Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.mft
File: ZHVxhUcvFtU-62ihQONRP6McMdg.mft (raw, json)
Hash identifier: fHzr/zjnf19tL6ZZFi3FVlaPx/yImpHV//4JqWN0vlQ=
Subject key identifier: 98:DD:90:01:EC:79:E4:8B:5C:0A:B7:73:0C:52:71:B8:33:D0:59:87
Authority key identifier: 64:75:71:85:47:2F:16:D5:3E:EB:68:A1:40:E3:51:3F:A3:1C:31:D8
Certificate issuer: /CN=64757185472f16d53eeb68a140e3513fa31c31d8
Certificate serial: 0199FCC6DBCDF976815B8C8CDD85A714CFA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZHVxhUcvFtU-62ihQONRP6McMdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.mft
Manifest number: 0FBC
Signing time: Sun 19 Oct 2025 14:01:54 +0000
Manifest this update: Sun 19 Oct 2025 14:01:54 +0000
Manifest next update: Mon 20 Oct 2025 14:01:54 +0000
Files and hashes: 1: LbrPw2qHStZqdco2bEzhOUNybWw.roa (hash: 7tT51i1L51JtsRXjzHib6ZL3MKK3W2gKGrb5rsnLLAg=)
2: POCPRxRMQvG_SBDmMnlfbNyZ_Fc.roa (hash: omhI/dBEp6szGMmdnXA+Z3Yz+jOpHj80ol6PbhfLhbo=)
3: ZHVxhUcvFtU-62ihQONRP6McMdg.crl (hash: JG4Q4VirVeAURyivjjHQjp8oQCzj29X/jODjEJL0M24=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZHVxhUcvFtU-62ihQONRP6McMdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:db:cd:f9:76:81:5b:8c:8c:dd:85:a7:14:cf:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64757185472f16d53eeb68a140e3513fa31c31d8
Validity
Not Before: Oct 19 14:01:54 2025 GMT
Not After : Oct 20 14:01:54 2025 GMT
Subject: CN=98dd9001ec79e48b5c0ab7730c5271b833d05987
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d9:d1:73:89:00:7a:d4:cf:1a:1c:22:f2:a4:
45:30:d8:cf:de:25:fa:1c:7b:c2:01:2b:27:57:9f:
4a:0f:9c:28:bb:9c:1e:2e:24:03:46:2b:9d:a4:11:
b1:75:16:5f:ac:62:04:74:70:c8:83:00:fe:c3:c4:
b3:c6:91:15:9a:c4:f8:8a:9f:50:3f:0b:6a:86:c4:
0c:6d:96:86:8f:79:68:6b:25:46:c4:9b:05:f7:a0:
24:33:0c:86:a4:c8:6e:30:34:d0:df:a4:8d:81:2e:
24:8c:c5:fe:da:a2:8b:15:ef:ec:1b:17:76:d5:4a:
bc:4a:29:c8:fc:17:f1:5f:2c:fe:5d:eb:c8:d7:eb:
95:fe:af:5c:6d:30:20:33:b3:e7:36:bb:81:75:07:
07:e5:3c:6f:71:0b:7e:bf:8c:96:58:21:05:ef:bd:
a8:6e:23:78:da:4a:2c:c8:6c:66:42:1d:ae:dd:f1:
cd:a9:fc:dd:21:4e:6a:01:39:75:80:ef:23:3c:17:
6e:dd:0e:ea:2f:c9:e4:ee:3e:09:5b:5f:e6:66:db:
c4:ca:83:f1:b1:53:45:10:28:26:2b:4d:a5:5e:05:
e6:32:3d:14:e1:e6:40:81:6b:15:d5:a2:0f:f1:2b:
ff:5f:1a:a4:78:7d:ce:ef:32:95:b5:02:9e:0c:19:
f7:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:DD:90:01:EC:79:E4:8B:5C:0A:B7:73:0C:52:71:B8:33:D0:59:87
X509v3 Authority Key Identifier:
keyid:64:75:71:85:47:2F:16:D5:3E:EB:68:A1:40:E3:51:3F:A3:1C:31:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZHVxhUcvFtU-62ihQONRP6McMdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:35:5d:6e:6a:d4:9c:f2:ae:eb:87:74:e2:71:b7:46:61:e5:
53:b6:f2:74:25:20:b3:4a:7f:a8:f1:f8:1e:50:a8:e4:95:68:
fe:e7:70:bd:22:57:af:39:f0:ae:e7:85:4a:1f:ef:9e:62:14:
f4:92:80:6f:2c:a2:80:d8:c4:10:0e:63:48:22:cc:d7:ad:2c:
5f:e1:d8:53:58:0e:ee:21:8a:1e:99:67:f3:91:72:50:bb:51:
dd:3d:a4:bb:2b:a8:f4:a8:e8:40:ab:37:95:18:55:d3:6e:9b:
99:63:7b:85:c4:8f:d2:cb:98:60:df:91:78:54:d2:c1:aa:d3:
20:00:b0:d9:a8:53:92:9f:39:c2:a2:0d:b3:f8:22:65:0a:f0:
7a:b9:30:44:00:f0:41:95:29:bc:43:8b:7c:f7:3e:7b:36:44:
a7:9d:78:e1:07:52:ed:99:02:1d:77:d5:f8:60:5c:6f:b0:10:
07:cc:9d:49:21:45:85:8b:2f:38:71:b7:6d:96:40:b9:20:38:
d2:5d:86:97:fe:d3:c1:8e:3c:ca:85:54:7d:4d:81:6c:a1:11:
76:38:bb:5e:2a:e6:9c:39:64:8e:05:b8:0e:09:84:79:d4:0f:
58:53:18:f7:5c:bc:5d:6b:91:15:43:9f:3e:19:f6:c0:ae:fe:
34:ad:0c:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:00:47 2025 by rpki-client