Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/27cbd0-a7b9-45fb-9954-78d1144ad967/1/zl1FYESPeKTc3LeRoH2tIWOgjN8.mft
File: zl1FYESPeKTc3LeRoH2tIWOgjN8.mft (raw, json)
Hash identifier: RBMIbi3l9lSzCMjQ07rxb3WpnQCAu08YQJHKALKnsW4=
Subject key identifier: E6:DD:AB:BB:56:E2:4D:14:99:E1:C2:99:CB:8E:1F:19:7E:B2:94:CD
Authority key identifier: CE:5D:45:60:44:8F:78:A4:DC:DC:B7:91:A0:7D:AD:21:63:A0:8C:DF
Certificate issuer: /CN=ce5d4560448f78a4dcdcb791a07dad2163a08cdf
Certificate serial: 0199FDD986D6AC4567F8626302F628BA1662
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zl1FYESPeKTc3LeRoH2tIWOgjN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/27cbd0-a7b9-45fb-9954-78d1144ad967/1/zl1FYESPeKTc3LeRoH2tIWOgjN8.mft
Manifest number: 1676
Signing time: Sun 19 Oct 2025 19:01:55 +0000
Manifest this update: Sun 19 Oct 2025 19:01:55 +0000
Manifest next update: Mon 20 Oct 2025 19:01:55 +0000
Files and hashes: 1: DnVFEpYRkYdsvx6fTEjYM0mnXYg.roa (hash: Q/XnpIbexx4X2BOItVZgFWxgUIF3KGLUNsRlADlMLPI=)
2: zl1FYESPeKTc3LeRoH2tIWOgjN8.crl (hash: qIdQQzDtO74pxTUq9XDbwnlXiwRbBIyPKCQjVjVbCE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/27cbd0-a7b9-45fb-9954-78d1144ad967/1/zl1FYESPeKTc3LeRoH2tIWOgjN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/27cbd0-a7b9-45fb-9954-78d1144ad967/1/zl1FYESPeKTc3LeRoH2tIWOgjN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zl1FYESPeKTc3LeRoH2tIWOgjN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:86:d6:ac:45:67:f8:62:63:02:f6:28:ba:16:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce5d4560448f78a4dcdcb791a07dad2163a08cdf
Validity
Not Before: Oct 19 19:01:55 2025 GMT
Not After : Oct 20 19:01:55 2025 GMT
Subject: CN=e6ddabbb56e24d1499e1c299cb8e1f197eb294cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e0:42:a1:07:dd:8e:41:a3:0f:0b:6f:9f:28:
97:36:86:9b:d0:a6:a5:0c:04:05:ac:83:cd:21:8c:
7c:a6:a6:6d:63:2f:7e:19:b0:61:d5:fb:ec:7d:ad:
63:cd:ac:ab:00:74:e2:5d:13:4e:5d:6b:5c:88:64:
15:7a:1f:85:d6:76:9b:75:85:4a:6f:51:ed:2e:9f:
a8:a4:fc:be:b1:56:dc:a1:85:a7:87:cd:bd:56:8e:
8a:7b:a9:8a:ce:43:45:f8:99:1e:24:e9:68:ce:65:
01:5b:d5:c1:05:51:07:3b:42:47:5b:cc:a6:67:b9:
11:11:7e:c3:47:6e:9b:07:9f:64:bc:77:cd:be:31:
25:fe:2d:53:48:ba:f5:a3:c0:88:21:a5:64:c4:a4:
1e:8d:73:72:b8:0d:80:c4:df:02:22:f3:9b:e2:d8:
0d:9f:25:50:bf:3b:a3:0b:0f:18:b3:e9:08:c3:a5:
6c:6c:6a:94:ef:b3:44:5e:7b:b4:61:e5:aa:1a:7c:
74:81:ec:09:d0:18:2c:cc:b8:c3:f1:9e:76:0c:d3:
8c:75:10:eb:06:ac:3b:26:5c:60:3c:4b:14:e8:0c:
96:b1:a7:8b:a9:9e:b9:d8:95:cb:0b:6b:3d:91:cc:
b8:6f:93:36:74:ff:57:4a:4a:f4:ea:11:b2:e7:9a:
44:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:DD:AB:BB:56:E2:4D:14:99:E1:C2:99:CB:8E:1F:19:7E:B2:94:CD
X509v3 Authority Key Identifier:
keyid:CE:5D:45:60:44:8F:78:A4:DC:DC:B7:91:A0:7D:AD:21:63:A0:8C:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zl1FYESPeKTc3LeRoH2tIWOgjN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/27cbd0-a7b9-45fb-9954-78d1144ad967/1/zl1FYESPeKTc3LeRoH2tIWOgjN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/27cbd0-a7b9-45fb-9954-78d1144ad967/1/zl1FYESPeKTc3LeRoH2tIWOgjN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:c1:6a:16:c6:c7:14:cf:d7:7d:c3:8d:44:fd:50:a2:dd:00:
13:ab:1e:e3:0a:7c:41:8f:15:a3:b0:71:67:5c:1b:63:9f:04:
d4:2b:db:d4:15:b7:4a:ca:b4:2a:ee:4e:22:b4:2c:b9:9a:aa:
54:f8:7f:b9:95:ba:f1:54:20:12:db:34:e2:56:3e:6f:26:08:
e1:4e:60:0d:fe:f1:40:8f:c3:19:2d:88:32:49:a4:f2:b3:90:
48:48:3c:f7:8c:b7:b4:08:7f:9f:65:73:72:a3:b7:96:8c:d7:
f9:f7:76:bb:9e:03:b6:42:1a:16:39:1a:cf:37:c9:ee:07:e6:
56:b8:56:08:56:f5:be:94:00:34:99:7f:52:df:74:ae:7d:e3:
9d:9f:d5:54:68:4f:3f:92:2f:c6:96:de:37:ee:98:05:b1:ad:
6d:78:63:e4:09:1e:6d:96:61:9c:c0:20:91:2e:ee:f4:fe:76:
fc:28:82:b2:a1:fc:79:dc:2b:30:60:1e:a2:09:81:56:bf:dd:
a2:a4:f9:b0:1b:bd:55:e9:ed:2d:49:d5:7b:e1:53:7b:c4:d5:
3e:64:9b:b0:7f:3f:2d:58:42:65:5f:a0:e3:8f:5a:ea:30:80:
41:0b:3f:f5:a7:21:87:42:3f:5c:b4:65:73:70:53:18:de:e5:
1e:b0:c4:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:40:47 2025 by rpki-client