Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/86d2ae-7c37-4344-a1e6-e8edf29245c0/1/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.mft
File: ZwR7mHvpdCeFuo6LM6wHe_nHoiI.mft (raw, json)
Hash identifier: 2Nh8mLGbBYZ7e1PfU1ayfGU1yyJyvOvhkapIraVNHNQ=
Subject key identifier: 1C:7E:37:6A:64:C0:95:38:B6:84:1A:A9:E5:EC:C7:DA:6E:2C:67:65
Authority key identifier: 67:04:7B:98:7B:E9:74:27:85:BA:8E:8B:33:AC:07:7B:F9:C7:A2:22
Certificate issuer: /CN=67047b987be9742785ba8e8b33ac077bf9c7a222
Certificate serial: 0199FBEA7A1BD544423BDA3938F14688C9A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/86d2ae-7c37-4344-a1e6-e8edf29245c0/1/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.mft
Manifest number: 0E7D
Signing time: Sun 19 Oct 2025 10:01:11 +0000
Manifest this update: Sun 19 Oct 2025 10:01:11 +0000
Manifest next update: Mon 20 Oct 2025 10:01:11 +0000
Files and hashes: 1: ZwR7mHvpdCeFuo6LM6wHe_nHoiI.crl (hash: Zzv6OnppLPQPeWrv4II8wpD8o9ZGxJ7nOsm0peRIjuY=)
2: bmxfR1YI28e9AvruScrILUTRG3I.roa (hash: cqN9qg0IAUOQT2Uuvb3v+aRnSBYZJQOZClfPWFzUISg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/86d2ae-7c37-4344-a1e6-e8edf29245c0/1/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/86d2ae-7c37-4344-a1e6-e8edf29245c0/1/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:7a:1b:d5:44:42:3b:da:39:38:f1:46:88:c9:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67047b987be9742785ba8e8b33ac077bf9c7a222
Validity
Not Before: Oct 19 10:01:11 2025 GMT
Not After : Oct 20 10:01:11 2025 GMT
Subject: CN=1c7e376a64c09538b6841aa9e5ecc7da6e2c6765
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8d:55:19:d5:58:f5:e2:22:f1:0d:a2:18:f6:
97:6c:30:37:0b:df:a8:5a:41:89:ce:c7:17:a0:35:
1d:27:11:31:58:89:70:94:dd:14:ad:c3:33:d7:0b:
d9:a9:4e:94:99:45:66:f0:56:25:cc:de:18:c9:62:
02:37:73:9e:26:64:74:00:22:2b:f3:54:f0:0b:a8:
8f:ff:13:5f:a1:83:80:09:53:7f:27:5d:42:f4:87:
3d:01:6e:fd:8a:38:5c:17:93:7c:2e:a5:fa:d5:a3:
d5:6a:36:c8:b9:c7:1d:22:1e:e3:63:c5:f3:5f:62:
66:7a:08:b4:7d:37:0e:64:ed:a4:75:d1:4d:4e:cc:
39:4e:16:87:84:fb:0b:2d:0d:9b:a7:79:f8:b1:68:
bc:76:fa:b1:55:db:b4:f8:94:db:71:ff:2e:4a:d3:
1d:64:47:55:40:c9:20:a0:e6:bd:ba:0f:36:21:b9:
a0:30:ba:67:a1:55:99:ed:3e:d1:25:2e:92:27:5d:
26:e9:52:0c:25:5e:86:d9:90:d9:1d:90:1b:55:79:
7c:07:ca:fb:5a:da:77:6f:7c:3c:a8:71:c9:da:34:
de:bf:35:ce:29:50:3b:31:cf:03:d7:7e:4d:b8:e9:
c7:ad:78:ee:88:72:02:67:55:40:c8:9d:84:92:6e:
93:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:7E:37:6A:64:C0:95:38:B6:84:1A:A9:E5:EC:C7:DA:6E:2C:67:65
X509v3 Authority Key Identifier:
keyid:67:04:7B:98:7B:E9:74:27:85:BA:8E:8B:33:AC:07:7B:F9:C7:A2:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/86d2ae-7c37-4344-a1e6-e8edf29245c0/1/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/86d2ae-7c37-4344-a1e6-e8edf29245c0/1/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:b5:1a:eb:8f:b3:c5:a3:3c:06:17:e8:78:d2:0f:81:c6:46:
71:0b:07:30:bb:6c:66:2a:c2:89:da:92:7c:58:dd:e1:c8:d2:
32:a5:5c:3b:f5:a2:ad:1a:39:d8:67:e7:b8:c3:05:e5:91:da:
37:68:c3:79:23:dd:f3:4e:77:3e:8e:ff:b5:ae:70:2a:e3:a7:
5e:e3:96:0d:ae:cf:49:b5:96:83:c3:b8:b9:31:b5:f6:f9:ce:
85:89:73:da:0d:6f:d8:a6:bd:84:8b:e0:e4:21:52:76:c1:78:
b6:f3:e9:73:11:ee:1d:91:f8:4d:42:7d:6f:e6:4e:4a:7f:1f:
9a:5b:0c:11:64:52:a0:cc:96:86:66:e8:48:fe:65:44:c8:2c:
6a:78:87:7d:f0:f8:ed:3e:2a:39:11:69:d8:7a:13:45:1e:ee:
83:75:45:68:f7:21:49:52:3f:c3:67:bb:79:fa:c2:a3:a7:a8:
d8:90:3f:2c:f3:36:9e:95:b0:ff:88:11:eb:b5:62:74:a3:3e:
f7:42:92:48:e5:c6:5d:fc:ea:51:a2:03:88:27:a9:83:c5:8b:
cd:9f:62:26:3d:37:dc:e7:13:be:8f:45:1d:8b:80:14:fe:83:
2e:26:87:9e:06:d3:4d:8e:38:0e:7c:9d:72:69:86:37:c2:bf:
a9:27:a9:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:21:36 2025 by rpki-client