Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/b9e4c4-a3dc-46e8-aa3e-397f36c91982/1/ZPhzrbah8-gbM0PHSZiUdSbEPc8.mft
File: ZPhzrbah8-gbM0PHSZiUdSbEPc8.mft (raw, json)
Hash identifier: nS5KucYqGeRtGOKUD7lgk4hB9tE9gTbRoyngdaI2tvU=
Subject key identifier: 43:95:2F:2A:61:92:15:4B:36:7F:EB:76:74:61:EF:1B:80:8E:01:AA
Authority key identifier: 64:F8:73:AD:B6:A1:F3:E8:1B:33:43:C7:49:98:94:75:26:C4:3D:CF
Certificate issuer: /CN=64f873adb6a1f3e81b3343c74998947526c43dcf
Certificate serial: 019A006C506A1D5C19C115589D41B570FC22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZPhzrbah8-gbM0PHSZiUdSbEPc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/b9e4c4-a3dc-46e8-aa3e-397f36c91982/1/ZPhzrbah8-gbM0PHSZiUdSbEPc8.mft
Manifest number: 137A
Signing time: Mon 20 Oct 2025 07:01:29 +0000
Manifest this update: Mon 20 Oct 2025 07:01:29 +0000
Manifest next update: Tue 21 Oct 2025 07:01:29 +0000
Files and hashes: 1: 47NYg-phdSB9NeK2va9JIKsAb5A.roa (hash: 86ZHiVMTfTtd+skHx8yHsEGyhHphyGuDVxjbPZ3RryU=)
2: 9C2OE_UiXlf9d9G1cIpAZTGa-qE.roa (hash: r/TntNYFZZscNnR6FrYLxeeivbdyseJ1z7nSB0IzeU8=)
3: PBRIpRP-Yi2Zwr1ZnkM_l4qFPgs.roa (hash: ekiRbPByfTM7Fnyz7R+Df6+K5P9KMDqYABA3L68ThWc=)
4: ZPhzrbah8-gbM0PHSZiUdSbEPc8.crl (hash: o4F4XyeiAOPBJOyKm5jLWXMDLWQizJsi+ErzrUvyu34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/b9e4c4-a3dc-46e8-aa3e-397f36c91982/1/ZPhzrbah8-gbM0PHSZiUdSbEPc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/b9e4c4-a3dc-46e8-aa3e-397f36c91982/1/ZPhzrbah8-gbM0PHSZiUdSbEPc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZPhzrbah8-gbM0PHSZiUdSbEPc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:6c:50:6a:1d:5c:19:c1:15:58:9d:41:b5:70:fc:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64f873adb6a1f3e81b3343c74998947526c43dcf
Validity
Not Before: Oct 20 07:01:29 2025 GMT
Not After : Oct 21 07:01:29 2025 GMT
Subject: CN=43952f2a6192154b367feb767461ef1b808e01aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:04:b2:f1:45:d4:59:9e:64:7a:70:a0:01:82:
ab:88:8e:92:e8:cb:49:3b:e0:61:2a:86:18:b3:37:
49:a1:19:7c:9c:41:d4:b2:72:55:4d:e8:7c:20:37:
08:70:75:7f:6a:49:ee:71:20:fc:bd:70:60:57:32:
12:7b:79:c6:3e:be:c7:07:b3:3d:13:c4:18:84:39:
fb:12:69:b6:9a:28:1c:78:0a:1e:6f:69:95:e9:98:
70:9f:9f:9a:30:a7:09:7f:0e:ba:e3:d7:10:3b:72:
d4:e9:27:18:ff:a1:07:8e:a9:11:9f:ac:95:12:bb:
69:35:d8:73:ce:79:8c:fc:ac:f0:74:7b:3b:09:97:
a2:8e:b0:02:39:0b:f2:42:22:32:61:c5:75:d8:e0:
ad:14:30:48:6a:5d:54:db:10:85:5e:e9:0f:62:2e:
0e:78:52:28:d6:e1:06:d7:fe:dd:ad:44:4e:d5:c4:
df:3a:a6:79:65:2a:02:d3:45:fa:81:c5:b3:c6:71:
ea:3a:be:13:ec:d1:a6:11:60:ee:dc:12:8f:d5:92:
27:c3:39:26:90:0a:69:75:bc:fd:99:8a:9e:81:4f:
83:c6:71:13:21:d9:92:2f:63:6b:4e:d2:0d:2b:bf:
c2:29:a4:4c:00:e1:94:4c:25:99:28:11:5a:68:3c:
13:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:95:2F:2A:61:92:15:4B:36:7F:EB:76:74:61:EF:1B:80:8E:01:AA
X509v3 Authority Key Identifier:
keyid:64:F8:73:AD:B6:A1:F3:E8:1B:33:43:C7:49:98:94:75:26:C4:3D:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZPhzrbah8-gbM0PHSZiUdSbEPc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/b9e4c4-a3dc-46e8-aa3e-397f36c91982/1/ZPhzrbah8-gbM0PHSZiUdSbEPc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/b9e4c4-a3dc-46e8-aa3e-397f36c91982/1/ZPhzrbah8-gbM0PHSZiUdSbEPc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:f9:b5:f4:89:9c:ad:82:69:59:2c:66:4a:02:d7:82:e9:79:
b5:68:9a:e3:72:1c:df:c3:23:27:9c:cd:a8:b2:ad:70:e0:a0:
a6:13:ff:82:98:1c:e3:64:38:ea:72:ce:99:97:44:91:0f:63:
0d:68:d4:bb:45:92:f1:82:50:67:62:c9:ba:d8:87:c7:6e:f4:
b0:e4:c5:6c:c5:12:df:56:62:4b:3b:62:1a:66:eb:16:54:1b:
10:a4:28:d5:e7:89:d8:80:86:5d:e4:cd:23:b3:26:68:31:ec:
c3:ac:3f:77:80:d2:5a:74:22:d1:ab:ed:86:ea:da:3a:ad:ea:
d5:3d:6b:5e:ef:20:76:75:42:4b:67:7b:12:ee:28:c8:20:5a:
ea:6d:43:71:b0:2b:86:a9:77:c2:ed:c7:e4:70:d7:22:35:23:
72:4c:ca:2a:c7:27:99:f3:18:0a:62:e6:e1:97:3e:b8:27:68:
2b:25:bb:f3:c6:65:d0:41:06:8f:ab:f8:73:ba:12:2f:fa:1c:
aa:f0:62:0b:6a:dc:39:1d:df:24:0b:1e:f7:6c:ce:d7:aa:a8:
32:f5:a4:d0:43:0f:96:5a:6a:d5:97:ad:a9:d7:3d:7a:81:9f:
00:62:33:4c:98:12:3b:62:74:bd:c1:18:2c:58:d2:8c:d5:04:
08:96:89:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:19:08 2025 by rpki-client