Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/7be02f-28f5-4209-935a-82d8ebe99424/1/Ze3JFheq3wwsx_H115bb237YWQ0.mft
File: Ze3JFheq3wwsx_H115bb237YWQ0.mft (raw, json)
Hash identifier: Uk/sssZlEOzNLzyEsPvB70mDg9z/DxjTeP3v/J7TQ+E=
Subject key identifier: A0:E5:A9:E0:98:C0:6F:34:B1:A1:95:E7:34:4D:7C:D0:8A:ED:91:88
Authority key identifier: 65:ED:C9:16:17:AA:DF:0C:2C:C7:F1:F5:D7:96:DB:DB:7E:D8:59:0D
Certificate issuer: /CN=65edc91617aadf0c2cc7f1f5d796dbdb7ed8590d
Certificate serial: 0199FB45E1AD5AB12CE4E99519A6128F3A82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ze3JFheq3wwsx_H115bb237YWQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/7be02f-28f5-4209-935a-82d8ebe99424/1/Ze3JFheq3wwsx_H115bb237YWQ0.mft
Manifest number: 06AC
Signing time: Sun 19 Oct 2025 07:01:24 +0000
Manifest this update: Sun 19 Oct 2025 07:01:24 +0000
Manifest next update: Mon 20 Oct 2025 07:01:24 +0000
Files and hashes: 1: C0Em9awMYVhNg2sMId10Ef0_Qvw.roa (hash: nirBzQQ6k8BEyGM3hSdFnZ+pftgQMVbe2wljIKMV4wk=)
2: Ze3JFheq3wwsx_H115bb237YWQ0.crl (hash: UtGVXHQHnFgZ645RgmmBMJgQO3ofOoOyBdXkxQoV8vw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/7be02f-28f5-4209-935a-82d8ebe99424/1/Ze3JFheq3wwsx_H115bb237YWQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/7be02f-28f5-4209-935a-82d8ebe99424/1/Ze3JFheq3wwsx_H115bb237YWQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ze3JFheq3wwsx_H115bb237YWQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:e1:ad:5a:b1:2c:e4:e9:95:19:a6:12:8f:3a:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65edc91617aadf0c2cc7f1f5d796dbdb7ed8590d
Validity
Not Before: Oct 19 07:01:24 2025 GMT
Not After : Oct 20 07:01:24 2025 GMT
Subject: CN=a0e5a9e098c06f34b1a195e7344d7cd08aed9188
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:a3:86:b8:34:9e:3e:84:87:06:1c:c9:b4:07:
90:a9:40:13:73:3d:0c:13:3d:e2:5e:8d:6f:23:6e:
1a:2c:c2:af:5e:2f:a3:cb:3a:43:3b:28:77:c7:f2:
51:4a:82:6d:88:b0:7f:5e:d5:8c:af:58:4b:e4:43:
9b:9d:66:7a:02:03:f8:c4:f9:9f:bc:bb:a3:96:16:
47:a0:7e:1d:a1:10:bb:b4:0b:65:39:ba:21:ee:18:
4f:56:34:d1:79:8d:80:c4:0f:c3:1c:ec:f8:15:f6:
58:fa:68:29:bd:cb:2a:38:e8:1b:21:2d:21:df:b4:
39:3b:f5:2d:16:56:7a:e1:8c:3f:80:c9:ff:a1:6d:
1d:2f:69:db:91:32:dc:6c:11:05:74:c6:97:83:02:
fa:87:f6:c0:2f:28:21:d6:65:53:e3:33:33:2f:c2:
0d:1f:37:e9:96:1d:e9:f3:76:41:06:04:22:1e:59:
ab:dd:bd:9d:06:5b:8b:e0:0f:1e:be:dd:33:8a:f0:
d1:f8:4c:14:68:81:dc:53:3f:a4:5f:fb:10:5b:24:
a1:58:16:1c:31:02:a6:da:24:67:26:e0:e6:60:45:
3b:c3:42:53:19:61:0a:0e:2b:85:87:07:ce:ef:b2:
b4:d7:e7:32:d3:72:c3:e9:d0:ae:f6:8b:6e:3c:40:
72:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:E5:A9:E0:98:C0:6F:34:B1:A1:95:E7:34:4D:7C:D0:8A:ED:91:88
X509v3 Authority Key Identifier:
keyid:65:ED:C9:16:17:AA:DF:0C:2C:C7:F1:F5:D7:96:DB:DB:7E:D8:59:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ze3JFheq3wwsx_H115bb237YWQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/7be02f-28f5-4209-935a-82d8ebe99424/1/Ze3JFheq3wwsx_H115bb237YWQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/7be02f-28f5-4209-935a-82d8ebe99424/1/Ze3JFheq3wwsx_H115bb237YWQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:70:40:30:76:86:d8:77:23:46:7e:58:05:44:12:d3:a7:e9:
c4:44:95:b5:62:f5:35:31:c6:65:73:04:f3:b9:db:a6:50:25:
6d:da:2e:2f:70:50:31:b2:76:af:0f:16:bf:ee:65:47:dd:4c:
85:1a:47:6d:31:b8:e3:e0:56:f2:bd:64:9c:03:e3:cd:a7:9d:
7f:f9:6d:3c:5d:3b:1d:95:f5:59:24:2b:3d:0b:01:1a:81:54:
8f:98:d1:23:b6:de:ca:a9:0f:7e:38:2e:91:2d:e6:81:d4:59:
7a:13:d9:f3:a7:5c:fe:ba:4f:9b:20:34:3b:2d:c4:4c:a4:8d:
3f:9e:17:dc:5d:3c:d6:33:0c:f8:bc:4c:ad:77:b1:4f:c6:8f:
a2:ad:e7:43:f6:22:ef:8c:b4:f0:7c:f9:3b:d2:ed:3c:54:0b:
17:33:77:73:2e:80:d0:a0:96:19:dd:b3:56:ad:c7:33:47:23:
93:1f:3a:72:e8:34:ec:66:8f:b4:55:bb:73:5c:a2:35:6a:be:
fa:b1:16:40:7c:08:15:8c:30:fe:ec:46:4c:d2:bc:ef:d4:94:
13:84:f6:04:d8:d0:3f:21:f0:fa:d2:5c:59:a6:6c:8d:5c:67:
ae:1f:20:af:6c:60:32:9b:e4:8f:60:b1:39:20:b1:bc:cd:59:
9e:cb:0a:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:44 2025 by rpki-client