Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/4fd931-9f22-49f3-be57-e9daf79eb75e/1/ZDHpYM0GEDmzsn_SXUFgdxxJi6s.mft
File: ZDHpYM0GEDmzsn_SXUFgdxxJi6s.mft (raw, json)
Hash identifier: 2KlHPbR6Ta/2yL7oQjWdMTKJAZWXPwUo5G4h6d50A9A=
Subject key identifier: E9:BE:5A:8B:4B:14:95:41:88:F8:85:77:A1:D8:40:5D:83:AA:40:28
Authority key identifier: 64:31:E9:60:CD:06:10:39:B3:B2:7F:D2:5D:41:60:77:1C:49:8B:AB
Certificate issuer: /CN=6431e960cd061039b3b27fd25d4160771c498bab
Certificate serial: 0199FBEB73389CAB5E234DCC9CA848AE116A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZDHpYM0GEDmzsn_SXUFgdxxJi6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/4fd931-9f22-49f3-be57-e9daf79eb75e/1/ZDHpYM0GEDmzsn_SXUFgdxxJi6s.mft
Manifest number: 1335
Signing time: Sun 19 Oct 2025 10:02:15 +0000
Manifest this update: Sun 19 Oct 2025 10:02:15 +0000
Manifest next update: Mon 20 Oct 2025 10:02:15 +0000
Files and hashes: 1: ZDHpYM0GEDmzsn_SXUFgdxxJi6s.crl (hash: P3CFAPWs13tsnXt++Q6adEMNb/SSS4pNGMi/q3zG3+Y=)
2: ZNva-8ABsvjJ6HrNFF7Xd55KW-w.roa (hash: nx2aCY2Bfbi+2/xFJXRwWrGYEeyRAMv/De92goZyeZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/4fd931-9f22-49f3-be57-e9daf79eb75e/1/ZDHpYM0GEDmzsn_SXUFgdxxJi6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/4fd931-9f22-49f3-be57-e9daf79eb75e/1/ZDHpYM0GEDmzsn_SXUFgdxxJi6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZDHpYM0GEDmzsn_SXUFgdxxJi6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:73:38:9c:ab:5e:23:4d:cc:9c:a8:48:ae:11:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6431e960cd061039b3b27fd25d4160771c498bab
Validity
Not Before: Oct 19 10:02:15 2025 GMT
Not After : Oct 20 10:02:15 2025 GMT
Subject: CN=e9be5a8b4b14954188f88577a1d8405d83aa4028
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:91:87:93:f0:74:17:d0:d9:2c:1a:d5:4c:49:
1c:e9:03:f1:c9:4c:02:02:ad:ed:a6:c0:9a:55:fd:
4d:9f:fa:a4:36:30:7e:10:aa:ea:5a:dd:9c:1f:c1:
97:6c:9b:43:9c:ef:78:98:9d:97:dc:6c:72:b1:a3:
09:9b:cb:d1:29:f0:a4:d0:b4:31:01:e8:ad:16:d2:
ae:0d:8a:65:56:43:b9:60:9f:d3:20:61:b5:3c:5e:
e3:6f:ba:2a:99:3d:a8:72:b0:84:e3:e3:41:61:f8:
47:32:d8:1f:9d:3b:1a:06:2e:2e:85:54:a9:9a:ce:
92:4e:2c:17:7a:d4:c4:c2:0e:df:08:52:27:fb:ce:
db:18:7e:99:bb:ea:7b:a4:11:9c:52:8e:c4:48:cb:
8f:f1:81:11:2e:96:fe:74:62:78:02:4f:22:29:58:
ac:48:fc:28:9c:56:73:00:52:e5:80:72:a4:d9:bc:
16:7d:0a:27:69:e5:13:8e:f8:a6:98:12:48:83:7f:
dc:30:9d:ed:3b:1f:a4:18:e9:12:56:6e:e0:6e:9d:
ef:4a:b7:1a:fa:e1:fa:da:41:08:5d:f3:d3:60:5d:
be:59:a5:d9:7d:e3:fa:8d:b7:2a:03:74:76:a8:01:
1c:01:f4:e1:46:0f:99:54:60:a5:96:b0:bf:7c:3e:
fe:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:BE:5A:8B:4B:14:95:41:88:F8:85:77:A1:D8:40:5D:83:AA:40:28
X509v3 Authority Key Identifier:
keyid:64:31:E9:60:CD:06:10:39:B3:B2:7F:D2:5D:41:60:77:1C:49:8B:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZDHpYM0GEDmzsn_SXUFgdxxJi6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4fd931-9f22-49f3-be57-e9daf79eb75e/1/ZDHpYM0GEDmzsn_SXUFgdxxJi6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4fd931-9f22-49f3-be57-e9daf79eb75e/1/ZDHpYM0GEDmzsn_SXUFgdxxJi6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:a5:d4:66:b2:17:ef:1e:77:f2:4d:b1:d7:23:5c:b8:fe:36:
ea:00:93:d7:1a:fa:5a:98:66:d7:47:d6:8d:89:cf:ff:36:41:
06:95:31:4b:b8:c8:26:70:35:f7:ad:b4:9e:05:70:dd:2a:f3:
7b:20:47:7f:44:48:8e:99:99:31:09:6e:ef:7e:ac:29:4c:f3:
f9:3a:d5:c5:8b:89:06:7f:fd:04:a2:77:a8:95:f3:a5:54:91:
8f:60:92:71:34:44:05:de:e6:6b:e4:27:5b:9b:49:11:c4:84:
06:bd:c0:3f:bf:ac:fd:c1:e7:da:be:59:58:8f:47:ec:88:a4:
e5:5b:17:a2:54:ef:29:82:55:bb:29:d4:bc:db:0d:76:f4:17:
0e:94:74:26:3b:b4:d8:94:9f:97:f5:05:5b:7a:61:b1:92:c0:
1e:b3:61:a7:37:db:c1:31:ed:c5:c7:10:b2:30:38:3a:ed:c5:
90:73:ee:d4:30:3a:2c:5a:94:91:75:73:69:23:50:b1:e2:b2:
4a:2c:1e:05:8f:16:4c:91:c5:a2:f0:71:c0:ac:4d:87:fb:39:
97:fa:62:b0:b3:cd:a6:57:db:f1:4e:0f:d1:9c:33:9f:68:d9:
4f:b6:00:a5:2d:51:da:c2:4f:d9:c0:f7:1c:19:af:57:9a:dd:
60:2e:2b:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:18:48 2025 by rpki-client