Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.mft
File: ZQYJZpX35mELGbCOHX_ZxNkUpPA.mft (raw, json)
Hash identifier: F3MAlEYX4G6i/PmRhKAewX5jv6YYh6fQA3myck72iIM=
Subject key identifier: AB:0A:9B:BA:6A:94:33:9B:62:B6:C9:BF:F6:90:05:EA:59:68:D7:12
Authority key identifier: 65:06:09:66:95:F7:E6:61:0B:19:B0:8E:1D:7F:D9:C4:D9:14:A4:F0
Certificate issuer: /CN=6506096695f7e6610b19b08e1d7fd9c4d914a4f0
Certificate serial: 0199FC58F8D927A6A52468AF18D772C866C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZQYJZpX35mELGbCOHX_ZxNkUpPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 12:01:53 +0000
Manifest this update: Sun 19 Oct 2025 12:01:53 +0000
Manifest next update: Mon 20 Oct 2025 12:01:53 +0000
Files and hashes: 1: 4GHtaL2ENr8x0dHCgzjR-2oufsc.roa (hash: SkJfNfL4xk1uCL5vaUVq92gTeEiReavJzDd3NtKKtoQ=)
2: P4Bbz81DKVf659V7Pusw5yxnCg8.roa (hash: 6mtNya9D4eJ+7094qYmfrW/oPVu6b8pgbmkAvNwldHc=)
3: ZQYJZpX35mELGbCOHX_ZxNkUpPA.crl (hash: XE3YyytE/kBpzdYZ6PW4y++aEHQaat55QG+wNjGPk14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZQYJZpX35mELGbCOHX_ZxNkUpPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:f8:d9:27:a6:a5:24:68:af:18:d7:72:c8:66:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6506096695f7e6610b19b08e1d7fd9c4d914a4f0
Validity
Not Before: Oct 19 12:01:53 2025 GMT
Not After : Oct 20 12:01:53 2025 GMT
Subject: CN=ab0a9bba6a94339b62b6c9bff69005ea5968d712
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f3:cd:dd:4d:f6:ee:a1:43:f0:52:7f:ae:6d:
b9:36:1a:39:54:24:6c:3d:40:b0:34:77:62:25:d2:
34:57:f8:d0:46:e1:3b:ae:22:ed:df:fd:30:63:c5:
1b:3e:b3:52:cf:3f:96:bc:72:95:42:71:0b:7c:91:
be:6f:bb:6b:be:b4:f5:e0:8f:46:ae:c4:6d:48:56:
e3:ef:9e:b5:5f:73:50:9f:89:68:31:0c:82:94:78:
3a:37:70:5b:05:e2:5e:01:a3:13:44:aa:c9:d6:e4:
62:31:a4:91:4d:1b:3c:b0:2a:69:38:89:3e:ce:90:
7f:80:95:46:10:d3:f9:c4:57:4c:41:fe:47:c3:54:
87:d0:18:b4:d8:26:b4:54:2e:a8:a7:fa:10:35:6e:
68:00:c6:ba:ef:05:62:df:46:bb:7c:50:f8:68:78:
a7:f8:f0:54:f4:73:4d:c7:fe:55:21:7d:bc:cb:71:
de:51:7b:8f:4c:63:bf:a6:30:ac:59:9d:cb:bc:5b:
29:8e:64:69:5c:d1:12:fa:2f:fd:9b:d4:02:fc:b2:
95:90:46:c6:ba:3d:6a:ab:66:03:bd:2c:ac:98:1c:
83:2c:e7:a1:0b:80:ad:d8:08:7c:f4:1a:58:e4:40:
a5:95:15:4c:a8:02:3e:52:01:aa:a9:6d:5f:a5:a0:
93:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:0A:9B:BA:6A:94:33:9B:62:B6:C9:BF:F6:90:05:EA:59:68:D7:12
X509v3 Authority Key Identifier:
keyid:65:06:09:66:95:F7:E6:61:0B:19:B0:8E:1D:7F:D9:C4:D9:14:A4:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZQYJZpX35mELGbCOHX_ZxNkUpPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:4e:16:78:d4:62:a6:76:01:57:96:86:ad:36:2b:a3:c1:ee:
1c:0c:e4:96:96:f3:84:94:05:7e:28:78:ac:ca:db:56:49:cd:
57:43:8b:3a:f6:d3:19:15:60:b1:22:9e:86:ba:c3:24:62:75:
6e:2f:73:20:d4:8b:6d:3c:f3:eb:fa:da:d7:b3:90:31:86:a6:
f6:2f:9d:e6:2c:bc:49:37:62:82:f3:bb:ab:c6:b1:6d:b1:0d:
45:98:c0:f6:45:d5:ac:35:70:4c:6c:49:4e:b4:68:95:e9:c3:
c6:f5:6b:04:47:63:56:08:6e:4a:fa:6f:99:9f:0d:7e:19:fa:
1c:5e:70:1c:04:e3:d9:45:3a:7d:48:3b:a7:8e:4c:95:3f:a6:
f9:b7:aa:69:d0:e3:9d:2a:a1:0b:43:6c:d2:aa:0b:73:6a:e8:
0b:2a:08:ed:16:d5:d7:ec:28:dc:fd:6c:9c:9f:b5:90:e9:c7:
b8:73:ef:a0:da:4b:f3:3d:0f:7a:d9:97:f7:bc:c3:35:5e:0d:
76:11:9f:58:6f:b7:bc:7d:b2:b4:59:cc:f7:24:fe:98:56:bd:
16:84:41:ef:a8:50:42:75:07:93:3a:f0:5e:07:a8:f6:bb:85:
0e:0d:ef:37:fb:ce:01:3f:38:ec:4f:85:b9:7a:0e:e8:0a:15:
98:06:00:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:02:04 2025 by rpki-client