Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/ZcXa1UTfSXFghevoDb6C62iiCck.mft
File: ZcXa1UTfSXFghevoDb6C62iiCck.mft (raw, json)
Hash identifier: TAAFucVXSxk2us7BphkdkwVhHWbZvXpWRrjvMrhY4bo=
Subject key identifier: BE:34:64:D3:5E:F5:E3:EA:CB:56:09:DE:D9:67:48:FD:7A:C6:79:6F
Authority key identifier: 65:C5:DA:D5:44:DF:49:71:60:85:EB:E8:0D:BE:82:EB:68:A2:09:C9
Certificate issuer: /CN=65c5dad544df49716085ebe80dbe82eb68a209c9
Certificate serial: 0199FB45B3A1897CDEB66730FC24A54B433B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZcXa1UTfSXFghevoDb6C62iiCck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/ZcXa1UTfSXFghevoDb6C62iiCck.mft
Manifest number: 0EFE
Signing time: Sun 19 Oct 2025 07:01:13 +0000
Manifest this update: Sun 19 Oct 2025 07:01:13 +0000
Manifest next update: Mon 20 Oct 2025 07:01:13 +0000
Files and hashes: 1: 7EbuG3-0BaX89LTHJW4crEKXOgE.roa (hash: JIvKyqKrpPXGWekxvpmbylJZltK1pz01V4vTqb0PGqw=)
2: ZcXa1UTfSXFghevoDb6C62iiCck.crl (hash: EAIA9QnyjwNBm6+lq4RjnOrMTaq2FoQkjgWYC2Fu4v4=)
3: o17-yma_5t9exYXoXM4y9yk2rGc.roa (hash: 21brSGZYsEDJcaoR6r/SPKw0TZMGaiZDGKvCII90PgI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/ZcXa1UTfSXFghevoDb6C62iiCck.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/ZcXa1UTfSXFghevoDb6C62iiCck.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZcXa1UTfSXFghevoDb6C62iiCck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:b3:a1:89:7c:de:b6:67:30:fc:24:a5:4b:43:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65c5dad544df49716085ebe80dbe82eb68a209c9
Validity
Not Before: Oct 19 07:01:13 2025 GMT
Not After : Oct 20 07:01:13 2025 GMT
Subject: CN=be3464d35ef5e3eacb5609ded96748fd7ac6796f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:9c:b2:85:60:aa:19:27:05:43:5d:ca:aa:42:
bf:ef:96:b4:5b:25:1e:e0:9b:36:25:f8:1a:9f:a4:
3a:41:fa:46:76:57:3e:bc:79:27:7a:36:ae:9e:92:
fa:64:dc:33:12:3f:08:e0:94:e4:1a:50:14:ff:52:
81:10:e5:84:6b:5b:c0:eb:65:3a:69:27:64:20:ec:
9e:cd:e9:f3:90:1e:ec:77:77:65:ba:5c:3d:ea:83:
a7:76:09:86:ca:dd:72:1b:33:84:9d:c1:e6:12:1e:
bb:30:bf:57:3a:37:6c:80:b7:64:ee:b1:86:92:9a:
9c:7c:f6:96:48:b8:fb:c5:44:42:7a:97:ea:f1:c4:
6f:e5:8c:a6:bf:df:93:7b:49:e7:2a:5c:51:c9:cb:
a9:fd:78:27:46:d7:f6:8f:71:6f:a3:9e:1f:3e:91:
1c:b4:fc:8f:49:ba:c8:86:2d:be:41:e9:84:40:05:
f1:88:06:b7:f5:52:25:b9:62:0a:aa:fb:6f:d9:00:
c5:ee:b2:58:1a:62:5a:f2:fc:ca:49:79:ae:34:85:
af:44:93:5e:cb:00:ce:58:ce:b7:bb:f9:58:0c:2c:
d3:1f:3d:49:3f:c2:34:68:7f:94:81:26:7f:cf:a5:
e8:d9:43:51:e8:ad:d4:02:77:32:bb:2a:78:3b:1e:
ff:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:34:64:D3:5E:F5:E3:EA:CB:56:09:DE:D9:67:48:FD:7A:C6:79:6F
X509v3 Authority Key Identifier:
keyid:65:C5:DA:D5:44:DF:49:71:60:85:EB:E8:0D:BE:82:EB:68:A2:09:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZcXa1UTfSXFghevoDb6C62iiCck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/ZcXa1UTfSXFghevoDb6C62iiCck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/ZcXa1UTfSXFghevoDb6C62iiCck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:74:05:e5:b2:d3:c6:a9:d6:30:d6:8f:7f:69:30:e4:8b:3e:
49:1c:81:d3:b2:d1:26:70:fd:4c:8b:20:20:d7:e6:6d:a6:53:
3e:29:bc:31:3d:17:01:d1:87:c9:34:df:f7:3f:5c:ea:24:9f:
62:cf:70:c1:27:ae:75:a4:f6:99:5c:68:51:0b:be:98:f0:c5:
87:b0:68:7e:2c:7f:b5:cb:30:47:0c:fd:2c:fb:b9:b1:cc:02:
cf:1f:76:2f:c7:9c:26:cd:b4:d9:c7:2f:9c:0b:24:2c:5a:0c:
75:2e:21:14:ad:6b:50:b1:7e:a6:47:85:95:41:64:b3:a6:14:
1e:11:9f:03:b6:bf:44:43:8a:84:70:13:ec:53:a5:d8:5d:6e:
c0:c6:f4:5c:9b:86:e1:b2:4a:f9:0d:03:f3:61:67:d1:0e:a8:
99:4c:08:76:f0:23:bf:07:0a:f7:73:eb:66:9c:bb:3b:1f:98:
fb:1d:51:ce:c0:0e:ed:45:bb:64:d3:3d:7e:d5:04:c8:98:45:
13:89:bc:d9:b2:6b:dd:e0:bc:f5:bd:38:4d:9b:3f:54:9d:f3:
29:f5:5a:89:ad:d8:c0:74:3b:30:85:88:50:6e:c8:21:77:d1:
b3:19:e2:9b:be:1d:77:d6:23:44:12:65:a9:c3:ee:c5:9f:83:
07:fd:d8:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:33:29 2025 by rpki-client