:78:1E:57:6C:9B:06:C4:C3:95:E9:16:EA:B6:4B:E0:12
Authority key identifier: 65:59:CF:34:D4:CF:C5:96:40:86:2D:1E:4B:79:D4:8D:9E:4D:8E:7B
Certificate issuer: /CN=6559cf34d4cfc59640862d1e4b79d48d9e4d8e7b
Certificate serial: 0199FAD8365B41B20FAE6BF77DA09FB3C434
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.mft
Manifest number: 0438
Signing time: Sun 19 Oct 2025 05:01:37 +0000
Manifest this update: Sun 19 Oct 2025 05:01:37 +0000
Manifest next update: Mon 20 Oct 2025 05:01:37 +0000
Files and hashes: 1: 9JlOX8sBl__Qf5ZEztj3xRoWT0w.roa (hash: yFMJTSvXNN5G3iWxcUQycJKuWi+/CwtiHhA9xSKG2JY=)
2: ZVnPNNTPxZZAhi0eS3nUjZ5Njns.crl (hash: A0B2jHeFL9SjgxOA4YN/ach7/7TmnirIY+q+l2KFm3o=)
3: uJJnjUiM_NZxiukKj0SMAuEZu9s.roa (hash: rKuDWrBp0PYOBRz7NFxaGHHnL+VoADNHakfLXL6TQaA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:36:5b:41:b2:0f:ae:6b:f7:7d:a0:9f:b3:c4:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6559cf34d4cfc59640862d1e4b79d48d9e4d8e7b
Validity
Not Before: Oct 19 05:01:37 2025 GMT
Not After : Oct 20 05:01:37 2025 GMT
Subject: CN=75d21ad1781e576c9b06c4c395e916eab64be012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:98:c6:a2:d9:f9:43:b0:6b:35:50:8f:3f:e0:
e0:b4:c3:34:eb:bc:87:c3:bc:66:7a:64:4f:4b:66:
4e:38:d4:b7:4f:0e:ed:cf:37:2d:37:36:6c:80:d7:
ac:e2:e7:a5:53:e0:a8:59:09:9d:ff:da:31:e1:bc:
1f:3b:eb:24:26:fc:f1:ff:fb:82:55:1e:a7:f1:5a:
e1:7c:e6:b5:f6:4e:f8:47:44:40:a7:9f:bb:e9:59:
c4:a6:6b:51:02:ad:94:b8:32:39:d4:3b:1f:66:33:
0f:9e:9a:bd:da:26:61:91:f6:ae:96:8b:97:63:dd:
42:09:37:d4:e2:99:91:08:36:3d:da:c5:4f:3f:c9:
ca:0a:24:72:82:1b:92:f7:84:4d:69:67:88:7a:da:
13:5e:d8:88:e8:80:78:d9:77:01:2b:3a:f7:53:18:
6c:47:9a:1f:7d:77:59:a5:f1:c7:33:ca:af:a3:86:
85:09:5d:06:62:64:8a:db:46:57:74:aa:be:a5:c0:
ca:f5:fb:8e:ca:b8:aa:56:42:75:2d:ec:2a:4a:10:
b5:8d:6f:d8:5c:23:47:51:b4:66:bb:26:56:70:a3:
40:4c:1f:51:ce:09:e6:f5:ef:f5:61:7c:50:43:12:
8b:86:75:23:a1:f0:ae:a9:22:6d:50:cb:f1:e4:b9:
0e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:D2:1A:D1:78:1E:57:6C:9B:06:C4:C3:95:E9:16:EA:B6:4B:E0:12
X509v3 Authority Key Identifier:
keyid:65:59:CF:34:D4:CF:C5:96:40:86:2D:1E:4B:79:D4:8D:9E:4D:8E:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:21:b1:64:3c:d5:f3:89:76:5a:3e:a4:e9:8d:60:8f:2b:f1:
2e:74:77:f2:12:9c:08:28:db:86:17:d3:f1:ab:27:87:a5:9a:
33:1e:a6:fa:0f:c6:76:78:4b:b4:69:1b:95:9f:d5:d2:e8:70:
5c:d3:51:62:55:c1:98:5d:63:50:29:53:a9:68:95:c5:c2:f8:
e3:9a:c4:bd:72:1f:7b:64:b3:82:91:3a:1d:3e:4e:ff:8d:d7:
4a:75:ad:9f:94:db:10:20:92:b6:71:dc:e1:57:23:40:df:73:
1a:39:d4:3c:65:20:15:f9:33:69:0f:62:03:89:e8:09:93:fc:
a8:7b:7e:8c:f5:f2:ee:30:d7:89:7c:c1:1c:1e:42:f6:ed:bd:
68:b3:b1:27:fd:51:fb:42:97:ea:a0:a7:5b:d2:c5:e7:7f:1d:
d9:c4:55:ae:6c:97:c1:f2:4f:29:db:0e:84:c1:36:16:84:f4:
9b:08:fb:b6:38:f1:4f:54:07:db:c6:9c:82:49:76:69:78:3e:
1f:f9:6e:2b:53:02:d1:eb:bf:6f:94:c2:bb:18:f7:2e:ca:6d:
22:17:d1:67:a1:61:a4:c6:22:d0:5d:f6:5e:72:e2:86:db:4d:
d7:b9:41:f2:24:89:f7:7a:2f:7d:82:03:b9:9a:75:08:f1:b8:
f1:cc:7b:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:10:50 2025 by rpki-client