Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/099aeb-c713-42f8-91d6-38447855d669/1/ZPR8mEQPEDglyOpQdCmLGMwRPiA.mft
File: ZPR8mEQPEDglyOpQdCmLGMwRPiA.mft (raw, json)
Hash identifier: MGYE3G/pfNm+3iQlK1GRlrdlJl0m2gJT97lgQuFedxs=
Subject key identifier: 76:73:60:CE:10:E2:02:49:CE:CE:E7:67:A2:60:46:BB:EA:8C:32:14
Authority key identifier: 64:F4:7C:98:44:0F:10:38:25:C8:EA:50:74:29:8B:18:CC:11:3E:20
Certificate issuer: /CN=64f47c98440f103825c8ea5074298b18cc113e20
Certificate serial: 0199FCFD941D1DBE2CBD90F4D91F2DBE4D86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZPR8mEQPEDglyOpQdCmLGMwRPiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/099aeb-c713-42f8-91d6-38447855d669/1/ZPR8mEQPEDglyOpQdCmLGMwRPiA.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 15:01:40 +0000
Manifest this update: Sun 19 Oct 2025 15:01:40 +0000
Manifest next update: Mon 20 Oct 2025 15:01:40 +0000
Files and hashes: 1: ZPR8mEQPEDglyOpQdCmLGMwRPiA.crl (hash: BcAfT/DwXosg6BREXFehLIzfIoTXRzdZoCjOuWDp3AM=)
2: dTuqgfHkWKRx6zDRFyr7wfbH78A.roa (hash: 2z0kuCT+rZ4YZMUscZu87PyQoyge5s4ineDLZLosNXs=)
3: ev4qAZxPyDVe1fzvmsra_eujOoU.roa (hash: HFLW2F6W7JxQUwoPI2JmRMt/NzyrebxUZlSAcm1ib6I=)
4: fIP9DV3xwP6qq9iBmxJ7rd6ytwk.roa (hash: FiX7MCMvjPDZE/cImOvH2wlf9CnqJcDrYSZ+kARwu7c=)
5: pERg8oiWPMLUHsmGEshAuW_aqRs.roa (hash: zmESXdehojS6eaz2GF04+HNwgLED8OdvpzfNZhfer0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/099aeb-c713-42f8-91d6-38447855d669/1/ZPR8mEQPEDglyOpQdCmLGMwRPiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/099aeb-c713-42f8-91d6-38447855d669/1/ZPR8mEQPEDglyOpQdCmLGMwRPiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZPR8mEQPEDglyOpQdCmLGMwRPiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:94:1d:1d:be:2c:bd:90:f4:d9:1f:2d:be:4d:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64f47c98440f103825c8ea5074298b18cc113e20
Validity
Not Before: Oct 19 15:01:40 2025 GMT
Not After : Oct 20 15:01:40 2025 GMT
Subject: CN=767360ce10e20249cecee767a26046bbea8c3214
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:0c:63:10:45:1f:13:d7:48:85:bb:cb:59:ce:
77:e8:83:e3:66:82:55:b7:09:64:64:71:4a:7c:27:
e0:d2:be:67:86:cd:77:ae:af:d8:40:67:e8:9c:51:
2b:b9:b3:b0:d3:f3:16:1c:13:da:f6:17:fe:53:c2:
02:9a:51:89:1b:68:b1:8c:8d:e9:76:03:d8:b8:dc:
f2:31:38:86:c5:0d:d4:f8:3f:4f:55:29:70:4e:31:
c8:ce:28:f2:f0:42:50:55:20:fe:59:87:29:8b:6d:
2b:ef:34:5c:88:d7:1c:48:63:c8:31:1b:50:bb:dc:
3b:c7:5a:39:ab:3f:e0:7c:ae:74:da:9c:51:89:fc:
8c:f1:f6:5b:bc:de:27:ff:ea:df:88:f6:db:5f:7e:
40:cd:eb:da:43:b6:25:d9:1a:30:01:8f:83:c0:f6:
83:5f:23:3e:36:d1:ba:1c:64:f0:5b:56:34:e4:9c:
80:55:cd:ed:12:4a:01:bd:38:80:41:6c:29:15:3e:
38:c6:75:c6:51:82:26:0f:d2:29:7d:57:63:f6:72:
84:b4:46:0a:00:b4:d5:23:f8:3c:c5:ad:5f:21:60:
0b:5a:8f:a7:a6:25:eb:fb:31:ba:98:e9:af:f4:9c:
15:e5:50:f2:95:e3:da:54:a8:b3:06:ad:83:f2:8a:
31:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:73:60:CE:10:E2:02:49:CE:CE:E7:67:A2:60:46:BB:EA:8C:32:14
X509v3 Authority Key Identifier:
keyid:64:F4:7C:98:44:0F:10:38:25:C8:EA:50:74:29:8B:18:CC:11:3E:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZPR8mEQPEDglyOpQdCmLGMwRPiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/099aeb-c713-42f8-91d6-38447855d669/1/ZPR8mEQPEDglyOpQdCmLGMwRPiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/099aeb-c713-42f8-91d6-38447855d669/1/ZPR8mEQPEDglyOpQdCmLGMwRPiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:14:97:94:8d:95:ce:05:e1:1c:45:6a:cb:78:cf:a9:9e:09:
ac:a4:d0:b8:94:d8:96:be:c6:d7:c4:36:05:93:a7:b1:63:c9:
13:7e:f2:c9:d6:3f:eb:20:56:ae:1a:4b:b0:ff:d1:a6:d5:bb:
84:bb:19:05:a5:de:ba:87:04:73:a5:a6:9f:34:fa:9f:44:b9:
a1:39:f7:da:9c:cd:81:fe:d9:42:13:48:1a:b9:23:f8:7e:04:
bf:ec:59:24:ed:ef:0e:db:01:74:26:d6:13:17:b7:26:64:29:
ee:e5:2a:1f:4f:e6:9b:e6:2d:e4:c0:cc:9b:3b:ab:58:f6:08:
d3:c7:46:ec:f6:9d:b9:be:4f:37:2e:4e:1c:51:5c:44:67:df:
b4:9a:f2:9e:a3:d2:77:fa:35:dd:81:ed:6a:24:f3:54:91:7a:
97:55:4c:e8:b5:d6:75:d9:d1:91:3e:ba:b5:55:35:e2:5d:02:
52:63:34:7f:81:e5:12:31:72:da:57:98:60:09:65:86:85:e3:
ec:a4:16:fa:8e:13:d9:45:60:11:3b:98:5c:01:e0:67:0c:82:
cf:cb:73:df:ef:ba:8d:c8:e7:4d:23:32:72:41:68:da:d1:8e:
93:5d:29:e9:31:12:7c:37:18:cb:7a:ee:d1:d3:ae:35:6e:a2:
49:18:b2:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:02:00 2025 by rpki-client