Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cf7d5c-04a5-48a7-b8c6-37a442e65f18/1/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.mft
File: ZKmFbbGrOyTwnpy5J0N2hmgwFBE.mft (raw, json)
Hash identifier: SoP0va58mycB5hhlDluoBbgMnsj/nvPGBL+uj0jugG8=
Subject key identifier: 8D:9F:4A:6A:A4:51:2B:C6:E4:02:21:9D:21:1F:55:66:42:75:DC:5E
Authority key identifier: 64:A9:85:6D:B1:AB:3B:24:F0:9E:9C:B9:27:43:76:86:68:30:14:11
Certificate issuer: /CN=64a9856db1ab3b24f09e9cb92743768668301411
Certificate serial: 0199FCC6048E2C2E4C28287049367E097699
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cf7d5c-04a5-48a7-b8c6-37a442e65f18/1/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.mft
Manifest number: 12EC
Signing time: Sun 19 Oct 2025 14:00:59 +0000
Manifest this update: Sun 19 Oct 2025 14:00:59 +0000
Manifest next update: Mon 20 Oct 2025 14:00:59 +0000
Files and hashes: 1: ID_lbNPN5Y-E-d8mbQhTW4YaucM.roa (hash: pqF3+TVfZVLtWeeY0X/7rX4dAra1r0f5BNTNZcfYgyw=)
2: ZKmFbbGrOyTwnpy5J0N2hmgwFBE.crl (hash: H0NJRl1ZnvNoxLeledARuyK+r1TNLa34gOt3V+x8E8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/cf7d5c-04a5-48a7-b8c6-37a442e65f18/1/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/cf7d5c-04a5-48a7-b8c6-37a442e65f18/1/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:04:8e:2c:2e:4c:28:28:70:49:36:7e:09:76:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64a9856db1ab3b24f09e9cb92743768668301411
Validity
Not Before: Oct 19 14:00:59 2025 GMT
Not After : Oct 20 14:00:59 2025 GMT
Subject: CN=8d9f4a6aa4512bc6e402219d211f55664275dc5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:5e:f1:3d:fd:3e:df:b6:0a:8f:d9:ca:24:d8:
37:3a:fe:d1:ea:48:cc:8c:66:b6:44:bb:83:16:5b:
2e:20:d7:c2:c8:10:de:65:f3:91:6d:7b:18:65:ba:
24:fc:68:fb:4a:70:cb:20:e4:41:00:bd:0f:b1:59:
3c:af:45:5b:f7:66:27:ca:f5:2e:f7:8d:77:9e:26:
1b:72:8b:2c:6e:d5:78:07:f6:28:01:80:e8:f7:71:
72:fc:5a:c8:3a:f0:61:cd:39:f2:c4:30:9b:11:7b:
df:6c:c8:d8:4c:47:0d:40:f9:fa:9c:e9:df:9c:a4:
d4:64:e2:36:30:c0:77:fd:5c:18:88:35:85:0a:27:
d6:a1:ff:07:4f:45:9d:a7:3a:d0:48:03:c1:93:1b:
83:1c:ea:16:9d:3d:2d:64:e6:16:52:3e:b2:d3:71:
b6:1a:43:19:2c:db:b6:47:77:b0:1e:6e:02:98:28:
ba:52:de:49:32:62:61:1d:8d:2f:b6:4b:b2:0f:66:
75:63:fc:45:b8:4f:ed:40:13:e3:31:ab:cf:5c:29:
84:2e:82:ca:6b:13:a7:15:43:95:11:52:6f:34:93:
31:5c:62:d3:ef:5f:7f:77:21:ba:61:05:d6:d8:72:
90:f3:7c:55:78:7d:13:3a:59:1b:4f:54:9f:6c:3d:
0b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:9F:4A:6A:A4:51:2B:C6:E4:02:21:9D:21:1F:55:66:42:75:DC:5E
X509v3 Authority Key Identifier:
keyid:64:A9:85:6D:B1:AB:3B:24:F0:9E:9C:B9:27:43:76:86:68:30:14:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cf7d5c-04a5-48a7-b8c6-37a442e65f18/1/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cf7d5c-04a5-48a7-b8c6-37a442e65f18/1/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:e1:cb:c6:3e:5e:b5:d7:1a:a0:54:8b:14:80:cd:d9:5a:ff:
0a:7f:4d:23:04:10:b0:82:49:6c:c0:24:77:4e:83:bb:f7:48:
35:5d:11:34:e7:b2:7c:fc:25:49:f9:04:0c:1a:4a:37:96:91:
9d:e7:79:a5:2f:09:00:2a:d5:25:e1:d0:2a:7a:cd:33:ba:07:
9a:22:c1:c3:70:09:b8:1b:d1:1c:bd:d2:07:62:c8:b9:8c:33:
c5:f6:c4:7e:42:03:4c:e4:e2:76:6d:c9:b6:6b:30:fb:79:33:
75:9a:e1:87:b8:c2:23:a0:ed:22:20:a2:b5:55:04:96:da:1b:
61:43:8a:ec:40:f0:bd:c2:87:de:c2:5b:60:bf:3b:0f:ca:fd:
0e:a9:a7:05:a4:c9:18:bb:8d:90:ca:f3:4e:47:64:cc:29:9f:
bc:1a:5b:2f:43:ba:58:7c:a2:20:01:8e:77:31:12:70:e9:f1:
8e:a1:bb:ce:03:c8:4d:a2:dc:fa:d0:86:38:4c:bc:16:cf:5b:
60:ed:c6:a2:e3:94:34:0f:62:2a:f0:7a:a8:ca:ad:3d:50:9e:
f4:b3:32:5a:b3:ee:37:1b:b6:75:d4:f0:4e:e0:3c:fe:f5:63:
45:bc:3f:d3:18:63:db:57:63:e6:de:ef:3e:b6:3e:f3:0b:d2:
0b:b9:bb:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:23:31 2025 by rpki-client