
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/2a07cb-f6c0-49ba-a7d1-1b01453347da/1/ZwPyWNR77MLLS0_FcrIpsuZLa5I.mft
File: ZwPyWNR77MLLS0_FcrIpsuZLa5I.mft (raw, json)
Hash identifier: +NfZ0TVcl/vfAZU/+Gkz0lgxBWVu4Z/yhClVBP+Kxpw=
Subject key identifier: 51:0D:93:8C:8E:A1:38:FD:29:FC:33:9F:01:2A:58:A9:D1:AC:59:21
Authority key identifier: 67:03:F2:58:D4:7B:EC:C2:CB:4B:4F:C5:72:B2:29:B2:E6:4B:6B:92
Certificate issuer: /CN=6703f258d47becc2cb4b4fc572b229b2e64b6b92
Certificate serial: 0199FAD81C3128F4CEEDDF26515301AA8369
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZwPyWNR77MLLS0_FcrIpsuZLa5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/2a07cb-f6c0-49ba-a7d1-1b01453347da/1/ZwPyWNR77MLLS0_FcrIpsuZLa5I.mft
Manifest number: 1673
Signing time: Sun 19 Oct 2025 05:01:30 +0000
Manifest this update: Sun 19 Oct 2025 05:01:30 +0000
Manifest next update: Mon 20 Oct 2025 05:01:30 +0000
Files and hashes: 1: U0b6gboi64n531Jc6zyEuav6vyg.roa (hash: PZafjNuKkOPJe0JHguIOtwXHpUoa+ViotM7w88t40Yc=)
2: ZwPyWNR77MLLS0_FcrIpsuZLa5I.crl (hash: v3IkrDOpS3reDP+b+M3mT4Bi+4+UUAuDI/IKddU9fz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/2a07cb-f6c0-49ba-a7d1-1b01453347da/1/ZwPyWNR77MLLS0_FcrIpsuZLa5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/2a07cb-f6c0-49ba-a7d1-1b01453347da/1/ZwPyWNR77MLLS0_FcrIpsuZLa5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZwPyWNR77MLLS0_FcrIpsuZLa5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:1c:31:28:f4:ce:ed:df:26:51:53:01:aa:83:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6703f258d47becc2cb4b4fc572b229b2e64b6b92
Validity
Not Before: Oct 19 05:01:30 2025 GMT
Not After : Oct 20 05:01:30 2025 GMT
Subject: CN=510d938c8ea138fd29fc339f012a58a9d1ac5921
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:9b:e7:b0:25:5a:ce:e0:a8:b4:c0:42:9e:6c:
e7:33:de:b8:b3:6a:02:c2:2a:1f:4f:a5:81:f3:85:
ad:7e:01:9d:86:98:40:ee:01:53:fc:08:d1:6b:b2:
2b:09:95:a3:3f:1a:a7:84:da:38:c3:c8:b1:12:0b:
fb:0e:78:eb:c2:7c:c2:62:9f:92:08:b9:58:1c:e1:
6c:8f:fc:72:e1:c9:59:92:f8:4d:dd:89:be:f5:1a:
d3:73:6f:4c:fb:3b:2b:68:0a:75:10:83:be:42:5c:
d9:cd:4a:b4:4d:60:2f:92:a4:f7:53:7b:9d:64:7e:
e2:93:f9:fc:5d:27:88:3c:3c:48:a1:26:b5:2f:2a:
05:1e:2a:e9:ce:3e:d3:f5:f2:56:37:d1:3a:7f:f5:
c2:e7:f2:77:0c:70:d7:58:b7:1d:bc:2a:6a:c5:9e:
2c:b8:47:79:1c:6a:5d:48:88:87:94:c6:2b:e3:47:
be:24:ae:5e:64:fb:88:1b:b0:85:6c:ae:93:89:04:
d5:d9:54:e4:e9:7a:a8:2d:4d:75:6d:9e:a8:79:42:
45:e5:19:4d:54:ac:07:c8:92:65:68:04:5b:43:c7:
c1:9a:1d:73:e2:68:15:45:85:15:ab:c8:a5:be:b7:
a3:a4:a3:42:df:5a:52:e2:87:c5:86:b1:e5:77:00:
a8:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:0D:93:8C:8E:A1:38:FD:29:FC:33:9F:01:2A:58:A9:D1:AC:59:21
X509v3 Authority Key Identifier:
keyid:67:03:F2:58:D4:7B:EC:C2:CB:4B:4F:C5:72:B2:29:B2:E6:4B:6B:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZwPyWNR77MLLS0_FcrIpsuZLa5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2a07cb-f6c0-49ba-a7d1-1b01453347da/1/ZwPyWNR77MLLS0_FcrIpsuZLa5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2a07cb-f6c0-49ba-a7d1-1b01453347da/1/ZwPyWNR77MLLS0_FcrIpsuZLa5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:fe:98:da:af:89:f2:f0:89:60:da:60:a0:01:dc:b8:1c:38:
ba:14:84:f7:48:23:6f:16:3c:37:ca:ef:11:ec:5d:15:f3:c0:
64:7a:33:ed:c4:29:1b:ac:58:55:74:d6:a2:51:1b:15:96:3d:
b1:71:e4:a5:d2:ab:23:b3:3b:e1:64:cd:32:4a:a1:38:4d:79:
a8:58:99:19:0e:65:12:ec:8b:c4:6d:c1:99:bc:3a:de:f6:e6:
6a:28:a3:82:c8:92:ce:c7:7b:ca:65:00:21:f0:a7:0e:f8:b2:
e1:99:d1:50:53:e7:2d:14:b0:de:3e:c8:16:3a:e2:86:6d:f4:
dc:04:4b:52:b7:3a:06:0e:a5:89:e2:2d:9f:7d:26:b2:05:71:
83:f4:4e:90:04:f4:39:a5:0c:b0:77:be:f6:07:de:fe:03:28:
22:dd:0b:93:e1:01:b2:1b:68:e3:7f:4a:37:5e:ed:ac:92:8e:
6b:2d:68:3e:4f:64:c9:41:5b:a1:f2:de:96:44:13:37:e9:7d:
ae:17:57:06:e1:e2:9d:d0:3f:a1:20:06:0b:08:27:a2:66:6c:
6f:1f:3e:87:7c:9d:b0:5c:b0:37:e8:60:56:a2:31:29:49:82:
07:08:f5:6e:62:3a:2e:57:9f:f9:0b:71:f4:8c:c3:d3:8c:18:
b6:b5:85:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:14:13 2025 by rpki-client