Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/70b2c4-1d4a-4b91-b0d0-2c05cc922001/1/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.mft
File: ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.mft (raw, json)
Hash identifier: EDPZvGSo0nJGgstIiUk9rtW4QtxvBwOZWmbWLkUEqbE=
Subject key identifier: F7:9A:3F:FD:AE:F3:DA:21:08:66:64:51:7D:4E:BE:EE:87:29:0D:62
Authority key identifier: 64:D8:64:AE:92:BD:7C:EA:B5:08:3B:CC:71:10:1E:F0:46:76:F8:AC
Certificate issuer: /CN=64d864ae92bd7ceab5083bcc71101ef04676f8ac
Certificate serial: 0199FB7CA5060F4F2E55CC51B5FE300F36CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/70b2c4-1d4a-4b91-b0d0-2c05cc922001/1/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.mft
Manifest number: 074B
Signing time: Sun 19 Oct 2025 08:01:13 +0000
Manifest this update: Sun 19 Oct 2025 08:01:13 +0000
Manifest next update: Mon 20 Oct 2025 08:01:13 +0000
Files and hashes: 1: 1c920Ct5rOPHF_34AgNrTQyTHns.roa (hash: 3ha9UyAf61XbEV4U4pqec4b6uB2FvJUFQO9xEs0mMB8=)
2: ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.crl (hash: Y2Zap5n3zVpawQ/zJx4HH9PYfEi/TqPI5GRjKtd3SEc=)
3: ovafsYtoE7DXZrX76_DbhwiFBFI.roa (hash: B3oTrNBu7iXQWRfAVFRfxlkERw0m92wTQifsPR2uF3I=)
4: uS_eNJttBX5d2bBiNGi8o_-V1qw.roa (hash: 4uBi6d9Ejt3VJlBosKZzOt8ocCYLF07d22+zXDAl+n0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/70b2c4-1d4a-4b91-b0d0-2c05cc922001/1/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/70b2c4-1d4a-4b91-b0d0-2c05cc922001/1/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:a5:06:0f:4f:2e:55:cc:51:b5:fe:30:0f:36:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64d864ae92bd7ceab5083bcc71101ef04676f8ac
Validity
Not Before: Oct 19 08:01:13 2025 GMT
Not After : Oct 20 08:01:13 2025 GMT
Subject: CN=f79a3ffdaef3da21086664517d4ebeee87290d62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:63:38:d4:16:3a:e9:4a:15:dc:01:eb:94:e8:
e7:d2:75:78:bd:fa:5b:b5:72:fd:79:a4:bb:45:21:
57:db:e1:51:18:c6:3c:a8:29:4e:af:d8:90:9e:95:
ea:7a:1c:38:3b:30:c7:0b:10:0f:20:df:1f:4c:e6:
3d:18:6b:08:46:da:b9:0f:5a:5e:45:ba:09:a2:6a:
16:ee:e3:8f:4f:1a:39:2e:be:60:e9:ba:3a:f8:18:
23:8d:29:36:30:a6:7e:5d:27:a0:d1:a6:46:d3:90:
ae:ca:55:6a:a5:a0:0e:56:b1:be:53:fd:9e:46:ec:
a9:4d:00:48:2f:4d:53:e4:52:88:64:61:f1:1b:f9:
a4:00:aa:2b:31:df:d7:01:59:09:c2:7e:2a:a1:bb:
81:e8:a6:d7:a4:d8:30:c4:7d:03:02:aa:dc:f7:a2:
40:51:c6:98:19:ee:23:b8:3b:a1:a7:7e:11:65:46:
87:9c:ac:e5:cc:45:d8:16:28:c7:48:85:a9:e1:7b:
e9:a1:93:5c:57:62:f5:1e:7f:bd:19:4d:7b:e2:51:
8f:a8:cf:3f:0f:be:df:03:1a:b1:f9:1f:8e:1a:be:
3e:fe:75:f1:1d:53:fb:5d:f0:e4:61:59:97:95:77:
3d:a1:af:c5:5b:95:61:0e:b6:b0:1e:14:de:da:e6:
2e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:9A:3F:FD:AE:F3:DA:21:08:66:64:51:7D:4E:BE:EE:87:29:0D:62
X509v3 Authority Key Identifier:
keyid:64:D8:64:AE:92:BD:7C:EA:B5:08:3B:CC:71:10:1E:F0:46:76:F8:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/70b2c4-1d4a-4b91-b0d0-2c05cc922001/1/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/70b2c4-1d4a-4b91-b0d0-2c05cc922001/1/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:bd:c3:57:0a:37:e5:3d:86:6f:ac:e0:62:d9:b4:ed:34:6b:
e0:80:b8:98:73:e5:22:ad:40:d4:ea:8e:b0:53:8c:f2:9d:cb:
08:6d:e2:8a:3c:36:a8:dd:49:a1:52:ab:72:b3:df:71:72:bc:
20:85:69:d8:8d:1e:35:4c:2e:3c:84:d5:1e:87:61:7d:b6:7a:
c1:e0:d7:dc:1e:cc:0c:b8:1e:3d:99:43:fe:03:24:ef:d9:d9:
d8:6d:a8:10:6b:d4:49:13:ff:02:00:3b:b1:1b:22:76:a3:7c:
91:de:c6:89:a5:f4:b3:f4:72:5b:d3:d6:cf:0b:8f:88:ea:65:
0b:d9:68:89:83:17:e3:2d:ae:08:b2:03:20:eb:5b:49:0d:c4:
01:a3:31:a7:92:a5:0f:c6:e9:13:a0:9f:35:18:20:c8:f3:22:
b9:78:5c:85:51:ca:2a:20:21:81:61:23:48:53:90:02:a4:26:
7c:67:9a:96:4d:17:52:78:06:80:ef:97:53:84:24:2b:62:94:
86:79:ae:12:bf:58:cf:64:5e:31:58:54:3e:37:d8:6e:94:f7:
ab:20:4c:4e:65:98:08:32:10:9f:2c:7b:72:fd:0f:16:3a:b8:
97:ba:43:43:b7:4b:e6:e8:cd:b5:08:77:34:32:62:d3:0f:b6:
aa:e5:1a:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:33 2025 by rpki-client