Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/5b6768-4b5f-4430-bff1-b5e5700fc774/1/zr-Nbew5ILxz8Jf99WyvELUttFU.mft
File: zr-Nbew5ILxz8Jf99WyvELUttFU.mft (raw, json)
Hash identifier: jwIH2doa1lYuCA+KjDllP18fuN8C3cjzpe+LmclYB00=
Subject key identifier: A8:47:5E:CB:67:73:33:8A:80:81:8D:03:58:35:9E:20:C4:90:3B:35
Authority key identifier: CE:BF:8D:6D:EC:39:20:BC:73:F0:97:FD:F5:6C:AF:10:B5:2D:B4:55
Certificate issuer: /CN=cebf8d6dec3920bc73f097fdf56caf10b52db455
Certificate serial: 0199FC586D391C705421008C8A6230599A0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zr-Nbew5ILxz8Jf99WyvELUttFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/5b6768-4b5f-4430-bff1-b5e5700fc774/1/zr-Nbew5ILxz8Jf99WyvELUttFU.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 12:01:17 +0000
Manifest this update: Sun 19 Oct 2025 12:01:17 +0000
Manifest next update: Mon 20 Oct 2025 12:01:17 +0000
Files and hashes: 1: c0nmn1z_CeUl_DCW_vWwY1kdQJM.roa (hash: wRoePPTw0QAoUH4ArBeWw9mmFYBdS/sgugaB1c1wFFw=)
2: zr-Nbew5ILxz8Jf99WyvELUttFU.crl (hash: YFD5i44mNGZ+WlxcGkUZZ02N9YaRd1HYoSY70IjlyPY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/5b6768-4b5f-4430-bff1-b5e5700fc774/1/zr-Nbew5ILxz8Jf99WyvELUttFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/5b6768-4b5f-4430-bff1-b5e5700fc774/1/zr-Nbew5ILxz8Jf99WyvELUttFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/zr-Nbew5ILxz8Jf99WyvELUttFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:6d:39:1c:70:54:21:00:8c:8a:62:30:59:9a:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cebf8d6dec3920bc73f097fdf56caf10b52db455
Validity
Not Before: Oct 19 12:01:17 2025 GMT
Not After : Oct 20 12:01:17 2025 GMT
Subject: CN=a8475ecb6773338a80818d0358359e20c4903b35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d9:63:97:69:75:c9:f5:33:c6:45:7a:4b:e0:
69:34:9d:62:e6:90:11:bd:59:01:d1:ee:cd:6a:5e:
48:c0:55:c8:56:46:8d:f1:66:5f:db:a3:4b:0f:c6:
6f:b9:b4:08:f9:b8:80:ac:32:17:c0:20:94:de:bf:
91:63:c9:67:98:e2:cc:3a:ab:78:1b:73:d2:e3:e2:
41:cf:db:eb:fb:8d:b5:d4:ea:47:9f:57:9f:5a:85:
b3:ef:01:f6:b7:6c:8f:66:8b:99:a5:25:06:32:5d:
78:46:bb:03:ae:12:1b:0f:ec:e9:d4:fd:b0:cc:30:
d4:af:2e:d4:39:06:81:c4:66:87:32:e0:2f:9e:dc:
28:56:f7:85:b7:02:af:1b:d3:04:ab:a1:1a:95:ac:
11:45:dd:9e:06:11:9e:bd:50:1b:e9:3e:ec:ac:60:
63:35:51:99:75:e1:73:be:7f:05:78:97:2e:f2:75:
4e:36:57:cc:fa:ef:15:02:e2:b6:59:80:21:59:57:
3e:4d:5f:f1:76:a0:04:6c:dc:61:ef:6e:7e:4a:e9:
7f:9f:44:ed:24:01:71:01:f1:35:24:12:8d:b7:3c:
8a:e1:0b:22:b1:7f:49:d9:b2:f1:1b:5b:01:30:9d:
36:03:e3:9d:5c:8f:b6:f3:55:04:0f:c0:87:6f:eb:
37:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:47:5E:CB:67:73:33:8A:80:81:8D:03:58:35:9E:20:C4:90:3B:35
X509v3 Authority Key Identifier:
keyid:CE:BF:8D:6D:EC:39:20:BC:73:F0:97:FD:F5:6C:AF:10:B5:2D:B4:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zr-Nbew5ILxz8Jf99WyvELUttFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/5b6768-4b5f-4430-bff1-b5e5700fc774/1/zr-Nbew5ILxz8Jf99WyvELUttFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/5b6768-4b5f-4430-bff1-b5e5700fc774/1/zr-Nbew5ILxz8Jf99WyvELUttFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:61:77:cf:3d:f3:92:ee:99:7a:43:50:a2:47:b6:3f:3d:4f:
a2:21:8c:a2:99:26:15:6a:fd:4f:1f:18:b4:09:49:e0:55:51:
2d:3b:73:01:60:45:82:d1:a3:20:dd:f0:b1:93:7a:84:ea:26:
45:75:ec:af:f7:56:74:4d:9e:08:c0:29:4f:da:6e:4e:38:b1:
1c:95:47:fc:53:ee:75:21:7e:93:6f:c9:bc:f8:55:26:6d:0e:
a5:4c:45:71:1d:09:a9:e0:d5:b7:10:33:49:f5:69:57:5b:b1:
ae:1a:f1:04:6f:03:c0:9a:4c:6c:eb:51:26:3f:57:cf:2c:18:
03:57:68:d4:7d:1e:3e:5f:e0:3e:da:ba:71:c1:5c:c2:f4:43:
32:42:fd:a6:e3:31:18:9e:93:23:3e:92:b8:c1:36:f9:ee:b4:
ea:b6:6c:3c:19:02:d5:75:68:c9:39:a3:0d:74:02:3c:c6:12:
35:f8:42:26:e6:ab:d3:e2:b5:c6:11:51:4d:9b:48:d5:0e:e2:
7f:8e:1e:86:18:72:35:80:4f:82:e2:f1:7b:34:fc:20:26:8a:
45:ae:02:b7:cf:7e:8b:9d:a5:4e:43:d7:54:c7:68:9e:4b:f7:
11:4b:70:31:da:c7:90:b2:dc:c2:28:eb:3c:81:7a:4f:85:6f:
27:0b:7d:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:31:44 2025 by rpki-client