Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/5afb3d-0f37-44b1-811e-46610fa8d56e/1/Zdxu-msTax5F4h5DToWaKS0uXhQ.mft
File: Zdxu-msTax5F4h5DToWaKS0uXhQ.mft (raw, json)
Hash identifier: eHqU5IfLqyAJG7af5vada7F0iIH45xrfHDZ8B4l3Ugk=
Subject key identifier: AD:BA:C7:AF:13:D9:A1:7F:8C:C8:A4:D9:96:51:74:4E:FD:E5:6E:63
Authority key identifier: 65:DC:6E:FA:6B:13:6B:1E:45:E2:1E:43:4E:85:9A:29:2D:2E:5E:14
Certificate issuer: /CN=65dc6efa6b136b1e45e21e434e859a292d2e5e14
Certificate serial: 0199FC213D0594BCB2E3278D56B45FBBD6D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zdxu-msTax5F4h5DToWaKS0uXhQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/5afb3d-0f37-44b1-811e-46610fa8d56e/1/Zdxu-msTax5F4h5DToWaKS0uXhQ.mft
Manifest number: 0EA4
Signing time: Sun 19 Oct 2025 11:01:00 +0000
Manifest this update: Sun 19 Oct 2025 11:01:00 +0000
Manifest next update: Mon 20 Oct 2025 11:01:00 +0000
Files and hashes: 1: Zdxu-msTax5F4h5DToWaKS0uXhQ.crl (hash: aNlcuVKSeMBMRf0PSBD/4W2/Srn+jN7gdY2TC6JhQS0=)
2: lAxCqPMpI5f-sYorlBydxXXqa9k.roa (hash: VxF2LCupWm60GiRA2vF36Uh4A+3bCicud61D9T91IIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/5afb3d-0f37-44b1-811e-46610fa8d56e/1/Zdxu-msTax5F4h5DToWaKS0uXhQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/5afb3d-0f37-44b1-811e-46610fa8d56e/1/Zdxu-msTax5F4h5DToWaKS0uXhQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zdxu-msTax5F4h5DToWaKS0uXhQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:3d:05:94:bc:b2:e3:27:8d:56:b4:5f:bb:d6:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65dc6efa6b136b1e45e21e434e859a292d2e5e14
Validity
Not Before: Oct 19 11:01:00 2025 GMT
Not After : Oct 20 11:01:00 2025 GMT
Subject: CN=adbac7af13d9a17f8cc8a4d99651744efde56e63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6a:19:6a:80:11:e5:07:b9:a7:31:49:c7:99:
d1:05:b3:ef:23:57:bc:23:12:a3:f3:00:d5:c2:5a:
61:86:99:a7:9a:38:6b:3e:14:39:f5:7f:07:d2:b4:
46:a1:6a:f2:dc:71:4d:5d:1e:14:e9:91:5d:c4:7c:
3a:70:cb:96:cb:6e:31:22:a6:6d:57:5b:61:55:03:
57:71:d1:04:f9:b3:da:15:f8:74:1f:0e:ee:97:39:
d4:65:4d:44:2e:90:a8:4c:24:ab:67:cc:44:14:ad:
5d:31:78:aa:bd:77:e2:b0:e1:51:60:37:40:24:5c:
83:41:ac:03:39:4d:8d:85:c6:58:11:39:50:b4:58:
ea:97:4c:ac:63:bc:9e:72:84:f8:64:33:20:d7:f2:
4f:69:6c:7e:2b:d1:2b:f6:9e:ee:24:99:80:df:a4:
7a:70:1d:fa:11:c4:fd:0a:e2:08:c4:21:19:d9:de:
35:cf:ea:b5:94:ab:ea:35:d1:3a:0c:78:fd:4c:93:
23:3f:b6:ac:50:5b:7c:5b:fc:c0:90:f7:db:e4:a5:
e2:61:f6:87:a9:bc:95:00:4c:5b:c4:a2:de:46:cb:
33:22:50:52:7e:b6:76:d8:73:78:bb:98:c5:28:20:
fc:b3:66:b5:35:f3:df:1c:0a:04:71:89:5b:10:07:
c1:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:BA:C7:AF:13:D9:A1:7F:8C:C8:A4:D9:96:51:74:4E:FD:E5:6E:63
X509v3 Authority Key Identifier:
keyid:65:DC:6E:FA:6B:13:6B:1E:45:E2:1E:43:4E:85:9A:29:2D:2E:5E:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zdxu-msTax5F4h5DToWaKS0uXhQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/5afb3d-0f37-44b1-811e-46610fa8d56e/1/Zdxu-msTax5F4h5DToWaKS0uXhQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/5afb3d-0f37-44b1-811e-46610fa8d56e/1/Zdxu-msTax5F4h5DToWaKS0uXhQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:91:31:a2:b9:cc:94:0b:73:55:1c:55:0b:03:3c:99:24:4d:
29:84:3e:af:6c:e4:13:07:46:ce:25:54:24:45:67:ae:65:8e:
94:02:7e:ff:3f:16:e6:46:0d:29:54:8b:02:ab:1f:23:98:6a:
03:e7:39:7f:23:21:36:f6:c2:1b:de:4d:14:4b:1a:8b:b8:98:
02:99:a5:09:90:b6:cb:26:0c:44:a4:59:13:86:1c:b8:c3:1d:
1a:16:3d:d1:d6:83:68:8f:48:47:01:db:38:bf:ee:30:12:39:
46:a6:6d:a7:94:9e:cb:06:df:d9:90:b3:18:31:58:40:83:fb:
b5:1b:71:ec:38:19:f8:40:2e:b0:0c:c7:51:ac:06:c9:19:c5:
4a:e6:c7:52:56:be:65:f5:92:80:6e:f4:53:3e:7b:9d:d9:22:
2e:70:fd:be:dd:e8:de:fb:1d:b9:f4:73:4b:8a:c8:57:46:d0:
ff:bd:50:66:3c:0a:9a:41:92:cb:4b:40:02:fa:23:4d:d1:c9:
9b:71:b0:75:21:a4:ae:d2:2b:2e:46:24:1e:f4:f6:4f:ec:b1:
b5:37:09:3a:68:23:84:29:43:f9:53:89:db:dd:0c:59:f1:20:
93:07:56:ce:df:2e:61:fd:41:85:6a:8b:71:1f:d3:05:42:67:
c2:af:71:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:33:11 2025 by rpki-client