Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.mft
File: ZhGlfSoDtwZfqMF7MTc1vc2jkOk.mft (raw, json)
Hash identifier: +QQxXuSiZqDFHtGunSYfU8lexw/Jh8mgSSyJv/NyNmY=
Subject key identifier: 64:05:AA:D8:4B:66:D4:94:1A:5D:AC:21:A4:F9:9A:0A:CC:F1:55:26
Authority key identifier: 66:11:A5:7D:2A:03:B7:06:5F:A8:C1:7B:31:37:35:BD:CD:A3:90:E9
Certificate issuer: /CN=6611a57d2a03b7065fa8c17b313735bdcda390e9
Certificate serial: 0199FFFE56F2E21BDDD24C8634BBED114EA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.mft
Manifest number: 1678
Signing time: Mon 20 Oct 2025 05:01:22 +0000
Manifest this update: Mon 20 Oct 2025 05:01:22 +0000
Manifest next update: Tue 21 Oct 2025 05:01:22 +0000
Files and hashes: 1: ZhGlfSoDtwZfqMF7MTc1vc2jkOk.crl (hash: OHii/YKLE91DF9awF42SLI27buK7h66HG9nLGI8XQ04=)
2: nh2jj_LSbHbo6dOlRaW604QLuxE.roa (hash: ajpkQ8o6WuSUyO59iQdi5/jQGtK2O9XCwMuhD9aQ4wY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:fe:56:f2:e2:1b:dd:d2:4c:86:34:bb:ed:11:4e:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6611a57d2a03b7065fa8c17b313735bdcda390e9
Validity
Not Before: Oct 20 05:01:22 2025 GMT
Not After : Oct 21 05:01:22 2025 GMT
Subject: CN=6405aad84b66d4941a5dac21a4f99a0accf15526
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:70:1c:d7:9a:bc:03:f1:88:7e:ad:d9:db:11:
54:be:eb:3f:e1:27:c0:20:f7:72:4e:31:50:a6:9d:
c2:56:18:ba:68:88:0f:f3:f6:35:e6:f5:71:36:b0:
03:3b:30:97:cb:b7:22:e4:09:0b:e3:8b:10:f5:27:
4a:e9:6a:27:fb:44:36:0a:3f:3f:83:f1:94:80:d7:
44:f5:78:35:48:0d:dd:65:98:83:b6:86:51:5b:bb:
21:b6:06:ab:2e:c8:5f:f1:0b:ce:7f:79:09:d8:0d:
f7:ff:a5:8a:17:f5:f6:d5:65:65:14:1e:c3:43:e5:
66:59:23:9d:b3:9a:32:1c:50:ce:00:74:fe:f7:50:
dd:f2:b8:60:ba:94:33:de:43:c0:05:9a:06:8d:df:
c3:50:aa:09:9a:fa:55:48:be:f1:97:27:70:29:9b:
de:ea:72:26:e2:ab:c9:2f:90:0a:e9:79:33:df:b5:
b6:bf:33:4d:1b:6f:74:7a:9d:90:ee:90:6d:cb:79:
62:c7:c4:4e:7c:ab:06:3d:8a:e0:a6:b0:1a:c2:e9:
f9:6b:2d:c4:4e:6a:5b:d4:02:1f:39:a3:5b:a5:b9:
67:57:c8:79:cb:6b:30:38:62:32:46:85:58:86:98:
6d:90:5f:b6:85:0c:f5:63:c5:ed:a1:66:7f:e2:01:
20:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:05:AA:D8:4B:66:D4:94:1A:5D:AC:21:A4:F9:9A:0A:CC:F1:55:26
X509v3 Authority Key Identifier:
keyid:66:11:A5:7D:2A:03:B7:06:5F:A8:C1:7B:31:37:35:BD:CD:A3:90:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:9a:64:6b:31:5b:24:07:ac:60:aa:e1:04:4e:cf:0c:4a:da:
95:b3:60:2e:a3:94:dc:6f:92:70:01:ad:f1:20:34:65:52:79:
34:d4:36:37:6c:f6:03:2a:98:73:11:b7:a6:12:00:ed:83:b0:
b6:9a:87:93:82:f1:c2:95:8a:8a:19:f2:4f:c9:62:b4:99:13:
96:13:9e:c6:b6:ac:8e:7a:ba:88:e1:c5:aa:d1:e9:48:b0:a6:
09:be:7b:04:74:e7:b9:8e:88:53:77:33:35:c4:8a:e2:91:c7:
f9:b6:76:aa:7c:a2:e4:32:3d:fc:8b:bb:d6:16:d8:0e:4c:e2:
ca:5d:24:7e:63:23:ee:59:ea:e6:e6:e4:c3:dc:a2:f2:bf:5e:
ae:04:20:06:c4:42:d6:2a:f2:07:db:8d:06:65:33:bb:52:56:
4d:ee:72:65:28:ad:c9:27:1f:63:db:db:68:dd:20:c0:d3:c8:
f3:e5:7c:27:b7:9b:be:7e:5c:cd:b3:f3:40:d0:f7:19:d2:95:
64:a5:4d:fe:54:4d:f1:18:2b:3f:97:9a:bb:aa:e3:a3:9f:dc:
d3:b4:72:96:97:eb:cb:a6:44:46:c9:e1:59:b7:9f:23:74:25:
aa:37:20:f3:90:18:80:2c:9d:b7:c4:c8:59:1c:58:79:79:f6:
63:97:82:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:17:17 2025 by rpki-client