Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/5bf30d-69eb-41a4-a90d-21b9f12d22f3/1/ZpT1sPq1_tLflTXiqcAp8YfVVAQ.mft
File: ZpT1sPq1_tLflTXiqcAp8YfVVAQ.mft (raw, json)
Hash identifier: Whw7lg1ovAKXF8ATL0RL/AB9CDIK/9ko0vtZLkJetH0=
Subject key identifier: A9:71:AD:CC:E4:96:42:E4:00:56:67:82:1E:55:A2:9C:21:84:20:5B
Authority key identifier: 66:94:F5:B0:FA:B5:FE:D2:DF:95:35:E2:A9:C0:29:F1:87:D5:54:04
Certificate issuer: /CN=6694f5b0fab5fed2df9535e2a9c029f187d55404
Certificate serial: 0199FD33F2F6FAEB90BB5BB65886856BA892
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZpT1sPq1_tLflTXiqcAp8YfVVAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/5bf30d-69eb-41a4-a90d-21b9f12d22f3/1/ZpT1sPq1_tLflTXiqcAp8YfVVAQ.mft
Manifest number: 0802
Signing time: Sun 19 Oct 2025 16:01:04 +0000
Manifest this update: Sun 19 Oct 2025 16:01:04 +0000
Manifest next update: Mon 20 Oct 2025 16:01:04 +0000
Files and hashes: 1: 1s99Tw3afz1xnVyZeR8lNzEPEk8.roa (hash: b6Tn8In4pLbU3Aif4BcpGyzCXnOKH3eVjkyvFPcCx0s=)
2: ZpT1sPq1_tLflTXiqcAp8YfVVAQ.crl (hash: X4kJqEAIoAiwd1tEk1TL7MMW4kknxCfB8SESl/P2kNU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/5bf30d-69eb-41a4-a90d-21b9f12d22f3/1/ZpT1sPq1_tLflTXiqcAp8YfVVAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/5bf30d-69eb-41a4-a90d-21b9f12d22f3/1/ZpT1sPq1_tLflTXiqcAp8YfVVAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZpT1sPq1_tLflTXiqcAp8YfVVAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:33:f2:f6:fa:eb:90:bb:5b:b6:58:86:85:6b:a8:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6694f5b0fab5fed2df9535e2a9c029f187d55404
Validity
Not Before: Oct 19 16:01:04 2025 GMT
Not After : Oct 20 16:01:04 2025 GMT
Subject: CN=a971adcce49642e4005667821e55a29c2184205b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2d:67:54:2b:10:c5:c5:b1:33:88:61:4e:4e:
e4:1f:7c:fb:07:61:3b:1a:20:d0:d4:1e:e9:4d:ca:
87:da:c0:f1:20:f0:02:7f:11:13:ae:15:5d:16:6c:
22:51:45:94:86:2a:e8:5b:30:69:1f:fc:90:e4:a8:
17:8e:a3:1e:0a:0e:b1:33:f6:fb:01:c4:af:54:e8:
70:e7:7c:0c:0e:de:b7:4a:70:33:2e:30:2d:ce:9a:
51:e6:cf:3e:e4:c2:70:8d:e0:b8:14:87:d5:d6:03:
34:de:d9:f6:75:10:ae:27:e4:fe:1e:7c:45:a3:f7:
10:ee:d7:d0:ea:37:60:9e:bb:2b:d3:a1:7f:6f:83:
3f:17:99:22:1f:81:94:b0:77:d2:65:9a:0b:a2:84:
49:98:a0:9c:19:95:2e:91:c5:94:56:4e:bb:d6:8b:
73:5e:6d:a1:78:b5:0c:59:15:4c:d6:e2:0b:81:70:
d6:86:34:e5:d9:52:91:13:9e:48:a5:4f:09:e8:3f:
f1:4c:0d:28:ad:f6:f5:51:26:cd:88:19:d7:6d:3a:
eb:8e:b3:7d:32:f5:c2:31:3a:f0:eb:f9:f0:23:91:
8b:aa:59:85:cb:bc:9b:a7:3b:2e:e5:19:2c:fd:8e:
b4:6b:b4:23:48:f4:11:0c:9a:63:08:3f:47:bd:f8:
30:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:71:AD:CC:E4:96:42:E4:00:56:67:82:1E:55:A2:9C:21:84:20:5B
X509v3 Authority Key Identifier:
keyid:66:94:F5:B0:FA:B5:FE:D2:DF:95:35:E2:A9:C0:29:F1:87:D5:54:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZpT1sPq1_tLflTXiqcAp8YfVVAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/5bf30d-69eb-41a4-a90d-21b9f12d22f3/1/ZpT1sPq1_tLflTXiqcAp8YfVVAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/5bf30d-69eb-41a4-a90d-21b9f12d22f3/1/ZpT1sPq1_tLflTXiqcAp8YfVVAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:a8:db:1b:51:9f:0a:b8:4d:f7:05:27:ed:dc:3b:01:c8:03:
ef:f0:df:3a:5c:29:e2:b5:da:71:8e:3e:72:57:3e:da:8d:6d:
66:1c:d8:24:37:31:2f:25:b9:c6:37:11:6f:6b:a0:4d:34:35:
70:7e:3e:66:da:b0:8a:6f:d9:5e:37:c4:ef:6f:6c:8a:6c:d1:
d3:e9:72:13:94:74:bd:74:05:f1:ed:93:a5:8a:20:a2:4e:1d:
85:56:ab:6b:bf:d6:42:f2:96:16:47:94:fc:d9:05:1b:86:d2:
71:51:d9:41:f0:8d:08:8c:eb:7a:00:10:6e:38:f0:34:88:6c:
ac:78:2e:57:af:0d:b8:d4:34:95:9c:c3:56:d9:7e:db:09:74:
a8:a6:85:66:38:c2:90:0b:f0:e2:ea:ba:43:0d:e3:32:ef:6a:
24:ab:c6:4f:47:1d:b0:ab:d6:73:e9:d4:33:ef:67:da:79:3d:
27:b5:42:d9:13:04:f3:91:d0:4a:23:13:9a:0a:5e:65:b2:df:
3f:69:14:f3:b0:8d:10:81:3e:d4:4e:2b:59:ed:19:cc:a3:37:
30:84:8a:cd:60:6c:f6:52:b8:f4:d6:e7:13:3c:70:e1:bd:79:
1a:ba:a4:45:87:8b:26:e3:e2:f2:4a:14:81:cd:f9:9d:0e:26:
3d:56:53:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:26:02 2025 by rpki-client