Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/9252e2-45de-4bcc-8f58-fa4117db1555/1/zCdTGtmZttWgRBt1-up9V4ZT5Co.mft
File: zCdTGtmZttWgRBt1-up9V4ZT5Co.mft (raw, json)
Hash identifier: IcjuJLX/6QpAgQR8927zsuiyAQXLhADaGymEi9uJ7lc=
Subject key identifier: C6:A3:41:E6:D7:78:D1:E5:94:43:AE:57:19:6A:9A:CB:A9:BA:55:95
Authority key identifier: CC:27:53:1A:D9:99:B6:D5:A0:44:1B:75:FA:EA:7D:57:86:53:E4:2A
Certificate issuer: /CN=cc27531ad999b6d5a0441b75faea7d578653e42a
Certificate serial: 0199FDD9B77512BC7F6F61D37C336FE42F76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zCdTGtmZttWgRBt1-up9V4ZT5Co.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/9252e2-45de-4bcc-8f58-fa4117db1555/1/zCdTGtmZttWgRBt1-up9V4ZT5Co.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 19:02:07 +0000
Manifest this update: Sun 19 Oct 2025 19:02:07 +0000
Manifest next update: Mon 20 Oct 2025 19:02:07 +0000
Files and hashes: 1: oi2OU2MII40wJvGP04NHRArOFvs.roa (hash: VTkXyNDb4jg5wGXFkKirwnltERuwe0Q4j4rmz+H0ul4=)
2: zCdTGtmZttWgRBt1-up9V4ZT5Co.crl (hash: U6qhw1clxJACsu4RsyKP886mZfRfRiBZcmnNP+0EpMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/9252e2-45de-4bcc-8f58-fa4117db1555/1/zCdTGtmZttWgRBt1-up9V4ZT5Co.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/9252e2-45de-4bcc-8f58-fa4117db1555/1/zCdTGtmZttWgRBt1-up9V4ZT5Co.mft
rsync://rpki.ripe.net/repository/DEFAULT/zCdTGtmZttWgRBt1-up9V4ZT5Co.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:b7:75:12:bc:7f:6f:61:d3:7c:33:6f:e4:2f:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc27531ad999b6d5a0441b75faea7d578653e42a
Validity
Not Before: Oct 19 19:02:07 2025 GMT
Not After : Oct 20 19:02:07 2025 GMT
Subject: CN=c6a341e6d778d1e59443ae57196a9acba9ba5595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:62:7c:34:71:05:d2:86:1d:a0:19:18:6b:ec:
0e:cb:85:fb:f0:67:1e:01:91:61:82:33:57:30:a8:
19:a1:05:a4:ba:20:df:5e:5b:4f:11:8d:96:89:c5:
58:c9:fd:b4:ca:96:32:b3:cc:2c:c5:ec:7d:b6:06:
a3:32:bf:b8:c1:00:24:53:38:2c:60:0c:ba:a6:9a:
e3:7d:2c:b8:56:3a:fd:6c:93:77:32:72:d8:99:8b:
01:d8:71:35:b4:84:38:c5:e0:fa:a6:68:35:03:68:
43:ee:43:0f:29:bc:8c:4e:d6:e7:87:09:4c:12:61:
30:d5:30:10:41:db:69:19:7f:c1:6d:7d:11:5a:47:
51:08:a1:1f:3a:a2:ad:24:df:21:8a:1c:55:3a:fa:
12:7f:25:f6:65:08:92:fe:f1:40:4a:57:30:48:80:
75:f5:4e:e0:35:2e:0d:e2:41:59:ae:27:09:88:bf:
88:ac:c6:3b:6a:af:8f:4a:d9:b1:6a:2d:59:8c:74:
ea:0e:ad:91:7d:f9:18:19:22:a8:f7:8c:50:e2:0c:
67:1e:0b:93:7f:b2:8f:93:60:bb:35:ea:1b:0e:03:
51:e6:4e:49:e1:17:39:43:f8:1f:78:13:0e:84:e1:
01:cd:38:7d:f4:80:ec:44:cf:46:bb:05:a0:06:27:
8a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:A3:41:E6:D7:78:D1:E5:94:43:AE:57:19:6A:9A:CB:A9:BA:55:95
X509v3 Authority Key Identifier:
keyid:CC:27:53:1A:D9:99:B6:D5:A0:44:1B:75:FA:EA:7D:57:86:53:E4:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zCdTGtmZttWgRBt1-up9V4ZT5Co.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/9252e2-45de-4bcc-8f58-fa4117db1555/1/zCdTGtmZttWgRBt1-up9V4ZT5Co.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/9252e2-45de-4bcc-8f58-fa4117db1555/1/zCdTGtmZttWgRBt1-up9V4ZT5Co.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:29:c4:2f:75:b7:0c:72:47:d3:db:35:4d:f2:e8:e2:a5:97:
32:6b:56:35:fe:5e:4e:c6:94:ce:4f:7f:ba:68:ca:d4:f2:56:
c9:17:1c:c6:c7:ff:cf:7f:97:24:71:47:fe:a0:2f:ad:5a:f8:
98:a5:2e:18:21:08:fd:66:9e:9c:74:3c:18:4a:fe:d5:98:54:
df:94:c0:08:a5:45:ff:69:b5:63:1d:0d:21:f1:76:56:cf:20:
92:21:c1:a9:83:d7:65:5e:19:fc:2e:af:e7:8a:8f:55:4f:30:
82:49:69:de:8e:30:c1:40:e9:39:5c:f1:24:41:23:49:1c:55:
d5:44:93:78:5d:85:b6:01:e6:4e:63:23:ad:e4:ec:cb:95:fc:
b8:79:3e:ec:49:26:80:ff:f7:70:95:3f:b8:df:5e:48:db:36:
ff:22:96:e2:fd:27:e0:71:d9:97:50:50:e6:5b:3f:5b:41:7c:
75:26:5c:fe:78:8d:85:18:78:4f:73:fc:ce:e1:8d:0b:bf:1c:
05:c9:af:91:08:5a:4c:d5:51:31:89:d5:e7:5f:c6:5a:95:6e:
05:b3:ca:85:fc:d7:86:d1:07:47:4c:7b:61:57:ec:60:74:67:
77:f9:3f:4e:3a:97:05:1c:34:e7:b7:26:4c:01:0f:d6:cd:22:
d9:8c:bf:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:44:24 2025 by rpki-client