Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/e813d4-4126-4ca1-90d6-45d05a4b1d99/1/ZLsi-CLbdFH-HiGWysY8Vkf7GtU.mft
File: ZLsi-CLbdFH-HiGWysY8Vkf7GtU.mft (raw, json)
Hash identifier: GnfqEu80W0GxPHNbEVPF0YXDN7DDdb8RiN0VskjLreg=
Subject key identifier: C9:3C:84:F1:75:4D:1F:1B:DD:4D:F3:33:54:8E:44:56:E7:91:C5:F2
Authority key identifier: 64:BB:22:F8:22:DB:74:51:FE:1E:21:96:CA:C6:3C:56:47:FB:1A:D5
Certificate issuer: /CN=64bb22f822db7451fe1e2196cac63c5647fb1ad5
Certificate serial: 0199FB0ED296ACF100D8CB7487FA18DD718B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZLsi-CLbdFH-HiGWysY8Vkf7GtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/e813d4-4126-4ca1-90d6-45d05a4b1d99/1/ZLsi-CLbdFH-HiGWysY8Vkf7GtU.mft
Manifest number: 039A
Signing time: Sun 19 Oct 2025 06:01:16 +0000
Manifest this update: Sun 19 Oct 2025 06:01:16 +0000
Manifest next update: Mon 20 Oct 2025 06:01:16 +0000
Files and hashes: 1: 7221QtQkpZ5fYG5uSqjd2485FGI.roa (hash: qWfFUUJnuvb44KA8Ta3mXVGgM6VvJjf6ZydNkx5R4C0=)
2: ZLsi-CLbdFH-HiGWysY8Vkf7GtU.crl (hash: KdYAYJaRWkl8cN+v2EOsNG5C6ipQdivoSVskZLjLsX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/e813d4-4126-4ca1-90d6-45d05a4b1d99/1/ZLsi-CLbdFH-HiGWysY8Vkf7GtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/e813d4-4126-4ca1-90d6-45d05a4b1d99/1/ZLsi-CLbdFH-HiGWysY8Vkf7GtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZLsi-CLbdFH-HiGWysY8Vkf7GtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0e:d2:96:ac:f1:00:d8:cb:74:87:fa:18:dd:71:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64bb22f822db7451fe1e2196cac63c5647fb1ad5
Validity
Not Before: Oct 19 06:01:16 2025 GMT
Not After : Oct 20 06:01:16 2025 GMT
Subject: CN=c93c84f1754d1f1bdd4df333548e4456e791c5f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ce:c7:9f:6b:cd:3f:dd:f1:de:e0:77:1c:39:
cf:88:19:fd:8a:79:6f:3f:0a:3c:00:67:a9:f3:a6:
32:c0:19:ad:5e:f4:e4:e1:10:85:41:a6:a4:42:9d:
3b:80:94:36:da:07:7e:5e:73:14:da:b0:03:3d:d4:
c9:c0:b5:74:d9:a4:13:32:b7:22:30:75:e2:35:c1:
66:7a:64:f5:3c:7c:7a:f7:e8:1d:d7:5a:ca:09:95:
4e:91:f0:f1:ed:24:6a:d9:9a:2f:cc:0e:4a:8e:fe:
50:70:bf:e8:8c:ee:2e:c4:23:bd:5b:22:86:78:c1:
94:de:27:14:59:29:6a:63:30:4b:66:76:79:bb:89:
1a:34:26:40:a3:86:99:7e:66:fd:48:0e:45:3b:58:
c1:eb:23:29:99:45:ab:bc:0e:30:8e:98:b8:cd:82:
18:d3:c6:0b:14:58:0b:2c:37:8b:bf:a0:f9:10:6f:
89:34:e7:53:f5:07:91:a6:66:24:42:b3:f3:7b:61:
0d:47:ac:fb:68:93:cb:41:7e:d1:19:d0:3f:80:ea:
ca:a1:52:d3:ee:0f:8b:9e:88:4f:ba:a5:12:65:70:
14:2f:53:47:0b:b5:8c:15:91:89:16:ca:0f:39:9e:
73:13:52:c5:52:53:0e:15:8b:7c:99:d7:83:2e:3c:
fb:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:3C:84:F1:75:4D:1F:1B:DD:4D:F3:33:54:8E:44:56:E7:91:C5:F2
X509v3 Authority Key Identifier:
keyid:64:BB:22:F8:22:DB:74:51:FE:1E:21:96:CA:C6:3C:56:47:FB:1A:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZLsi-CLbdFH-HiGWysY8Vkf7GtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e813d4-4126-4ca1-90d6-45d05a4b1d99/1/ZLsi-CLbdFH-HiGWysY8Vkf7GtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e813d4-4126-4ca1-90d6-45d05a4b1d99/1/ZLsi-CLbdFH-HiGWysY8Vkf7GtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:5f:da:b4:83:48:eb:fb:00:de:28:8e:67:7b:e6:c8:f2:2e:
bd:b9:56:c5:5e:12:86:74:d9:cf:c1:7c:a0:4f:b2:14:b5:17:
22:3d:78:f8:10:b9:96:1f:2f:cd:76:86:5c:b3:fd:e2:62:1e:
f2:84:d5:c2:ae:e8:f2:c6:e0:6a:64:38:05:fb:f8:82:6c:ce:
78:81:82:11:e2:33:0a:6c:5d:fd:8e:30:3a:04:68:56:6f:71:
f9:d0:51:47:af:4c:51:25:4d:df:be:1e:c5:e6:41:a2:52:8a:
64:07:bc:9f:3d:16:26:e9:1e:a0:16:e6:55:22:70:5d:86:a7:
ea:73:28:b9:1d:81:be:62:38:84:9a:ab:c8:47:73:da:77:57:
7c:d6:90:b2:06:cf:c8:2e:70:f7:51:ab:db:7d:75:78:05:ab:
23:db:64:72:0a:e0:0b:7c:b9:4e:e1:31:05:77:e1:d0:a1:d1:
85:1a:b1:2a:95:37:46:af:de:6a:a4:c5:28:9d:ef:6a:d1:be:
d6:6b:b8:c6:34:c7:be:f5:0d:eb:ca:e1:b7:b8:3e:59:f8:15:
37:fd:8b:3d:f3:c7:66:47:72:03:c5:82:b3:cd:73:70:e8:ab:
48:0f:8e:92:77:e4:11:45:67:5d:43:fe:dc:3f:ae:24:e1:d6:
ae:8a:d4:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:30 2025 by rpki-client