Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/bd56d7-3899-40e5-9612-3f28b6adbda9/1/ZWat35yg3kmm7vSYWDhPVPR6VvA.mft
File: ZWat35yg3kmm7vSYWDhPVPR6VvA.mft (raw, json)
Hash identifier: ejuRXxqQZ+CYgr3WWsx7Oj3DvBqhcDxculkZVoRGI9A=
Subject key identifier: 6B:81:55:D8:4C:7C:FA:BF:1C:BF:02:0D:7F:02:0D:AB:81:6B:BE:D6
Authority key identifier: 65:66:AD:DF:9C:A0:DE:49:A6:EE:F4:98:58:38:4F:54:F4:7A:56:F0
Certificate issuer: /CN=6566addf9ca0de49a6eef49858384f54f47a56f0
Certificate serial: 019A0147DCFD811EE4BFB988225005ECF28E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZWat35yg3kmm7vSYWDhPVPR6VvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/bd56d7-3899-40e5-9612-3f28b6adbda9/1/ZWat35yg3kmm7vSYWDhPVPR6VvA.mft
Manifest number: 16E3
Signing time: Mon 20 Oct 2025 11:01:18 +0000
Manifest this update: Mon 20 Oct 2025 11:01:18 +0000
Manifest next update: Tue 21 Oct 2025 11:01:18 +0000
Files and hashes: 1: ZWat35yg3kmm7vSYWDhPVPR6VvA.crl (hash: NHMXbISAxPuq1z1xBNduKsOfveaOK7rI9/JYIn3v7p4=)
2: d98mF8VuRmp24iJGNGtsA82Qm3k.roa (hash: St6m9PVExFvayS/533ff6DbQIFfqWRPHTLli6ct6T54=)
3: pxA2emkj1Wi4hN6RLcWYaRGwohw.roa (hash: uZbURZqzj+fL5lJVe1ufQh9sUQe5T2Re+0qL38WwpV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/bd56d7-3899-40e5-9612-3f28b6adbda9/1/ZWat35yg3kmm7vSYWDhPVPR6VvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/bd56d7-3899-40e5-9612-3f28b6adbda9/1/ZWat35yg3kmm7vSYWDhPVPR6VvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZWat35yg3kmm7vSYWDhPVPR6VvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 11:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:47:dc:fd:81:1e:e4:bf:b9:88:22:50:05:ec:f2:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6566addf9ca0de49a6eef49858384f54f47a56f0
Validity
Not Before: Oct 20 11:01:18 2025 GMT
Not After : Oct 21 11:01:18 2025 GMT
Subject: CN=6b8155d84c7cfabf1cbf020d7f020dab816bbed6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fd:09:62:71:4c:8d:a9:9a:6d:d8:e9:cf:da:
db:3b:88:ef:3c:5c:2a:31:9e:9c:b5:ad:7f:b6:a7:
6c:10:43:13:78:26:a3:45:68:44:d9:88:8a:dc:88:
7f:b9:74:41:c5:4f:ab:4e:ea:0c:eb:e2:8f:76:1f:
e5:73:46:e1:77:b2:62:ce:bc:91:df:fe:01:06:66:
8f:c8:0b:c6:1b:cd:7c:64:2d:d9:4c:8e:46:95:2d:
4a:94:1e:f2:f6:43:fb:10:68:e0:ec:57:8f:09:2f:
29:29:94:9a:b9:a3:45:de:f3:83:32:7a:89:31:1f:
63:4f:29:e8:74:71:64:83:af:34:f1:be:98:2e:d0:
a6:6d:ef:92:1a:92:95:2d:14:7e:b7:d1:b4:fb:3e:
b6:a7:de:bf:27:b7:c9:fe:fb:38:89:45:0f:56:22:
15:be:2b:91:a8:37:07:63:90:ad:a4:90:5f:c4:4e:
04:e9:bd:f1:60:56:72:2d:ff:02:af:ff:cd:59:7b:
72:eb:ea:a1:8d:fa:ae:26:09:94:6d:3b:48:2d:42:
cf:aa:79:28:21:1d:2a:df:3c:86:0b:4e:94:cc:a2:
e8:25:7f:09:a8:fe:41:4d:4c:cd:91:45:8c:97:db:
1f:a6:41:ac:52:11:86:3d:20:4d:6d:69:4a:55:9f:
df:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:81:55:D8:4C:7C:FA:BF:1C:BF:02:0D:7F:02:0D:AB:81:6B:BE:D6
X509v3 Authority Key Identifier:
keyid:65:66:AD:DF:9C:A0:DE:49:A6:EE:F4:98:58:38:4F:54:F4:7A:56:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZWat35yg3kmm7vSYWDhPVPR6VvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bd56d7-3899-40e5-9612-3f28b6adbda9/1/ZWat35yg3kmm7vSYWDhPVPR6VvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bd56d7-3899-40e5-9612-3f28b6adbda9/1/ZWat35yg3kmm7vSYWDhPVPR6VvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:27:4c:4b:d6:e9:4b:7d:87:9d:49:49:5f:66:57:e9:1e:04:
8c:ba:43:7d:09:76:0c:a6:8a:33:60:d5:25:94:20:91:1a:dc:
ac:fd:74:94:d7:7b:f4:02:3a:29:ed:7d:e4:71:64:64:10:dd:
d8:cf:c9:70:b2:70:dd:39:aa:88:ef:f7:cc:54:8b:bb:51:d7:
e2:61:71:ea:3a:1a:c6:cb:25:91:40:72:7d:09:05:1c:6f:53:
3b:34:ef:82:74:af:07:9f:6a:40:07:6a:b7:b3:b6:99:dc:8f:
b0:19:49:c4:6e:19:3c:f8:1c:d1:a6:4c:16:14:14:6a:58:8b:
03:4d:90:99:4f:0b:db:48:4c:53:a1:be:8c:8d:0a:66:74:f6:
00:f2:28:06:74:c9:c6:fa:79:35:dc:31:6b:5e:d1:bf:78:8b:
1e:16:96:49:cd:7d:ea:0e:b3:51:b4:ff:a0:2f:31:f2:2d:34:
37:3b:9d:41:55:2f:32:63:55:48:ff:e4:b9:bd:03:d5:7e:73:
c6:23:3e:79:2c:29:d8:21:60:f6:e5:99:50:00:73:5a:a5:17:
ca:60:89:4a:34:b2:35:c9:44:5c:d0:e6:d6:e8:1b:3d:45:10:
f2:08:30:e0:35:a3:d1:e9:3b:73:22:45:c0:b9:2c:fb:53:5a:
34:e6:dd:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:22:19 2025 by rpki-client