Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.mft
File: ZOdVMpKvWVQm7h19yRmiEEiUdSs.mft (raw, json)
Hash identifier: e+1XqLr+ySDiJhWrqs2UU3+hW8nH7JNedBqNGmthVNc=
Subject key identifier: 42:63:00:E9:EB:48:0B:B1:D4:81:AF:42:58:70:40:E6:9B:CC:62:6A
Authority key identifier: 64:E7:55:32:92:AF:59:54:26:EE:1D:7D:C9:19:A2:10:48:94:75:2B
Certificate issuer: /CN=64e7553292af595426ee1d7dc919a2104894752b
Certificate serial: 0199FDD9143CA8ACB1987EEE87D7823B01AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZOdVMpKvWVQm7h19yRmiEEiUdSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 19:01:26 +0000
Manifest this update: Sun 19 Oct 2025 19:01:26 +0000
Manifest next update: Mon 20 Oct 2025 19:01:26 +0000
Files and hashes: 1: 2lhRfHkMgHjBgOEI871xwfstUps.roa (hash: pS6P1vzgUypkZeUsuXFw4LKxiNYTX5RfnQUo/ctpKhE=)
2: ZOdVMpKvWVQm7h19yRmiEEiUdSs.crl (hash: p/Wy9KjHJeEHbZFwOr3lSlTnvKoT3k+4jsEhEM+b5FM=)
3: uZvIw4DMtYOiY7JlOgb63vTUcZI.roa (hash: g2eHsXH9Y/MXPOSVAzGV6O9aHOUSDc6gHQknS8yIWx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZOdVMpKvWVQm7h19yRmiEEiUdSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:14:3c:a8:ac:b1:98:7e:ee:87:d7:82:3b:01:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64e7553292af595426ee1d7dc919a2104894752b
Validity
Not Before: Oct 19 19:01:26 2025 GMT
Not After : Oct 20 19:01:26 2025 GMT
Subject: CN=426300e9eb480bb1d481af42587040e69bcc626a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:a8:a9:f2:52:fe:ab:12:fa:c0:6f:e2:ea:da:
a4:54:fa:91:fb:e6:49:fa:4a:b6:da:07:f1:8d:59:
d2:3e:00:05:09:4b:49:fd:45:be:d2:5f:fb:60:e6:
78:09:db:c3:1a:be:00:6f:c3:1a:c7:90:8f:7e:95:
63:bb:cd:10:24:0c:93:d4:0f:8e:60:97:c8:70:20:
2d:9c:83:82:b5:bb:4f:7e:97:4a:ff:e5:24:79:8e:
71:93:6a:39:bf:e9:9e:d4:15:0f:b2:68:0d:49:0c:
70:0f:8d:3d:a1:fc:d7:a3:d3:95:b2:cd:43:57:6f:
2b:29:f8:b6:50:14:51:83:0f:45:0b:c1:10:40:9c:
1a:16:3e:4f:cf:77:93:23:4c:6b:eb:7f:49:7b:2b:
7d:11:47:56:f1:a2:79:9d:a6:c9:30:a5:8b:17:0d:
8b:fe:32:02:0c:8e:41:c7:cc:93:25:5a:7c:17:c0:
1c:89:42:3a:4d:83:11:61:2e:df:7b:74:85:e2:88:
e1:6b:05:7d:4a:2e:c0:6d:23:42:57:92:a3:3d:da:
58:86:3b:13:ae:c5:4a:10:b3:c9:30:96:5c:b9:f8:
28:9e:ec:7d:dd:a1:07:fe:53:f8:31:47:90:ef:77:
65:e7:f5:ce:5f:e2:c6:a7:0a:5f:1f:a0:3d:8c:60:
65:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:63:00:E9:EB:48:0B:B1:D4:81:AF:42:58:70:40:E6:9B:CC:62:6A
X509v3 Authority Key Identifier:
keyid:64:E7:55:32:92:AF:59:54:26:EE:1D:7D:C9:19:A2:10:48:94:75:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZOdVMpKvWVQm7h19yRmiEEiUdSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:b1:55:26:f1:c5:e3:da:1f:60:c7:d0:d6:08:59:87:75:71:
10:da:8f:ff:4c:2b:75:09:32:3b:3c:0e:3b:a3:3a:63:b5:85:
66:ac:2f:46:98:7b:88:cf:47:e1:7d:0a:df:0a:70:20:a9:c3:
04:08:74:be:58:ef:78:0f:18:c1:52:21:5f:ae:c7:0a:f5:b3:
25:cd:5a:8c:fd:73:d5:77:83:55:55:eb:43:bd:3f:fd:6b:47:
6f:a2:c7:ef:dc:ef:b6:ea:90:2c:31:fd:92:98:a0:ce:0c:46:
f5:a8:8b:66:d7:f7:4b:ab:f0:fa:5e:d4:0e:41:c7:c9:bc:70:
a3:fa:bb:ff:96:84:a8:54:c8:ec:6b:b9:58:cb:bb:73:58:ef:
75:44:82:35:6c:26:75:2c:b6:3f:96:b9:65:64:16:93:03:80:
1f:b9:d3:ea:00:31:6d:2f:01:64:27:4f:b1:5d:2e:a0:05:9f:
95:4d:15:8c:5b:e3:41:2d:bc:0c:76:e4:d4:87:37:65:6b:41:
e9:ab:00:c4:22:b3:08:12:ed:cc:60:2c:5d:9d:af:13:34:70:
fd:c9:d1:88:cf:cd:0e:3e:24:5b:d7:69:fc:ee:3b:95:09:10:
10:82:bd:c9:88:48:17:dc:e9:95:1c:c0:8c:94:d9:b8:cf:25:
6e:55:54:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:26:50 2025 by rpki-client