Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.mft
File: ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.mft (raw, json)
Hash identifier: afrT0T2bgLjKfWwcEp0PoWXJpUoJXJA/j1jVnuOjTzE=
Subject key identifier: 07:9A:5A:E3:49:14:3D:BE:E8:5F:BE:05:E6:C3:51:99:11:B3:40:59
Authority key identifier: 64:1C:78:FC:17:48:BD:CC:6A:6C:88:C6:7D:28:3E:1D:02:D9:DC:C8
Certificate issuer: /CN=641c78fc1748bdcc6a6c88c67d283e1d02d9dcc8
Certificate serial: 0199FDD965A300C560D35BD794F27EE2E6C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.mft
Manifest number: 0F98
Signing time: Sun 19 Oct 2025 19:01:46 +0000
Manifest this update: Sun 19 Oct 2025 19:01:46 +0000
Manifest next update: Mon 20 Oct 2025 19:01:46 +0000
Files and hashes: 1: 7KyvX2ge4BVj5LFVdOXXXemAkCg.roa (hash: Hc/1xIYUTBtB+16ukbbri4uoGukybMhi3rtoBVu7s8I=)
2: 8k4-DaJSUcckd3W12t-LKgUPXOY.roa (hash: FEgAXATsq5yqV5pU5s6y/DGmTndCuBZeOPWD+L+m2zs=)
3: ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.crl (hash: dWS08IhHs/54dZRlWmdPyPxi9dtAHeCrDKovib5u11I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:65:a3:00:c5:60:d3:5b:d7:94:f2:7e:e2:e6:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=641c78fc1748bdcc6a6c88c67d283e1d02d9dcc8
Validity
Not Before: Oct 19 19:01:46 2025 GMT
Not After : Oct 20 19:01:46 2025 GMT
Subject: CN=079a5ae349143dbee85fbe05e6c3519911b34059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:0e:40:02:e5:e4:28:90:e0:e7:73:86:3e:49:
41:02:51:ec:ac:cd:30:4a:df:03:a7:0f:42:cb:cc:
3d:89:55:bf:4a:c5:d2:df:35:29:c6:53:81:f7:db:
ab:89:a6:1a:11:88:71:c0:42:eb:8d:59:e0:d2:f6:
a7:3e:f3:79:bd:25:09:2c:c6:64:79:67:11:4e:d8:
f3:e7:93:ce:10:27:0e:c2:9d:80:93:11:72:71:21:
de:0f:e5:91:e6:79:b7:c8:87:63:e5:8f:9f:d9:38:
d0:65:76:ef:b3:0b:c5:32:5a:e6:5f:3a:27:83:02:
c0:01:41:2c:72:60:c1:34:c9:54:4a:e3:6b:e2:44:
2b:b5:d5:47:b6:91:10:a9:81:09:0f:14:65:ef:b6:
0b:d9:ce:19:74:d6:05:48:26:33:c7:c2:30:13:93:
ae:09:3f:a9:43:1f:29:43:8b:d4:e2:71:72:a2:14:
ee:9a:7a:be:d7:f1:2d:45:5c:52:f5:73:24:7d:4c:
fd:21:65:0b:ba:55:7f:b1:4f:5f:f7:ed:67:d6:35:
ae:81:9f:86:34:f4:6c:1f:f0:16:0a:47:24:61:74:
ed:41:48:38:f7:4e:37:32:c9:4c:74:f6:f8:c9:76:
68:28:f3:7c:5c:cb:e8:a7:d0:ab:a6:cd:61:b9:9f:
43:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:9A:5A:E3:49:14:3D:BE:E8:5F:BE:05:E6:C3:51:99:11:B3:40:59
X509v3 Authority Key Identifier:
keyid:64:1C:78:FC:17:48:BD:CC:6A:6C:88:C6:7D:28:3E:1D:02:D9:DC:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:54:fe:df:8c:90:97:62:e2:df:6f:80:d4:a5:fa:00:87:6e:
7d:df:81:e4:6e:fd:91:af:a4:d0:0c:5e:bb:45:29:c5:c2:b0:
30:a7:ab:00:37:6f:25:cb:d8:9c:a2:c2:f0:02:bf:0a:71:70:
6f:02:83:ef:01:d4:60:76:1b:16:63:36:03:12:c2:f4:4c:f2:
11:e5:95:12:89:2e:84:f5:d4:82:31:28:22:cd:ca:17:05:5c:
89:a2:bb:0b:bd:3b:08:62:fa:7c:c8:5a:70:0c:4e:fe:12:a8:
1d:80:da:da:d7:2e:aa:70:d5:38:56:88:00:7f:9a:54:57:4f:
5f:51:a4:81:65:a6:34:33:a9:c1:05:f8:e9:f6:b2:be:27:9e:
3e:8a:57:20:1a:ae:82:56:7b:99:21:8c:6a:0e:30:4b:09:9f:
f9:9d:c4:a7:32:a8:32:d2:71:1b:3c:e3:06:80:bb:e8:fa:7e:
25:aa:37:15:7c:81:31:b2:a1:68:82:97:d7:cd:d3:29:0b:fd:
20:f8:ab:0c:ac:e5:b7:c2:fd:aa:c5:5e:59:cb:26:70:5b:54:
2c:de:88:5f:b4:7b:a5:f4:c3:9a:a2:a3:6d:53:78:20:70:47:
67:ce:d3:c3:6a:44:24:22:21:e6:8b:1c:42:d4:d5:ef:ab:a4:
db:e5:6b:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:17:36 2025 by rpki-client