Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/529be9-1fcf-46a3-b13d-c8acb7173b62/1/zBEL75xblqgxx6v5VZJ0S7rx7mc.mft
File: zBEL75xblqgxx6v5VZJ0S7rx7mc.mft (raw, json)
Hash identifier: FaqrGB66FjoBoNWFTS8GBMuiNN5iTWNfH4Eblmw+nuA=
Subject key identifier: 07:BF:64:2B:BA:25:82:5B:25:B2:F2:0C:15:83:CB:CA:19:89:E8:1F
Authority key identifier: CC:11:0B:EF:9C:5B:96:A8:31:C7:AB:F9:55:92:74:4B:BA:F1:EE:67
Certificate issuer: /CN=cc110bef9c5b96a831c7abf95592744bbaf1ee67
Certificate serial: 0199FD343E0C73B9EB89E7A21651DC979E3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zBEL75xblqgxx6v5VZJ0S7rx7mc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/529be9-1fcf-46a3-b13d-c8acb7173b62/1/zBEL75xblqgxx6v5VZJ0S7rx7mc.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 16:01:23 +0000
Manifest this update: Sun 19 Oct 2025 16:01:23 +0000
Manifest next update: Mon 20 Oct 2025 16:01:23 +0000
Files and hashes: 1: vb1dDyyTWxxLlSgfwG-f2LoghnM.roa (hash: /aBDSc4vT/oTqhg2Zpyh6DEtnkQwwXOnttzniIq6fsw=)
2: zBEL75xblqgxx6v5VZJ0S7rx7mc.crl (hash: tn3DF1matR9wDDT0UmAx+UhDWoOlddZa3q9gBFAkYkc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/529be9-1fcf-46a3-b13d-c8acb7173b62/1/zBEL75xblqgxx6v5VZJ0S7rx7mc.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/529be9-1fcf-46a3-b13d-c8acb7173b62/1/zBEL75xblqgxx6v5VZJ0S7rx7mc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zBEL75xblqgxx6v5VZJ0S7rx7mc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 16:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:3e:0c:73:b9:eb:89:e7:a2:16:51:dc:97:9e:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc110bef9c5b96a831c7abf95592744bbaf1ee67
Validity
Not Before: Oct 19 16:01:23 2025 GMT
Not After : Oct 20 16:01:23 2025 GMT
Subject: CN=07bf642bba25825b25b2f20c1583cbca1989e81f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:00:1d:40:b5:f6:cc:70:2b:1e:0f:10:0b:71:
1f:11:14:ed:18:92:fe:95:b1:b7:5e:55:d9:7e:3b:
4f:c8:6d:3a:7d:f3:b6:32:ad:f6:c4:6e:58:ba:84:
8c:c6:45:47:4e:b4:75:9f:86:2e:db:75:22:0f:f1:
14:67:b7:59:9f:99:b2:fa:46:81:8d:f9:6a:08:8e:
dd:72:4b:cc:a1:6b:a8:bb:ec:b8:c8:12:bf:c5:5b:
79:c8:47:f4:d3:81:ab:5a:80:4d:0b:b5:44:c2:48:
56:f7:ec:3e:3b:7f:f2:61:a8:7b:85:94:97:20:d8:
09:77:e8:9d:e5:9f:5f:43:55:77:5a:c3:83:3e:fd:
2a:25:91:ea:2e:95:e8:43:c3:d0:35:75:d2:b6:57:
e9:c0:8a:2b:d5:12:ff:31:93:1e:d2:5c:70:c3:4c:
87:fa:64:81:b1:9e:99:4c:4e:8b:90:22:78:3f:10:
19:ae:83:f8:f7:2c:e1:a7:3f:3a:ef:56:99:8a:27:
5c:9d:4f:58:4b:97:dd:42:23:af:77:72:4e:52:e0:
45:85:91:27:ef:1a:9c:6e:26:34:f3:31:0f:17:23:
31:6b:02:8d:da:eb:78:11:91:37:0e:78:3d:fd:9a:
bb:c7:33:7c:1f:3e:8a:ed:72:66:1a:54:9c:1d:e6:
30:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:BF:64:2B:BA:25:82:5B:25:B2:F2:0C:15:83:CB:CA:19:89:E8:1F
X509v3 Authority Key Identifier:
keyid:CC:11:0B:EF:9C:5B:96:A8:31:C7:AB:F9:55:92:74:4B:BA:F1:EE:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zBEL75xblqgxx6v5VZJ0S7rx7mc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/529be9-1fcf-46a3-b13d-c8acb7173b62/1/zBEL75xblqgxx6v5VZJ0S7rx7mc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/529be9-1fcf-46a3-b13d-c8acb7173b62/1/zBEL75xblqgxx6v5VZJ0S7rx7mc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:13:97:a8:cf:e2:8d:a5:31:bd:c7:91:9b:fb:47:ba:7e:87:
ea:02:7d:36:60:57:dd:fd:be:51:e8:59:2a:ce:c1:97:8c:a5:
51:86:d3:ce:87:a6:56:ed:ca:75:f8:0d:ba:4e:4d:61:5f:87:
84:c5:e4:b2:f2:02:33:a0:c1:ee:5e:de:84:fa:a3:36:8e:c6:
17:a9:b0:c7:48:a9:23:45:da:f6:33:35:7b:9c:44:92:c5:64:
2b:41:bd:24:8e:ad:ff:3f:49:a0:6d:16:82:07:41:fb:6d:df:
27:fd:10:6d:44:36:a8:03:17:ac:3f:19:af:26:ed:23:8d:c9:
ef:24:1d:30:ec:c8:1b:81:1d:ce:0a:33:2b:b8:8a:57:d8:e8:
80:8f:97:66:e0:60:8a:5a:1e:46:4a:f9:07:d3:e1:9f:31:73:
31:d0:40:d0:74:23:51:93:0f:0c:79:eb:0c:f0:3f:18:4e:d0:
6f:a5:65:ee:22:8b:f6:d8:16:7e:80:f0:06:d3:ed:3a:0a:c1:
12:ef:24:0d:c5:14:5e:1f:17:33:5b:e1:36:de:0c:e3:fe:e3:
a1:47:6e:d2:6e:95:e3:93:51:af:a2:f6:77:7d:5e:c1:7e:96:
aa:ee:2b:7b:a7:a8:5f:5d:f5:e6:26:1d:ac:58:d2:ad:e4:1b:
e3:ca:aa:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:07:34 2025 by rpki-client