Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/c27389-de12-4d13-9880-6bd844ea86c7/1/Zh5xdL-enqG2SpK6Zf_PHpMczjI.mft
File: Zh5xdL-enqG2SpK6Zf_PHpMczjI.mft (raw, json)
Hash identifier: nlM/8+haOEbiglr15Znxti1+SLd8TKzfHNskb7KIi1Q=
Subject key identifier: 89:C4:92:90:74:70:3A:C3:25:CF:5B:FC:75:27:C1:6B:47:A1:20:AF
Authority key identifier: 66:1E:71:74:BF:9E:9E:A1:B6:4A:92:BA:65:FF:CF:1E:93:1C:CE:32
Certificate issuer: /CN=661e7174bf9e9ea1b64a92ba65ffcf1e931cce32
Certificate serial: 0199FB0EF52683C35662C476E6D6974BB4B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zh5xdL-enqG2SpK6Zf_PHpMczjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/c27389-de12-4d13-9880-6bd844ea86c7/1/Zh5xdL-enqG2SpK6Zf_PHpMczjI.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 06:01:25 +0000
Manifest this update: Sun 19 Oct 2025 06:01:25 +0000
Manifest next update: Mon 20 Oct 2025 06:01:25 +0000
Files and hashes: 1: Zh5xdL-enqG2SpK6Zf_PHpMczjI.crl (hash: /gE9pS2+NXCbsbUfEW2+101NliAudPTTR3/U6ncdDpU=)
2: ul5ni49--9XUdy3GQJ4QItwk2fY.roa (hash: 5VF37divuR8ckyhjHtdEIrjaJHoOsNcFhYqFs1LGC98=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/c27389-de12-4d13-9880-6bd844ea86c7/1/Zh5xdL-enqG2SpK6Zf_PHpMczjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/c27389-de12-4d13-9880-6bd844ea86c7/1/Zh5xdL-enqG2SpK6Zf_PHpMczjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zh5xdL-enqG2SpK6Zf_PHpMczjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0e:f5:26:83:c3:56:62:c4:76:e6:d6:97:4b:b4:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=661e7174bf9e9ea1b64a92ba65ffcf1e931cce32
Validity
Not Before: Oct 19 06:01:25 2025 GMT
Not After : Oct 20 06:01:25 2025 GMT
Subject: CN=89c4929074703ac325cf5bfc7527c16b47a120af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:0f:5e:3c:55:5c:08:2b:85:79:48:a5:66:50:
7e:71:88:02:2d:c1:bc:fe:99:d5:9a:e9:45:b7:3c:
6e:dd:be:db:1f:1c:8f:2c:1b:fb:cb:58:69:7f:06:
9e:b7:4c:07:fe:43:74:e3:87:e3:45:1b:96:1f:8c:
ca:cc:65:1b:9e:b2:06:03:0e:d6:75:4c:e9:71:21:
cb:47:81:6c:0e:ba:bf:da:ea:d2:40:e5:51:e7:ba:
13:8f:2a:a1:61:7b:a9:bb:36:d5:65:78:82:9d:5d:
f6:90:bb:9f:99:39:b0:b8:ce:5b:d3:68:84:9b:f3:
3b:94:47:91:07:c7:f0:d3:bc:f9:ac:b2:18:2d:fe:
f2:e8:e2:71:12:ba:b2:e3:c6:3c:3f:0e:b2:da:a9:
19:fd:5e:38:4e:1a:6e:cc:5a:b3:d1:ec:78:c9:68:
37:0a:08:ca:cb:43:86:2a:77:91:39:24:58:44:1d:
6d:82:2c:36:c7:1c:71:db:4c:55:ab:e4:36:6e:93:
72:7b:17:66:64:a8:6d:a6:e9:78:eb:12:f6:f6:58:
9b:7e:ad:5a:97:28:fa:8b:fc:b5:77:d9:06:06:34:
e1:6e:99:ef:da:58:6e:76:ad:b2:34:37:b3:c7:81:
7e:f5:69:1f:b4:65:fb:57:33:ed:18:48:d0:dd:16:
57:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:C4:92:90:74:70:3A:C3:25:CF:5B:FC:75:27:C1:6B:47:A1:20:AF
X509v3 Authority Key Identifier:
keyid:66:1E:71:74:BF:9E:9E:A1:B6:4A:92:BA:65:FF:CF:1E:93:1C:CE:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zh5xdL-enqG2SpK6Zf_PHpMczjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c27389-de12-4d13-9880-6bd844ea86c7/1/Zh5xdL-enqG2SpK6Zf_PHpMczjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c27389-de12-4d13-9880-6bd844ea86c7/1/Zh5xdL-enqG2SpK6Zf_PHpMczjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:6d:ab:2e:3e:19:10:6e:d2:66:10:72:99:e3:27:9f:3c:da:
0a:cd:9e:78:29:6f:96:7b:68:91:4a:81:c8:68:dc:f2:57:a9:
83:94:e4:96:ba:dc:c7:bd:6f:20:73:a6:15:2a:00:43:5f:ca:
13:ce:47:5c:34:9b:3f:d1:e7:43:1d:51:26:b6:0f:d0:71:4d:
70:c4:bf:00:82:d3:7b:9a:8a:fd:79:32:6a:d2:be:a6:f3:fe:
90:82:54:42:44:25:ea:85:82:a1:fb:93:8a:40:44:b6:98:53:
6c:9f:72:f0:0a:0e:44:a4:ef:1e:8e:fb:41:c9:a9:88:d4:03:
71:32:f6:7e:bd:4f:ca:b3:77:ee:d8:1a:43:69:91:ae:88:39:
28:e5:dc:98:6e:0b:e0:77:cb:a1:60:1f:61:0a:f5:0b:0b:0b:
cc:0a:d3:94:18:d9:34:eb:fb:e7:b8:f7:c2:0a:35:8c:64:1b:
45:17:fe:8b:ba:d6:9a:44:8f:d4:11:52:db:c3:32:8d:50:eb:
bc:b9:96:e3:20:86:c1:ee:08:6e:85:ce:5d:af:a6:6e:03:b0:
48:14:d0:d0:c0:ca:bb:12:c8:f5:4e:d8:cd:75:5a:4e:14:a4:
53:e9:ac:ef:49:c8:93:0d:4d:1b:2b:f4:91:9e:f8:aa:b2:37:
6f:7c:25:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:31 2025 by rpki-client