Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/77c074-da25-45e8-9d26-54c16b9cc118/1/ZnGexRbxFUDaTE5-S39bN32f0ls.mft
File: ZnGexRbxFUDaTE5-S39bN32f0ls.mft (raw, json)
Hash identifier: e7DeDGlnZmA5Z7vaxoR6S5JEEvVZGAAYOCcuEe20sDI=
Subject key identifier: EA:42:B2:58:3C:EF:89:18:B3:46:60:A8:F7:60:FA:1E:F0:A7:6C:B9
Authority key identifier: 66:71:9E:C5:16:F1:15:40:DA:4C:4E:7E:4B:7F:5B:37:7D:9F:D2:5B
Certificate issuer: /CN=66719ec516f11540da4c4e7e4b7f5b377d9fd25b
Certificate serial: 0199FB4596D3C801E6FC9390AC7374517D5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZnGexRbxFUDaTE5-S39bN32f0ls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/77c074-da25-45e8-9d26-54c16b9cc118/1/ZnGexRbxFUDaTE5-S39bN32f0ls.mft
Manifest number: 0A42
Signing time: Sun 19 Oct 2025 07:01:05 +0000
Manifest this update: Sun 19 Oct 2025 07:01:05 +0000
Manifest next update: Mon 20 Oct 2025 07:01:05 +0000
Files and hashes: 1: ZnGexRbxFUDaTE5-S39bN32f0ls.crl (hash: AZT9unoPKe+jfY66vKWTx+300OJqujBexiZPRb4g/mQ=)
2: m2QATzNu0SRSUTMmrV_23UYzqCU.roa (hash: iD9hVdOJHc5GBYHSyd+djF2Re6JSu/DsX978dRZjYtw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/77c074-da25-45e8-9d26-54c16b9cc118/1/ZnGexRbxFUDaTE5-S39bN32f0ls.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/77c074-da25-45e8-9d26-54c16b9cc118/1/ZnGexRbxFUDaTE5-S39bN32f0ls.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZnGexRbxFUDaTE5-S39bN32f0ls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:96:d3:c8:01:e6:fc:93:90:ac:73:74:51:7d:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66719ec516f11540da4c4e7e4b7f5b377d9fd25b
Validity
Not Before: Oct 19 07:01:05 2025 GMT
Not After : Oct 20 07:01:05 2025 GMT
Subject: CN=ea42b2583cef8918b34660a8f760fa1ef0a76cb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:87:3c:c7:30:aa:33:aa:d6:69:5c:e9:41:c9:
d7:1b:36:5c:42:92:2e:26:c5:ad:95:46:6a:18:9e:
fd:f0:78:29:cb:66:23:83:97:59:a0:7d:b9:78:31:
85:af:0c:4f:3c:47:6f:aa:91:f7:7d:b5:58:61:15:
d4:a0:32:a0:e5:04:59:67:45:2a:43:87:44:de:15:
8b:b4:49:cb:8f:3c:2f:c9:65:6f:06:0a:7a:64:a3:
f3:f1:0f:c3:22:4c:f6:9d:8d:c0:07:54:cb:ee:af:
7a:6d:59:ef:ee:97:7e:4b:ca:2c:c9:7e:62:b9:73:
72:1b:6e:87:2e:38:6d:71:e7:9d:93:1e:86:a6:c9:
db:dd:21:99:48:d6:f7:66:bd:48:2a:2d:f9:63:7b:
0e:b7:31:07:4e:a6:64:97:dd:49:e5:bd:8d:cf:e5:
64:37:bd:6f:06:6e:9a:45:da:d2:4f:48:3e:3b:5d:
0f:67:2a:67:71:a7:a7:15:b8:ab:59:90:b5:ca:49:
1a:90:ff:51:bc:05:4d:79:4b:33:8d:1a:ef:75:34:
62:6d:ef:57:b8:0e:92:3f:f7:66:60:60:fc:6e:e8:
dc:10:d2:df:41:48:56:fd:30:c7:f9:3e:76:ac:e3:
35:ae:b6:f4:e6:b3:55:d8:53:e5:64:c6:76:16:7e:
31:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:42:B2:58:3C:EF:89:18:B3:46:60:A8:F7:60:FA:1E:F0:A7:6C:B9
X509v3 Authority Key Identifier:
keyid:66:71:9E:C5:16:F1:15:40:DA:4C:4E:7E:4B:7F:5B:37:7D:9F:D2:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZnGexRbxFUDaTE5-S39bN32f0ls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/77c074-da25-45e8-9d26-54c16b9cc118/1/ZnGexRbxFUDaTE5-S39bN32f0ls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/77c074-da25-45e8-9d26-54c16b9cc118/1/ZnGexRbxFUDaTE5-S39bN32f0ls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:c3:94:11:f8:ba:23:e2:68:32:ef:87:8c:55:fe:3f:cc:12:
81:35:d1:ab:8e:af:cb:e9:61:33:c0:08:d6:ed:a2:09:f5:de:
1a:bb:19:86:4e:46:95:4c:9e:a7:d2:94:7c:98:98:cb:00:1c:
a9:21:97:5a:14:5c:a4:f6:59:3c:73:2b:ad:dc:4d:53:9a:74:
61:d0:c7:07:0b:03:31:8b:5b:7d:32:4a:17:41:f5:a1:62:10:
cf:50:45:96:e7:b8:22:52:0b:24:fc:79:0a:91:4a:e4:87:75:
ce:5d:b3:87:78:8c:95:72:ee:8e:85:81:9b:7f:98:40:03:62:
19:66:55:a4:1a:63:f9:27:35:d8:d1:d1:89:6f:d6:1f:91:90:
1f:35:c3:f7:d3:fe:95:34:11:cd:5f:12:8a:a9:f0:89:d3:67:
79:0b:6f:8f:eb:61:f4:7a:4d:c4:ba:7d:16:1e:6b:a0:e5:4e:
54:e7:b5:97:87:f5:50:cb:ab:42:22:08:f2:cc:33:c0:c4:e5:
bd:08:90:83:ff:a3:55:02:c7:82:e2:7a:41:b1:66:90:24:31:
dd:d7:42:b1:50:58:3b:44:d5:54:26:99:14:35:dd:12:7f:87:
26:33:88:f6:ac:e1:97:b6:c0:bd:4d:ca:d3:af:c3:95:16:a3:
f8:55:4f:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:08 2025 by rpki-client