Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/07bf5b-0340-434e-a444-f0761e29e6c4/1/Zux4mXbTtYQBbKwZ80u-3pZs0jA.mft
File: Zux4mXbTtYQBbKwZ80u-3pZs0jA.mft (raw, json)
Hash identifier: WRFCo1scHeRiWPQY6NB9XnufvxWmpdGb4VGk6Y0+UEQ=
Subject key identifier: AE:3C:5C:2E:63:E3:C1:EA:B2:1E:1B:A9:61:14:85:1C:74:47:17:EA
Authority key identifier: 66:EC:78:99:76:D3:B5:84:01:6C:AC:19:F3:4B:BE:DE:96:6C:D2:30
Certificate issuer: /CN=66ec789976d3b584016cac19f34bbede966cd230
Certificate serial: 0199FC58C0CBF5C4A99F5CCB69BC7812D2A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zux4mXbTtYQBbKwZ80u-3pZs0jA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/07bf5b-0340-434e-a444-f0761e29e6c4/1/Zux4mXbTtYQBbKwZ80u-3pZs0jA.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 12:01:38 +0000
Manifest this update: Sun 19 Oct 2025 12:01:38 +0000
Manifest next update: Mon 20 Oct 2025 12:01:38 +0000
Files and hashes: 1: 1KzANFt0aPj0q7oH7exbtu-amXU.roa (hash: mW2duFDxzUlFHO8La7Ej6q1lO3QaO9KQzC0XOixRqPM=)
2: Zux4mXbTtYQBbKwZ80u-3pZs0jA.crl (hash: owsSXd8FxmZtYbGjcKxytj92P/ezC7bcWxWZd+WOiIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/07bf5b-0340-434e-a444-f0761e29e6c4/1/Zux4mXbTtYQBbKwZ80u-3pZs0jA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/07bf5b-0340-434e-a444-f0761e29e6c4/1/Zux4mXbTtYQBbKwZ80u-3pZs0jA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zux4mXbTtYQBbKwZ80u-3pZs0jA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:c0:cb:f5:c4:a9:9f:5c:cb:69:bc:78:12:d2:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66ec789976d3b584016cac19f34bbede966cd230
Validity
Not Before: Oct 19 12:01:38 2025 GMT
Not After : Oct 20 12:01:38 2025 GMT
Subject: CN=ae3c5c2e63e3c1eab21e1ba96114851c744717ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:71:de:fa:15:49:f0:71:da:04:7e:35:cf:2c:
5e:87:da:16:b4:a6:22:65:14:19:68:2d:36:db:61:
9f:a8:0c:bb:00:4b:6f:5d:8a:a9:b4:a5:8a:60:f7:
e6:01:ad:6a:20:b6:31:4e:3c:88:96:3e:31:5e:89:
c6:69:9e:e9:b1:30:bc:8d:c7:09:c3:a4:4f:1e:39:
74:d0:b1:dd:2a:0d:92:16:69:70:17:16:3f:6d:2f:
c6:3b:5e:2f:e6:72:a7:ed:a2:16:1d:3e:cf:27:95:
da:0e:24:8c:c9:16:4c:c8:d5:27:cd:2b:be:63:92:
db:be:65:7c:52:9d:24:5a:a6:25:2f:9e:5d:38:b2:
1a:e9:03:6e:a4:6a:95:99:03:e9:2d:57:b9:f7:ed:
68:f2:e9:c8:e5:ad:2a:1d:f3:2c:4b:50:91:55:6d:
71:a1:31:bd:0b:f0:88:5e:fa:32:d0:51:69:b9:2c:
c3:6a:0c:2c:b5:60:f6:d9:57:bd:79:df:71:8a:1c:
bc:79:c7:0b:04:47:2a:d6:1f:da:8f:fe:42:88:04:
3d:17:46:3e:97:55:c9:75:00:b7:8b:58:65:b9:83:
e5:16:cd:fa:f8:76:84:16:d3:a9:9a:8c:d2:71:5c:
13:7b:d6:51:45:06:9f:36:4e:e2:d4:27:5a:6b:03:
b9:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:3C:5C:2E:63:E3:C1:EA:B2:1E:1B:A9:61:14:85:1C:74:47:17:EA
X509v3 Authority Key Identifier:
keyid:66:EC:78:99:76:D3:B5:84:01:6C:AC:19:F3:4B:BE:DE:96:6C:D2:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zux4mXbTtYQBbKwZ80u-3pZs0jA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/07bf5b-0340-434e-a444-f0761e29e6c4/1/Zux4mXbTtYQBbKwZ80u-3pZs0jA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/07bf5b-0340-434e-a444-f0761e29e6c4/1/Zux4mXbTtYQBbKwZ80u-3pZs0jA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:bb:e3:60:8b:c9:ca:ab:0e:3a:4e:60:1b:22:b4:07:49:f9:
38:04:cb:c5:c7:87:96:b9:94:56:f6:d7:c5:9a:e0:dc:7f:ae:
25:c5:43:f8:4f:c9:b0:f4:fe:09:75:43:b7:82:14:8e:8e:af:
3b:f4:c1:ea:ca:96:8a:40:56:f6:c5:17:7c:b3:ab:8b:d5:1e:
be:3b:07:55:52:6e:56:6f:a4:c2:a6:15:6e:a0:1a:02:c2:9b:
14:77:a9:8a:d3:e7:b9:e5:28:fb:04:08:53:d0:b9:a2:bc:fd:
f3:00:43:dd:4c:77:4a:80:a0:2f:6f:94:ba:74:11:2b:5e:3f:
59:85:b4:69:d3:25:92:9d:3d:a1:a9:8a:43:e9:39:50:ee:75:
06:cb:37:82:58:fc:b1:ff:2d:d4:8f:1b:bb:6d:e7:60:1a:34:
f1:b4:09:97:47:f0:dc:ae:f9:5e:8e:ac:f6:32:ba:5e:a4:61:
8e:82:f5:bb:6f:86:e8:59:f6:2f:e7:04:5e:e6:47:9e:3f:97:
bf:9f:a6:cb:7c:2c:e5:7e:da:d2:43:71:c8:08:6a:e5:9b:4b:
7b:d8:05:38:7a:7f:42:ab:36:56:99:4c:16:a2:e2:e1:fc:5d:
01:b3:f8:f2:33:0a:8a:01:b6:91:f9:61:68:a6:6b:20:fc:fd:
ef:ab:da:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:51:14 2025 by rpki-client