Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.mft
File: zHLmM99WNan5jS9optKty0QVXNw.mft (raw, json)
Hash identifier: 6yqOqgNU4OhR2yWHOZipMkZzmWs/lsBkmGqPVDItzgM=
Subject key identifier: E8:00:6B:21:54:1B:8E:20:C6:5E:0B:45:A7:3C:45:7E:27:6F:BF:AA
Authority key identifier: CC:72:E6:33:DF:56:35:A9:F9:8D:2F:68:A6:D2:AD:CB:44:15:5C:DC
Certificate issuer: /CN=cc72e633df5635a9f98d2f68a6d2adcb44155cdc
Certificate serial: 0199FC58ABE3FB059EE927194867A4D5C8EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zHLmM99WNan5jS9optKty0QVXNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 12:01:33 +0000
Manifest this update: Sun 19 Oct 2025 12:01:33 +0000
Manifest next update: Mon 20 Oct 2025 12:01:33 +0000
Files and hashes: 1: L92Oz155yhI01cgTqDPydWK98ns.roa (hash: e3pz5+PnlP9tg7wzv2dM4Vb+by/3YBKQxYyFlmqUG3k=)
2: rFLbnP63niNMPmNTHqvODCWAmf4.roa (hash: QWuHWUDfpexkyRSRrY8RzHPTAmEW2/XktJBH/kF+mCg=)
3: zHLmM99WNan5jS9optKty0QVXNw.crl (hash: RaYyCWXu/ngzp2ockxRdGgB6Zv9uTphe/TuR+JEOjZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/zHLmM99WNan5jS9optKty0QVXNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:ab:e3:fb:05:9e:e9:27:19:48:67:a4:d5:c8:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc72e633df5635a9f98d2f68a6d2adcb44155cdc
Validity
Not Before: Oct 19 12:01:33 2025 GMT
Not After : Oct 20 12:01:33 2025 GMT
Subject: CN=e8006b21541b8e20c65e0b45a73c457e276fbfaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:30:da:f6:36:f1:2b:91:ce:7d:6c:25:95:ca:
e8:56:f4:64:51:f7:00:07:78:ad:47:89:8b:70:9e:
bf:4a:9e:d6:ec:10:95:b3:0c:4f:99:c4:36:4c:81:
1a:c4:f4:90:61:92:fe:9b:a1:90:97:cb:ff:10:32:
6c:2a:97:28:2a:6d:ca:95:31:24:05:9b:7b:3d:26:
dd:a8:53:33:99:df:14:97:12:0e:a9:3f:63:aa:ba:
72:c5:df:85:41:0b:b9:ad:98:3e:d3:37:ab:2e:67:
96:6c:87:d0:2d:b7:7a:ce:84:d2:f1:02:ff:7f:0e:
65:4c:ac:69:61:fc:c1:32:b6:8e:c0:94:fe:89:cb:
31:e6:b1:8d:72:24:de:ff:91:f5:d6:cd:30:fd:34:
4d:8d:6f:0e:71:2d:d8:5f:38:bb:4e:2e:6f:ff:f2:
b5:8c:1f:36:70:4d:cd:91:33:c5:47:f6:c9:3c:e8:
1c:5f:61:8a:d5:72:2b:9e:b3:92:11:69:01:25:a2:
89:0e:96:b9:fe:2d:ea:c3:f9:3e:b1:35:2e:a6:e9:
b7:5c:f5:16:61:02:a8:a8:5e:90:f6:be:f0:88:45:
32:73:c9:73:1b:3d:42:61:77:4e:00:55:97:fe:22:
72:ec:fd:0b:28:93:18:7d:eb:bb:c5:dd:d0:b7:25:
49:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:00:6B:21:54:1B:8E:20:C6:5E:0B:45:A7:3C:45:7E:27:6F:BF:AA
X509v3 Authority Key Identifier:
keyid:CC:72:E6:33:DF:56:35:A9:F9:8D:2F:68:A6:D2:AD:CB:44:15:5C:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zHLmM99WNan5jS9optKty0QVXNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:13:3f:0a:bc:f6:1b:99:69:83:f2:17:2b:61:1f:65:77:43:
d4:32:8c:bf:c1:f3:9e:9e:f2:e1:18:64:53:2f:97:23:d1:28:
e2:7d:b5:0d:83:c4:df:39:a3:8f:3f:ba:a8:26:a1:78:ab:83:
ef:8d:7a:78:34:92:66:3b:f9:1b:c9:ad:f4:d3:62:6b:c0:cc:
33:3e:cb:62:7b:dd:7f:01:88:67:aa:18:59:1d:0a:9d:bb:79:
ba:81:05:8c:51:27:14:af:14:f8:16:71:48:b4:d4:7f:91:77:
0e:8e:35:d2:e2:5d:6b:6e:3e:45:ad:d7:e4:36:22:61:d7:7f:
b6:85:52:47:f8:f0:e1:eb:fc:d4:04:ea:0b:8e:27:48:0a:59:
88:9a:74:3b:1c:23:de:50:7a:96:56:af:ac:58:df:78:06:9d:
fe:c4:e5:00:c6:a8:1e:22:bf:62:f2:96:d2:38:2e:8b:6d:4e:
bc:6a:91:cf:9c:82:1d:04:16:b4:9b:12:86:54:cd:e3:c3:38:
be:69:33:7e:c7:f7:5c:29:bf:71:3b:05:07:c4:7e:cc:18:7c:
14:4e:42:55:99:ef:4d:5e:57:7a:73:e0:e6:82:d9:67:9e:eb:
c4:9c:b3:65:88:71:62:3d:7c:ac:22:66:41:2e:98:ce:1e:2b:
51:7c:d6:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:18:05 2025 by rpki-client