Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/064fac-eddd-4903-a13d-0b9c76c0d91c/1/ZX7W9bumM9VSaf3QVrz2DGjHsrg.mft
File: ZX7W9bumM9VSaf3QVrz2DGjHsrg.mft (raw, json)
Hash identifier: fJuMW6vXk0UMHEQgtR42rbmpsfXhNJgWDm11fhT5IZc=
Subject key identifier: 7E:15:35:6E:17:A9:74:FD:2D:DB:DD:AC:B7:FB:55:E7:29:C4:12:36
Authority key identifier: 65:7E:D6:F5:BB:A6:33:D5:52:69:FD:D0:56:BC:F6:0C:68:C7:B2:B8
Certificate issuer: /CN=657ed6f5bba633d55269fdd056bcf60c68c7b2b8
Certificate serial: 0199FDD97F7678528DFF541AFA21B8E1ABF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZX7W9bumM9VSaf3QVrz2DGjHsrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/064fac-eddd-4903-a13d-0b9c76c0d91c/1/ZX7W9bumM9VSaf3QVrz2DGjHsrg.mft
Manifest number: 16E8
Signing time: Sun 19 Oct 2025 19:01:53 +0000
Manifest this update: Sun 19 Oct 2025 19:01:53 +0000
Manifest next update: Mon 20 Oct 2025 19:01:53 +0000
Files and hashes: 1: Wi8TeX6HlCf6UscTIz-eiQunz20.roa (hash: iC2va1BTrYFKnldJrvaufKukdaOfozas1t65U+xf85Q=)
2: ZX7W9bumM9VSaf3QVrz2DGjHsrg.crl (hash: PfexOq3PWK1BN4TMV2PASLcE8EJ+gxBtBzJzL4d13+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/064fac-eddd-4903-a13d-0b9c76c0d91c/1/ZX7W9bumM9VSaf3QVrz2DGjHsrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/064fac-eddd-4903-a13d-0b9c76c0d91c/1/ZX7W9bumM9VSaf3QVrz2DGjHsrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZX7W9bumM9VSaf3QVrz2DGjHsrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:7f:76:78:52:8d:ff:54:1a:fa:21:b8:e1:ab:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=657ed6f5bba633d55269fdd056bcf60c68c7b2b8
Validity
Not Before: Oct 19 19:01:53 2025 GMT
Not After : Oct 20 19:01:53 2025 GMT
Subject: CN=7e15356e17a974fd2ddbddacb7fb55e729c41236
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c2:61:02:0c:48:7c:93:01:5f:91:8d:e2:7a:
51:b8:1f:24:a4:30:28:d0:d4:be:63:1a:f9:65:9a:
76:58:6b:95:ed:8d:f2:1b:82:39:bd:96:f6:2d:cd:
71:ec:94:3d:7c:74:3b:aa:7f:1d:7c:90:a3:3b:3a:
7b:c8:9d:e5:47:51:9a:9a:5b:a9:8d:4b:e3:b1:aa:
d0:51:ac:ca:b4:81:c3:f0:58:b7:a2:fe:4b:41:0c:
93:51:d5:f0:aa:3a:bb:21:5c:b2:fc:5e:bb:d6:24:
38:1c:7e:73:3d:31:c9:6f:5c:12:57:4f:38:02:22:
9c:94:26:c7:1d:3e:30:05:6b:32:a9:80:f3:b8:11:
4a:61:ac:60:0a:e0:e5:d2:59:01:79:d1:94:54:ac:
e1:ef:1b:d9:5d:21:6a:7c:ce:f0:7b:a0:c0:93:c2:
c7:03:d1:b9:3b:62:8e:ec:7f:1d:b4:af:8b:4c:9a:
b4:cb:57:a5:6d:7a:a0:2c:48:b3:12:17:a3:4c:28:
3a:73:82:c4:65:ad:65:5d:4e:33:89:5d:e5:60:25:
da:66:d2:30:c6:28:f8:31:a2:86:47:49:e3:bc:e9:
e8:38:ea:3c:68:0c:f8:ca:d4:12:ac:70:16:fc:19:
6c:bf:29:17:cb:8b:ff:e1:47:5c:cb:92:d7:7f:3e:
24:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:15:35:6E:17:A9:74:FD:2D:DB:DD:AC:B7:FB:55:E7:29:C4:12:36
X509v3 Authority Key Identifier:
keyid:65:7E:D6:F5:BB:A6:33:D5:52:69:FD:D0:56:BC:F6:0C:68:C7:B2:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZX7W9bumM9VSaf3QVrz2DGjHsrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/064fac-eddd-4903-a13d-0b9c76c0d91c/1/ZX7W9bumM9VSaf3QVrz2DGjHsrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/064fac-eddd-4903-a13d-0b9c76c0d91c/1/ZX7W9bumM9VSaf3QVrz2DGjHsrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:42:31:ec:02:b0:41:53:7d:a6:07:46:43:09:b2:f1:07:86:
a3:f6:c0:9d:cd:5d:a0:f6:6b:ab:c2:e5:c7:e0:0d:a2:ed:b8:
92:ac:c8:25:b8:3d:f2:86:17:63:71:7e:3f:e3:b6:05:16:99:
8d:d5:fc:81:f8:a7:e7:af:a2:aa:b0:7b:6d:c4:2f:d5:a6:58:
e8:f0:2d:67:2c:1f:1e:bd:c5:ec:e8:98:a7:79:5a:29:45:59:
3e:49:7a:db:36:24:1d:54:7c:27:4d:50:27:ec:ea:12:9a:dd:
c6:3d:c3:72:f4:ff:da:3b:47:d4:21:70:af:c7:1c:ea:68:e5:
76:79:ab:86:79:58:29:74:63:9a:3e:ef:b3:5b:bb:3b:68:85:
23:99:f7:3f:d0:f1:c8:e8:cf:56:e2:1a:49:a5:71:ba:81:87:
8a:5b:15:e9:be:20:e4:89:c2:73:2e:94:25:3c:a2:6e:40:ab:
b0:e6:cd:24:82:b4:a9:75:ca:78:d1:71:03:1c:6c:8f:0f:22:
a8:76:96:31:a6:8d:29:ce:2a:7a:d1:fd:9b:af:7c:32:1e:29:
a5:73:92:a7:03:89:df:97:46:04:ab:48:6b:15:a2:65:e9:91:
a1:37:10:09:44:67:49:69:c8:73:34:a4:4a:e5:c2:12:3b:1c:
18:89:cf:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:38:10 2025 by rpki-client