Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.mft
File: ZlARZWRaqA3LoxWIXPN0rLbSEwU.mft (raw, json)
Hash identifier: gympzul/nm3yGdmZnzovEFBhfmxIV6UYsmi7yM6lZfk=
Subject key identifier: 13:6A:E0:C1:6E:47:97:79:11:3C:89:5C:4C:72:93:99:FD:8E:45:EF
Authority key identifier: 66:50:11:65:64:5A:A8:0D:CB:A3:15:88:5C:F3:74:AC:B6:D2:13:05
Certificate issuer: /CN=66501165645aa80dcba315885cf374acb6d21305
Certificate serial: 0199FE477139E0178620BE83B35491DBEC3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZlARZWRaqA3LoxWIXPN0rLbSEwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.mft
Manifest number: 0AF7
Signing time: Sun 19 Oct 2025 21:01:58 +0000
Manifest this update: Sun 19 Oct 2025 21:01:58 +0000
Manifest next update: Mon 20 Oct 2025 21:01:58 +0000
Files and hashes: 1: BcdGko0r03EyM3V22SJp6LUI_jg.roa (hash: 98Brzs1QQHJfWLy5qsyBt5iEFr39Rl2gjaUb1gsQClI=)
2: KnbUd5nAcObJx-mFANUZ-3dv9ZE.roa (hash: J1B+8yhPspHeU/Bm8kDFuArgnyqhlnkM76APcA7nLcw=)
3: ZlARZWRaqA3LoxWIXPN0rLbSEwU.crl (hash: LdfL7DEVe8YhOJn7n44OV2gyG9DDd3QuumiCI1nzho8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZlARZWRaqA3LoxWIXPN0rLbSEwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:47:71:39:e0:17:86:20:be:83:b3:54:91:db:ec:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66501165645aa80dcba315885cf374acb6d21305
Validity
Not Before: Oct 19 21:01:58 2025 GMT
Not After : Oct 20 21:01:58 2025 GMT
Subject: CN=136ae0c16e479779113c895c4c729399fd8e45ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:2d:2b:bc:48:ea:6c:3f:59:96:8f:cb:fa:46:
5f:fd:71:d5:80:f6:f8:30:25:a3:cd:2b:bb:48:35:
01:c0:f0:3b:74:8a:76:e9:c4:18:74:84:11:c9:d6:
86:3d:c7:2c:ac:6e:ba:6b:b8:5a:dd:3e:10:43:d3:
81:2d:af:7e:5d:9c:89:01:8e:ac:f6:98:82:7c:f7:
e0:5e:94:04:0d:97:6a:a4:4a:63:e8:5f:bb:c3:06:
68:78:1f:60:04:46:a9:83:d8:0a:51:6e:ec:4b:59:
be:14:24:63:b0:5c:fe:c2:9b:33:d1:b8:23:45:7d:
e8:87:0e:be:5b:4c:d0:1b:72:84:97:2e:ff:0f:db:
52:e7:8b:0f:e7:c8:24:92:1c:a2:4a:d1:c4:97:f3:
8c:a1:8b:6b:b9:b0:d3:f5:84:19:a7:31:c6:79:7f:
c7:45:0b:6b:6c:7f:5e:df:3c:67:e6:f4:02:32:29:
cc:6a:06:e1:7b:f0:3b:05:62:08:96:c0:87:bb:49:
6d:d9:12:4f:65:f0:56:a9:cc:4e:62:1b:5a:fc:96:
52:b6:79:cd:b9:48:52:ef:a0:10:0a:a1:0e:de:e6:
99:0b:d1:e0:25:01:b6:56:3d:e9:8c:4f:c4:4b:7e:
a6:e6:8a:a6:82:44:36:27:40:99:84:4c:a1:7c:02:
a9:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:6A:E0:C1:6E:47:97:79:11:3C:89:5C:4C:72:93:99:FD:8E:45:EF
X509v3 Authority Key Identifier:
keyid:66:50:11:65:64:5A:A8:0D:CB:A3:15:88:5C:F3:74:AC:B6:D2:13:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZlARZWRaqA3LoxWIXPN0rLbSEwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:28:a2:de:8a:9f:c4:5a:0d:0e:d0:70:51:ec:75:c2:28:69:
93:3e:70:a0:21:cd:cc:56:94:48:74:6f:dd:85:1a:8d:95:df:
bd:29:4f:69:8f:df:0a:d1:ba:a5:6f:18:74:ba:09:d4:97:3d:
ec:f6:df:e2:47:f5:d5:3e:80:cf:b7:df:af:e6:df:81:db:80:
31:30:e0:13:2c:3f:63:97:5c:3c:81:36:33:bb:e0:c3:6b:f3:
4f:6c:e0:e4:e1:4e:5f:17:2f:f5:03:24:29:cc:90:22:94:fb:
a5:a0:f4:4e:d7:e2:a0:75:3c:48:a4:ef:1e:14:74:44:33:fa:
6b:1b:b5:49:13:80:3c:a9:dd:e6:62:e3:64:56:a1:be:bc:14:
ef:43:87:17:05:46:b9:db:a2:ac:2e:8d:cc:3c:fc:39:90:03:
6c:10:4d:34:fe:a6:a6:99:cc:8d:99:7a:ba:ed:a7:29:c4:11:
63:f4:e4:59:8f:30:91:48:5f:3a:f6:ae:ee:8c:64:ef:cb:9a:
18:de:2b:e8:47:30:f4:b1:00:84:ac:7c:eb:6b:07:be:74:2a:
c2:24:47:ba:1c:f7:bd:ef:78:6a:3e:82:78:38:b1:84:72:f0:
30:96:b2:f7:40:45:76:d6:7c:d0:8f:fb:f9:5b:2e:f3:67:ac:
f9:c0:41:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:18:56 2025 by rpki-client