Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/ZiWd6j6crm6BlYjFyRPwLUQQOYs.mft
File: ZiWd6j6crm6BlYjFyRPwLUQQOYs.mft (raw, json)
Hash identifier: 9hLZpaawsFMyxSripwmu+0rB4TW+YHasOmUw7102oOY=
Subject key identifier: FA:53:30:A7:C0:CF:F8:79:9F:0C:6C:2A:79:17:1F:E9:63:37:68:45
Authority key identifier: 66:25:9D:EA:3E:9C:AE:6E:81:95:88:C5:C9:13:F0:2D:44:10:39:8B
Certificate issuer: /CN=66259dea3e9cae6e819588c5c913f02d4410398b
Certificate serial: 0199FBEBBFCA099FADDF0103637CBC1DE6EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZiWd6j6crm6BlYjFyRPwLUQQOYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/ZiWd6j6crm6BlYjFyRPwLUQQOYs.mft
Manifest number: 1532
Signing time: Sun 19 Oct 2025 10:02:35 +0000
Manifest this update: Sun 19 Oct 2025 10:02:35 +0000
Manifest next update: Mon 20 Oct 2025 10:02:35 +0000
Files and hashes: 1: 64PcT-ttV59tp4M6SLzIc1B2y1U.roa (hash: DimP9lf8Wwvo3/homuogbrevUAd8aPNUrD6/T7BCGD0=)
2: ZiWd6j6crm6BlYjFyRPwLUQQOYs.crl (hash: ofPaE9O0pL3cksG3QlyfZHcG1pN0qQ44g8VCcg+XTpA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/ZiWd6j6crm6BlYjFyRPwLUQQOYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/ZiWd6j6crm6BlYjFyRPwLUQQOYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZiWd6j6crm6BlYjFyRPwLUQQOYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:bf:ca:09:9f:ad:df:01:03:63:7c:bc:1d:e6:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66259dea3e9cae6e819588c5c913f02d4410398b
Validity
Not Before: Oct 19 10:02:35 2025 GMT
Not After : Oct 20 10:02:35 2025 GMT
Subject: CN=fa5330a7c0cff8799f0c6c2a79171fe963376845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:de:bd:71:ee:38:5b:7f:94:2f:ce:00:4e:da:
bb:8c:4d:b8:ad:d5:96:e4:09:2c:fa:f9:b1:9c:e4:
23:a4:4d:cf:73:24:bf:e4:a9:6c:6d:47:d8:5b:eb:
c7:55:9e:98:bc:18:b8:31:7f:1a:54:32:e5:5d:af:
1f:f9:86:f9:e6:dc:fb:9e:b0:fb:46:67:b7:a9:3e:
7d:bd:f8:da:2f:2d:43:5d:d3:e8:76:07:d0:12:38:
29:1e:64:d7:94:8e:a7:5c:99:8d:6f:51:f2:e5:90:
8b:19:5e:b9:ec:31:18:4d:cd:d1:87:02:74:89:4d:
44:d4:94:6c:31:e5:a8:b5:7d:f6:fb:b4:2a:64:43:
85:cd:2e:f4:4b:47:a8:ab:1d:9a:34:02:b4:fa:86:
89:02:a6:8c:32:79:92:72:6e:70:8c:87:f6:ae:ac:
c1:86:5b:6a:2c:67:cd:9f:39:59:04:7e:1c:43:f4:
70:89:73:50:77:75:de:fc:95:43:93:9e:ec:1f:52:
3c:e4:8d:9c:cf:eb:9e:2c:14:09:39:17:87:40:49:
46:f0:66:bd:32:e5:8a:7c:6a:e3:45:b5:27:b8:1b:
d4:e2:89:8e:9c:1b:45:d4:86:d6:59:b6:f0:da:cf:
aa:f9:66:5a:50:35:ee:04:28:c9:3c:32:6f:fe:91:
99:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:53:30:A7:C0:CF:F8:79:9F:0C:6C:2A:79:17:1F:E9:63:37:68:45
X509v3 Authority Key Identifier:
keyid:66:25:9D:EA:3E:9C:AE:6E:81:95:88:C5:C9:13:F0:2D:44:10:39:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZiWd6j6crm6BlYjFyRPwLUQQOYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/ZiWd6j6crm6BlYjFyRPwLUQQOYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/ZiWd6j6crm6BlYjFyRPwLUQQOYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:42:23:02:1d:c0:25:21:bc:2c:af:83:1d:70:76:e9:26:40:
88:80:35:e8:2f:ac:c6:ca:10:70:92:6a:0e:ad:09:38:78:5d:
53:e2:0d:b5:7e:f3:51:7c:5a:e6:cb:7a:70:e4:1b:d0:6a:2a:
7c:9b:2f:14:06:57:ea:50:40:9c:16:5a:e1:d3:6a:c5:08:3a:
03:9f:05:ef:03:64:43:f9:62:0b:b6:00:39:83:a4:e6:c8:75:
97:83:5a:0d:5e:1c:be:7c:6c:82:ce:57:e8:e4:5c:b7:f2:28:
f0:e6:3b:fb:f3:81:01:64:00:26:f4:a7:e1:10:b2:9a:e2:32:
92:4a:b2:01:8b:16:d5:68:f5:cb:82:d7:72:58:b1:30:05:fd:
5e:89:5b:b1:83:1a:63:97:28:08:01:7f:52:ed:12:68:e3:23:
69:92:d4:c2:9f:ef:f2:9c:1d:1c:04:83:23:13:83:c2:62:69:
98:97:0d:69:88:06:3a:a9:c3:ba:2e:34:e6:5b:2c:4d:2d:f9:
44:aa:41:9d:0d:c8:37:77:5a:19:16:13:46:33:e0:ec:4a:87:
22:55:0c:ae:84:5f:b1:3c:54:d1:1a:17:28:ed:f6:43:e2:8c:
88:cd:2f:b0:61:ef:8d:b6:17:7d:01:aa:2a:ee:05:f2:b5:76:
2c:5f:32:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:14:18 2025 by rpki-client