Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/ed3d4a-704f-4aa4-821f-dcd5e9478084/1/ZD2vEi46h6yqb9tiw1olKhmaWNk.mft
File: ZD2vEi46h6yqb9tiw1olKhmaWNk.mft (raw, json)
Hash identifier: zeDrMj/ayN3F4mHfi8M7aeHWiQyenshXNB0/V61leCo=
Subject key identifier: 25:EE:B6:54:D2:56:AF:66:8F:66:C1:23:B1:EF:DD:3F:C3:6C:00:F4
Authority key identifier: 64:3D:AF:12:2E:3A:87:AC:AA:6F:DB:62:C3:5A:25:2A:19:9A:58:D9
Certificate issuer: /CN=643daf122e3a87acaa6fdb62c35a252a199a58d9
Certificate serial: 0199FE7DFA188E3FCC7F84E649EC41B7CA39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZD2vEi46h6yqb9tiw1olKhmaWNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/ed3d4a-704f-4aa4-821f-dcd5e9478084/1/ZD2vEi46h6yqb9tiw1olKhmaWNk.mft
Manifest number: 0E66
Signing time: Sun 19 Oct 2025 22:01:32 +0000
Manifest this update: Sun 19 Oct 2025 22:01:32 +0000
Manifest next update: Mon 20 Oct 2025 22:01:32 +0000
Files and hashes: 1: 5y54voFpQemaWdhJdL3R6I-ZfdY.roa (hash: 0q0hdM7ItmEN9aXgu0xUxeLxjebZjyz7UrwOiAMpRFI=)
2: ZD2vEi46h6yqb9tiw1olKhmaWNk.crl (hash: hD/UcbbzkrSswQPcihufRl9PWoXgl0XuCQ4uKzFN+oI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/ed3d4a-704f-4aa4-821f-dcd5e9478084/1/ZD2vEi46h6yqb9tiw1olKhmaWNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/ed3d4a-704f-4aa4-821f-dcd5e9478084/1/ZD2vEi46h6yqb9tiw1olKhmaWNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZD2vEi46h6yqb9tiw1olKhmaWNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7d:fa:18:8e:3f:cc:7f:84:e6:49:ec:41:b7:ca:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=643daf122e3a87acaa6fdb62c35a252a199a58d9
Validity
Not Before: Oct 19 22:01:32 2025 GMT
Not After : Oct 20 22:01:32 2025 GMT
Subject: CN=25eeb654d256af668f66c123b1efdd3fc36c00f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:0b:d9:cc:9d:7b:89:87:14:6e:43:95:d6:17:
08:e6:1f:a3:06:b5:c9:3f:38:74:81:fc:95:d0:df:
2b:25:c7:bd:0b:3a:26:d8:ed:97:92:43:2d:9f:c9:
d9:f9:97:33:a8:8e:da:98:84:00:d4:6c:0c:a3:5f:
c2:f6:c4:3f:bd:4e:ea:b6:c0:9d:fa:43:1f:ab:38:
ce:34:74:03:13:26:1d:bf:5d:2e:fa:81:90:73:97:
49:c9:0e:af:b3:9c:0c:dc:ca:15:51:30:58:db:22:
1d:4c:dc:f9:78:a5:e4:e6:6a:f4:fb:8a:15:65:39:
96:24:b3:71:a1:df:de:e3:31:63:b1:53:43:d8:2c:
2f:71:ef:0d:39:4a:90:d0:72:93:6e:ae:aa:f4:eb:
e2:44:79:66:4e:9e:1d:0c:67:ff:9f:0c:30:4e:d4:
6c:4a:bf:9a:24:78:2a:6a:56:27:25:4f:c3:45:94:
bd:a0:6c:91:99:e9:66:5f:c1:f9:fd:64:85:a6:11:
a8:44:9d:d0:c5:9f:df:bf:9b:19:c9:cb:23:d5:14:
f3:67:30:1b:0a:a2:02:1c:e1:0a:33:83:ec:03:35:
8b:32:d7:63:fa:20:a1:df:72:a1:e7:74:7f:98:aa:
07:e1:ad:70:e4:4e:bf:27:f1:de:25:29:01:af:28:
e3:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:EE:B6:54:D2:56:AF:66:8F:66:C1:23:B1:EF:DD:3F:C3:6C:00:F4
X509v3 Authority Key Identifier:
keyid:64:3D:AF:12:2E:3A:87:AC:AA:6F:DB:62:C3:5A:25:2A:19:9A:58:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZD2vEi46h6yqb9tiw1olKhmaWNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/ed3d4a-704f-4aa4-821f-dcd5e9478084/1/ZD2vEi46h6yqb9tiw1olKhmaWNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/ed3d4a-704f-4aa4-821f-dcd5e9478084/1/ZD2vEi46h6yqb9tiw1olKhmaWNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:32:f5:bf:7a:0c:b4:d9:31:70:ad:9e:7b:ba:48:dc:48:38:
1d:42:e8:80:80:79:92:af:17:aa:81:0f:dd:5b:ee:b8:bb:52:
96:d0:36:57:60:8e:91:4e:90:4d:2b:c2:68:52:e9:7b:7d:1e:
1d:a4:bf:8c:0d:28:93:4f:ef:f2:a1:93:e8:1a:ee:f1:83:92:
bb:25:1f:47:68:08:37:9c:8e:20:dc:f0:1f:80:ae:2f:84:6b:
a2:de:b9:2b:6d:9a:a6:71:24:fd:89:5a:d9:df:f1:cd:b6:df:
10:a4:0c:69:da:09:f2:13:ea:b3:91:66:54:d1:fa:11:46:95:
54:df:af:0a:c0:df:58:47:d6:8d:eb:83:44:bc:28:f9:4b:7a:
7e:7d:db:d9:06:ed:46:49:6e:a0:58:56:4e:3e:95:3c:fe:b5:
70:0e:40:04:30:ae:5e:0d:72:4d:36:b0:79:2c:c0:d9:65:63:
6f:fa:68:19:f2:a6:a6:4f:07:0c:e9:92:0f:92:fe:a2:67:86:
88:db:35:dc:aa:61:bb:09:a0:0f:15:9a:68:54:c6:3d:6e:93:
1c:f1:39:f7:49:e0:28:e8:1c:54:e9:e5:c2:6f:10:ff:77:97:
17:8e:49:cc:68:fb:63:73:f8:75:e7:da:19:ee:9b:3c:6d:0c:
a9:76:74:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:04:50 2025 by rpki-client