Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/a4640c-e69a-4337-b1aa-4cb0679ace7f/1/ZMX9HcDEV9nsET0jvUk1xyPp7PQ.mft
File: ZMX9HcDEV9nsET0jvUk1xyPp7PQ.mft (raw, json)
Hash identifier: UsVA8WX0iolQxGVYQYC0hfjGV4n5EHUJPcU2Y4qCTPA=
Subject key identifier: 24:AF:5C:8D:90:4B:74:4C:5D:1C:E7:6A:EE:A8:43:A1:0D:70:16:5F
Authority key identifier: 64:C5:FD:1D:C0:C4:57:D9:EC:11:3D:23:BD:49:35:C7:23:E9:EC:F4
Certificate issuer: /CN=64c5fd1dc0c457d9ec113d23bd4935c723e9ecf4
Certificate serial: 0199FD6B0D6056E8D406D2A10F1BF3457FEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZMX9HcDEV9nsET0jvUk1xyPp7PQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/a4640c-e69a-4337-b1aa-4cb0679ace7f/1/ZMX9HcDEV9nsET0jvUk1xyPp7PQ.mft
Manifest number: 0EE6
Signing time: Sun 19 Oct 2025 17:01:15 +0000
Manifest this update: Sun 19 Oct 2025 17:01:15 +0000
Manifest next update: Mon 20 Oct 2025 17:01:15 +0000
Files and hashes: 1: ZMX9HcDEV9nsET0jvUk1xyPp7PQ.crl (hash: nlXqrIxC7Ti7dRFklgEggKKWmi31DHOU+CmbVpXsvqY=)
2: wkjfrbnsCzTaC-aAcjv50o1HMDE.roa (hash: dQtuR5zZvWV7UZVnWgEUEkCk6dSEncyOV819xoZiAcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/a4640c-e69a-4337-b1aa-4cb0679ace7f/1/ZMX9HcDEV9nsET0jvUk1xyPp7PQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/a4640c-e69a-4337-b1aa-4cb0679ace7f/1/ZMX9HcDEV9nsET0jvUk1xyPp7PQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZMX9HcDEV9nsET0jvUk1xyPp7PQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:0d:60:56:e8:d4:06:d2:a1:0f:1b:f3:45:7f:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64c5fd1dc0c457d9ec113d23bd4935c723e9ecf4
Validity
Not Before: Oct 19 17:01:15 2025 GMT
Not After : Oct 20 17:01:15 2025 GMT
Subject: CN=24af5c8d904b744c5d1ce76aeea843a10d70165f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9f:b4:53:8a:ba:6b:f9:d8:3c:7e:ca:6c:5a:
5a:54:8e:c5:be:44:e0:4b:ad:18:e5:92:04:4b:3d:
62:8d:c7:64:0f:b3:b4:92:3a:33:28:a2:b7:17:8c:
88:5a:a3:c8:e5:65:e9:3e:fa:f0:a8:48:41:53:74:
bc:22:64:47:a5:d6:65:3c:ff:db:ac:6f:d4:b0:f4:
37:0f:79:21:de:f0:63:55:21:19:b8:6f:65:27:02:
24:d3:4f:ed:ab:1b:96:68:0b:91:fa:f7:77:1d:d9:
0b:02:9c:a8:28:f7:49:8b:45:6b:6a:1b:e2:cd:8f:
fc:d1:38:cb:b3:f5:68:a4:90:03:71:d6:95:7b:4c:
ae:0c:59:03:ab:fa:50:0d:e6:f9:c8:d7:b6:14:73:
5d:17:7a:10:e8:31:b5:7b:e1:ea:11:71:e5:a1:e5:
0f:58:e7:6d:8e:89:5c:d5:f9:20:c1:fb:84:f2:91:
17:2c:ee:89:81:3c:3a:ab:25:8c:77:b1:2c:0d:15:
c1:97:e3:dc:7d:78:eb:bd:39:4f:01:12:a3:2a:83:
75:17:3e:a4:34:8c:e3:e6:1a:1f:22:a7:36:7d:16:
b3:6d:8b:65:46:e6:73:1a:58:72:96:3a:d4:1b:49:
94:b6:0c:39:1c:e7:27:f1:ec:67:fa:bd:cc:38:e7:
c4:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:AF:5C:8D:90:4B:74:4C:5D:1C:E7:6A:EE:A8:43:A1:0D:70:16:5F
X509v3 Authority Key Identifier:
keyid:64:C5:FD:1D:C0:C4:57:D9:EC:11:3D:23:BD:49:35:C7:23:E9:EC:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZMX9HcDEV9nsET0jvUk1xyPp7PQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/a4640c-e69a-4337-b1aa-4cb0679ace7f/1/ZMX9HcDEV9nsET0jvUk1xyPp7PQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/a4640c-e69a-4337-b1aa-4cb0679ace7f/1/ZMX9HcDEV9nsET0jvUk1xyPp7PQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:0d:c1:20:26:3d:df:cb:0e:76:3f:aa:f3:0c:85:c6:0e:44:
cd:f9:11:3d:93:85:65:35:8d:ed:c9:de:5c:dc:d0:0e:ec:7d:
a4:78:bb:5c:6e:1b:6c:50:68:99:f3:68:2b:bc:c4:c3:d4:da:
18:c0:a5:c4:ba:9a:3e:dd:fb:d6:f7:e2:21:34:8d:65:8b:74:
37:3f:93:b4:03:21:2f:a3:30:42:02:36:dd:cc:08:49:13:36:
a4:d6:a2:4b:fe:61:ab:15:25:1f:6c:19:fb:d7:d3:5c:f1:4a:
aa:66:ad:ad:52:b1:62:0a:f1:38:eb:83:b7:5f:ba:c1:ac:86:
06:15:e5:8d:b9:37:2f:ae:45:89:9a:7a:24:40:3e:5f:88:1c:
7e:bd:fe:72:29:1b:e8:a6:c4:5f:bb:6a:9d:ee:2a:90:ee:50:
ea:92:bf:53:98:44:2a:cd:45:7d:8b:c2:79:1d:d9:1c:cd:3e:
a5:54:3c:78:f3:8f:92:07:45:04:0d:cf:e8:f6:fe:2b:70:bc:
10:f4:88:4d:6c:50:04:47:91:69:5e:e2:92:e3:e8:4f:b6:8d:
df:c7:6f:b5:8d:6c:b8:00:54:1b:44:0c:6e:50:ff:a6:76:a5:
a0:3c:82:73:df:2e:48:67:c5:ed:a0:20:84:d3:e1:03:1f:0e:
c4:29:68:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:17:50 2025 by rpki-client