Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/e2dc5b-ceb2-435c-aba4-7ef1b9159eb6/1/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.mft
File: zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.mft (raw, json)
Hash identifier: gWSm6gDf3Tvq+wc1ydSYwLsZ6ff+f/uoLKJ3RAGAr0o=
Subject key identifier: F6:76:DA:49:C0:0B:03:D8:A1:85:A0:A0:05:1C:6F:29:C5:F3:AD:54
Authority key identifier: CE:A0:2C:07:79:7F:A2:03:A1:E2:49:3B:A0:DD:80:19:9E:D9:BE:05
Certificate issuer: /CN=cea02c07797fa203a1e2493ba0dd80199ed9be05
Certificate serial: 0199FBEACB5AF1B8369BB7B3E4E0192F39AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/e2dc5b-ceb2-435c-aba4-7ef1b9159eb6/1/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.mft
Manifest number: 16DF
Signing time: Sun 19 Oct 2025 10:01:32 +0000
Manifest this update: Sun 19 Oct 2025 10:01:32 +0000
Manifest next update: Mon 20 Oct 2025 10:01:32 +0000
Files and hashes: 1: bTsSCn9VQJFsfJFoDTOrVGY-N2k.roa (hash: +9Rs1bITp6EHbSOzvjJQ8zLBys/+7urSMq64MyKwyrA=)
2: zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.crl (hash: EebYQvErZIR7+MoXTSIcHizN594RduqUuUGulRMbsJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/e2dc5b-ceb2-435c-aba4-7ef1b9159eb6/1/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/e2dc5b-ceb2-435c-aba4-7ef1b9159eb6/1/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.mft
rsync://rpki.ripe.net/repository/DEFAULT/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:cb:5a:f1:b8:36:9b:b7:b3:e4:e0:19:2f:39:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cea02c07797fa203a1e2493ba0dd80199ed9be05
Validity
Not Before: Oct 19 10:01:32 2025 GMT
Not After : Oct 20 10:01:32 2025 GMT
Subject: CN=f676da49c00b03d8a185a0a0051c6f29c5f3ad54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:88:d8:09:28:68:75:2d:1a:af:49:d0:4a:3f:
51:1d:91:97:9f:08:73:96:ab:6e:5c:aa:36:0e:0f:
c2:93:db:89:c4:ef:a9:88:19:09:60:52:08:c0:69:
8a:e6:29:82:9e:33:ea:b3:6e:28:2b:6d:74:d3:27:
57:df:96:5e:fb:df:83:1b:38:d4:65:7b:25:ed:32:
93:cd:62:62:5c:6c:de:32:d1:28:dc:97:14:d1:5f:
e6:d4:1f:2f:92:8c:2a:e5:12:08:b5:06:d3:86:82:
49:ee:22:0c:8f:67:87:a2:4c:ac:54:ac:e1:11:f8:
4a:d3:0d:9e:da:e9:10:28:38:b6:4c:26:62:97:b3:
90:48:1e:8a:a3:4d:a9:59:88:4a:72:25:cb:77:17:
7a:d6:24:9b:11:c1:35:1b:bc:c7:74:e3:85:6a:8b:
59:1c:0d:f4:33:3c:57:a5:cb:be:fc:e4:ab:2a:f5:
24:2b:e8:7b:c6:2b:b2:45:55:0b:52:70:06:62:8d:
1c:ef:e2:6f:32:1e:f8:99:d3:98:d1:a9:32:ca:18:
3b:54:34:27:6d:85:39:10:20:00:4a:26:82:3a:9c:
9c:38:a9:7d:0d:99:f6:b2:55:d9:6c:bf:ea:99:89:
06:a7:d0:a1:56:b8:c5:64:22:4a:05:76:31:14:c6:
96:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:76:DA:49:C0:0B:03:D8:A1:85:A0:A0:05:1C:6F:29:C5:F3:AD:54
X509v3 Authority Key Identifier:
keyid:CE:A0:2C:07:79:7F:A2:03:A1:E2:49:3B:A0:DD:80:19:9E:D9:BE:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e2dc5b-ceb2-435c-aba4-7ef1b9159eb6/1/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e2dc5b-ceb2-435c-aba4-7ef1b9159eb6/1/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:e7:92:84:12:a4:30:48:a3:1b:57:c9:10:ac:2f:7a:6a:9e:
c6:16:b7:78:b3:77:38:be:41:d9:b4:94:c9:17:41:47:85:e3:
03:f5:f3:9d:47:bd:e9:1e:36:05:a3:24:65:a8:9c:13:16:df:
15:b0:ac:dd:66:db:38:ae:a9:ce:10:21:3f:a2:a0:1b:98:b7:
ae:74:8b:ac:52:b9:b5:7c:fd:ec:ec:a2:f5:7f:00:ac:60:24:
4d:ea:14:cb:58:55:60:42:04:39:d4:f2:ad:d2:0a:4e:41:7a:
bd:93:f5:ae:50:a6:fc:13:4b:09:63:8f:e6:a0:53:3b:b1:bc:
95:be:5f:9f:71:e5:b5:e5:77:0a:f2:d4:a2:11:9f:48:39:14:
0d:a0:3e:a0:2e:b2:09:86:34:bb:91:1b:86:9d:f8:c3:e7:59:
0b:4a:82:39:c6:4c:81:c8:2d:3e:20:7a:cb:8b:5f:b6:b3:52:
23:89:10:0d:07:c7:2b:5a:46:ce:bd:cb:45:2c:70:c4:4b:33:
16:e7:b6:f7:71:ee:88:dd:d8:17:51:55:72:f0:2d:9b:da:d2:
15:09:98:a8:99:ea:e7:4f:c9:a3:8d:13:0c:fc:da:9e:25:7b:
62:18:73:28:c5:b3:43:58:4a:e8:d3:34:c8:88:24:4f:75:97:
f9:f2:45:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:39 2025 by rpki-client