Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/ceff1a-ec66-4d45-ba9f-488a22299ca1/1/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.mft
File: ZatR6OWMwU7ZyzVzGvHQEdvi4S4.mft (raw, json)
Hash identifier: VMi4fRTg292prOEGnlR/HyRQEsI2rOv5AqKgWOZnC3Y=
Subject key identifier: 7A:EC:FE:55:7F:DB:98:AC:99:79:F1:C9:89:10:49:69:C1:25:2F:80
Authority key identifier: 65:AB:51:E8:E5:8C:C1:4E:D9:CB:35:73:1A:F1:D0:11:DB:E2:E1:2E
Certificate issuer: /CN=65ab51e8e58cc14ed9cb35731af1d011dbe2e12e
Certificate serial: 0199FBEBFBCAA269048B2B68441E8FCD1097
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/ceff1a-ec66-4d45-ba9f-488a22299ca1/1/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.mft
Manifest number: 15A2
Signing time: Sun 19 Oct 2025 10:02:50 +0000
Manifest this update: Sun 19 Oct 2025 10:02:50 +0000
Manifest next update: Mon 20 Oct 2025 10:02:50 +0000
Files and hashes: 1: AuI1_5gu81vs3cIDXIzNbaWND-I.roa (hash: lsSEgLcY/ack618oc/9NRlphXCxEIj/Wq+gUEc772OI=)
2: ZatR6OWMwU7ZyzVzGvHQEdvi4S4.crl (hash: ChUCN2I5CuEnSHMm/qJMtQQcj8aZluKd8pCFfR2FsWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/ceff1a-ec66-4d45-ba9f-488a22299ca1/1/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/ceff1a-ec66-4d45-ba9f-488a22299ca1/1/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:fb:ca:a2:69:04:8b:2b:68:44:1e:8f:cd:10:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65ab51e8e58cc14ed9cb35731af1d011dbe2e12e
Validity
Not Before: Oct 19 10:02:50 2025 GMT
Not After : Oct 20 10:02:50 2025 GMT
Subject: CN=7aecfe557fdb98ac9979f1c989104969c1252f80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:2b:51:94:81:da:d1:39:4f:df:a4:12:14:e8:
1f:2d:72:78:e3:23:55:1b:23:88:34:ae:f4:87:67:
a9:ef:50:02:3c:40:42:8a:3c:aa:d5:50:7d:fe:8b:
a0:ce:df:fd:d0:4d:6b:17:d0:3b:3e:ab:cf:a6:13:
a0:d8:71:12:8a:0f:62:12:20:45:84:4d:ea:07:52:
35:96:ed:6d:f4:e3:4b:ef:f9:72:af:cc:7d:1a:b2:
6f:75:4c:43:c1:41:04:6c:bc:9e:de:79:c4:d7:2b:
fd:61:91:60:c3:8f:69:0e:a1:3d:39:ab:20:a5:2e:
64:16:b6:2e:0f:f7:07:36:4f:a1:2e:ef:57:65:eb:
a1:71:ac:7a:94:73:ae:e7:38:59:8c:1b:dc:b2:20:
ad:2b:41:b0:27:6c:d8:0a:7e:66:ab:0a:83:39:07:
ba:84:ae:28:e2:ba:c5:c8:05:7e:27:76:4b:4b:03:
02:84:64:aa:b9:4e:cf:98:df:f1:0c:96:9e:ed:4f:
65:76:eb:11:43:65:4e:cd:4b:8a:7b:82:17:5a:d0:
67:f8:02:c4:a8:8d:c4:ca:ce:80:cc:f7:8b:29:ac:
05:5d:de:0e:a7:11:1b:05:14:35:f6:bf:75:6d:8f:
4e:79:26:af:29:12:6e:1d:22:3a:45:41:29:5d:b1:
5b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:EC:FE:55:7F:DB:98:AC:99:79:F1:C9:89:10:49:69:C1:25:2F:80
X509v3 Authority Key Identifier:
keyid:65:AB:51:E8:E5:8C:C1:4E:D9:CB:35:73:1A:F1:D0:11:DB:E2:E1:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/ceff1a-ec66-4d45-ba9f-488a22299ca1/1/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/ceff1a-ec66-4d45-ba9f-488a22299ca1/1/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:63:08:f3:cd:77:db:ff:69:26:dd:07:91:df:1b:93:12:17:
6e:af:c0:fe:a1:d8:02:fd:d9:32:36:16:ff:cd:a2:80:bc:b6:
82:29:c9:28:1c:27:ef:e7:3e:a6:fd:2a:96:23:63:4a:77:20:
22:44:64:45:b5:91:d6:31:4c:00:ec:d3:f7:1f:93:29:17:f0:
fa:1a:67:dd:61:7a:7e:9c:a6:0a:96:9d:71:c6:59:0a:35:5f:
78:e1:22:eb:8a:c2:30:37:74:1a:83:11:3a:a3:ff:32:f3:4f:
a3:9d:0b:8e:aa:17:ca:fc:ee:78:7b:e9:d3:c3:10:c4:34:78:
71:8f:5a:a8:de:c1:29:df:d4:02:45:21:53:72:25:0c:da:32:
a9:ae:31:27:40:2b:99:6e:b1:c4:32:06:ec:92:9f:ff:9a:f6:
0c:22:2e:8e:bf:99:c1:35:49:8d:c8:1e:6b:22:e7:ea:ca:b8:
50:24:91:86:4d:c4:d2:6c:4f:6f:ef:5c:93:12:9b:4e:59:17:
ea:82:e6:8c:00:8d:51:d1:36:78:ad:86:bb:4d:76:2f:4b:fd:
1a:e5:5a:49:8d:37:f5:82:47:37:cf:88:72:5a:e0:2a:88:e9:
09:b2:d4:b2:af:ae:af:8f:c2:15:c6:a6:7c:78:05:c5:31:8a:
35:bb:9d:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:11:15 2025 by rpki-client