Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.mft
File: ZW0zxfFuPN2WCuBcgNn282_FU_I.mft (raw, json)
Hash identifier: DeoSZkHc2O8l3n9/ZHkVbww/1S+7iKfHgRgjXQkFXEw=
Subject key identifier: 11:73:00:4D:55:E5:6D:76:18:BA:42:B0:F7:F4:39:3E:C2:F4:A7:53
Authority key identifier: 65:6D:33:C5:F1:6E:3C:DD:96:0A:E0:5C:80:D9:F6:F3:6F:C5:53:F2
Certificate issuer: /CN=656d33c5f16e3cdd960ae05c80d9f6f36fc553f2
Certificate serial: 0199FCFD36CB9919DA43074B6C63679E01E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZW0zxfFuPN2WCuBcgNn282_FU_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.mft
Manifest number: 0B4A
Signing time: Sun 19 Oct 2025 15:01:17 +0000
Manifest this update: Sun 19 Oct 2025 15:01:17 +0000
Manifest next update: Mon 20 Oct 2025 15:01:17 +0000
Files and hashes: 1: DPh5nDPtcpqJ9naux6sZ9u0Dr1s.roa (hash: YTfkEG3kyAd2IQ6e7j/lkPx7FnYmaQ7XszGFKecXlqc=)
2: ZW0zxfFuPN2WCuBcgNn282_FU_I.crl (hash: +2encc69YhfMJ6NxK5hGpMiWmuJgEBr4rv1b+wUU0uI=)
3: hopE5nbQY5r20JQ6uaXH5JYpOWc.roa (hash: fzI2vMoCED9Ide/Md9CqSUe230wfYxn1MlpAm1WYjvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZW0zxfFuPN2WCuBcgNn282_FU_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:36:cb:99:19:da:43:07:4b:6c:63:67:9e:01:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=656d33c5f16e3cdd960ae05c80d9f6f36fc553f2
Validity
Not Before: Oct 19 15:01:17 2025 GMT
Not After : Oct 20 15:01:17 2025 GMT
Subject: CN=1173004d55e56d7618ba42b0f7f4393ec2f4a753
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ef:dd:15:43:f2:9e:5e:7f:6c:2b:be:fa:fd:
6a:76:4f:ec:01:04:ed:d7:c6:80:6e:14:5d:b4:87:
82:61:38:7b:79:af:59:b1:13:c3:38:30:a8:c5:5e:
dd:37:e0:ac:69:83:e2:a3:26:fa:71:39:c6:46:57:
61:83:66:e2:c8:61:96:f4:5f:e7:c9:8f:fe:52:df:
0b:ec:e5:94:9e:41:49:43:11:0a:39:32:97:b7:43:
ea:9b:1b:28:55:af:8f:14:4e:4e:1a:96:f8:71:87:
b0:ef:09:4c:a8:17:d0:63:98:c6:73:7b:7e:29:cc:
c0:13:0c:40:e2:a0:7a:83:5e:99:ac:e9:d3:88:48:
fa:28:aa:7c:38:47:03:e7:09:f0:ed:26:7b:5c:46:
4b:77:d0:64:39:d3:a3:80:86:77:ea:52:92:51:65:
9b:c0:6d:d9:37:af:42:88:30:a6:e3:82:54:f5:9c:
e0:df:79:da:b4:ae:a9:06:46:69:31:1e:c3:89:c0:
05:3c:81:b7:f9:a7:ca:2e:5d:58:94:4a:2c:2d:89:
e8:98:55:99:2e:d5:b4:ff:1c:57:fa:ae:27:f4:69:
48:23:74:13:01:61:e6:ec:30:6f:e8:a7:a3:d2:33:
de:41:d6:31:bf:5c:0a:5c:99:74:17:6e:eb:bb:df:
74:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:73:00:4D:55:E5:6D:76:18:BA:42:B0:F7:F4:39:3E:C2:F4:A7:53
X509v3 Authority Key Identifier:
keyid:65:6D:33:C5:F1:6E:3C:DD:96:0A:E0:5C:80:D9:F6:F3:6F:C5:53:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZW0zxfFuPN2WCuBcgNn282_FU_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:98:ef:f2:cd:51:5e:77:e4:d1:3f:d0:e3:81:33:cd:2d:cf:
d3:d3:5e:6b:b2:d6:56:62:cc:03:94:e1:e9:2f:b3:24:68:3f:
1d:3e:ee:80:74:52:83:79:91:49:ef:c8:ea:e6:0b:0b:9d:88:
1a:aa:23:35:a7:be:20:5e:46:80:3c:12:d1:47:8e:df:d7:1c:
cd:a3:05:fc:b0:e4:77:5c:c5:5e:f1:0b:85:c3:b8:58:f5:ce:
a6:f8:a2:d8:0b:95:ed:47:c3:03:c2:ae:cb:2a:88:ef:08:3c:
ed:e6:e9:67:b5:e5:80:30:d7:0f:e9:6a:cc:98:5f:e3:e1:a0:
e0:0c:57:34:f6:63:c8:85:96:7f:8f:8a:8c:af:ea:d3:4b:a3:
b4:19:0e:b9:27:99:2a:1b:18:d4:d0:22:50:7c:43:09:94:e0:
09:75:ba:f2:77:5a:09:68:65:df:34:43:14:4b:91:73:df:21:
9f:25:c4:3e:49:ee:f5:2a:4b:2c:ed:57:d9:af:e0:82:a8:ba:
34:4e:e4:7c:33:8c:9f:aa:2f:99:4a:a2:57:ff:6f:d3:f1:dd:
58:66:67:1a:60:a6:f2:7b:5d:84:16:7d:f6:54:47:b9:f7:9f:
5b:f2:51:a4:f3:58:70:9c:9e:8d:bc:f8:50:42:25:98:e6:fa:
75:d8:e9:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:51:17 2025 by rpki-client