Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/c095fc-d573-4ad9-9e2e-bd86d4b32c58/1/ZbEopa3LzN8Vy5ea1qvyuWQP29s.mft
File: ZbEopa3LzN8Vy5ea1qvyuWQP29s.mft (raw, json)
Hash identifier: Uz4tacxQVqFUnbRBAXCFTHn4Zb66ySWqC9wTbq3jAqU=
Subject key identifier: 9B:9C:2A:0A:57:0C:B3:8C:AD:2E:6A:F7:59:CE:99:E1:FA:55:C7:3E
Authority key identifier: 65:B1:28:A5:AD:CB:CC:DF:15:CB:97:9A:D6:AB:F2:B9:64:0F:DB:DB
Certificate issuer: /CN=65b128a5adcbccdf15cb979ad6abf2b9640fdbdb
Certificate serial: 0199FCFD2CCDEC1242DC89CA0A9BBE164514
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbEopa3LzN8Vy5ea1qvyuWQP29s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/c095fc-d573-4ad9-9e2e-bd86d4b32c58/1/ZbEopa3LzN8Vy5ea1qvyuWQP29s.mft
Manifest number: 04CA
Signing time: Sun 19 Oct 2025 15:01:14 +0000
Manifest this update: Sun 19 Oct 2025 15:01:14 +0000
Manifest next update: Mon 20 Oct 2025 15:01:14 +0000
Files and hashes: 1: TbjsUDhMP9oiyRFzkMf_XEJ0_gs.roa (hash: N0QojbQjnjXATXQxNe2ZVC9V9rik44C7TlWbUv97jVE=)
2: ZbEopa3LzN8Vy5ea1qvyuWQP29s.crl (hash: +l+Py/J83Ni34dV9AAFHXCVNS1fk3wwGA14HmXwcMmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/c095fc-d573-4ad9-9e2e-bd86d4b32c58/1/ZbEopa3LzN8Vy5ea1qvyuWQP29s.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/c095fc-d573-4ad9-9e2e-bd86d4b32c58/1/ZbEopa3LzN8Vy5ea1qvyuWQP29s.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZbEopa3LzN8Vy5ea1qvyuWQP29s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:2c:cd:ec:12:42:dc:89:ca:0a:9b:be:16:45:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65b128a5adcbccdf15cb979ad6abf2b9640fdbdb
Validity
Not Before: Oct 19 15:01:14 2025 GMT
Not After : Oct 20 15:01:14 2025 GMT
Subject: CN=9b9c2a0a570cb38cad2e6af759ce99e1fa55c73e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:15:12:a6:23:9f:25:1e:19:66:82:4f:68:dc:
80:69:47:b2:b5:0d:16:33:c0:b0:b4:7d:c8:e2:cb:
2d:a9:f0:c3:ea:19:8c:63:5c:a5:21:eb:00:31:b5:
07:aa:6d:57:d7:02:82:e6:1f:22:21:13:f5:0f:50:
3a:a8:f8:f4:a5:81:8c:2f:86:6a:6a:d5:e7:94:d2:
8a:82:e6:cc:d3:3b:3f:e2:ed:72:4d:cf:88:1d:52:
25:b9:b7:03:1c:55:37:a0:3f:b6:77:c7:b2:ed:c4:
05:7b:d8:c4:31:a4:b2:2f:0d:e7:d8:28:75:a8:b1:
f5:6a:f2:0d:bd:d5:08:77:61:13:7e:bc:0e:87:8b:
84:62:38:d2:90:ef:66:ff:d3:bb:ae:da:b1:fe:28:
1e:32:67:61:80:2e:b8:b5:e3:70:43:39:fe:ab:48:
4a:e5:05:e4:aa:93:c3:87:c6:d3:88:e4:ab:6e:d7:
bc:df:01:74:49:8b:35:42:9c:98:5a:55:60:65:cd:
f8:6f:3d:52:68:6c:0a:94:bd:01:67:b0:d5:1a:09:
af:bc:68:a8:03:be:f7:45:bd:27:24:52:f3:db:87:
12:9f:04:26:1a:36:83:b5:5e:bf:fd:ff:16:59:d1:
2c:f0:94:31:4a:4e:ef:45:04:26:d7:a3:1a:b5:22:
a6:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:9C:2A:0A:57:0C:B3:8C:AD:2E:6A:F7:59:CE:99:E1:FA:55:C7:3E
X509v3 Authority Key Identifier:
keyid:65:B1:28:A5:AD:CB:CC:DF:15:CB:97:9A:D6:AB:F2:B9:64:0F:DB:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbEopa3LzN8Vy5ea1qvyuWQP29s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c095fc-d573-4ad9-9e2e-bd86d4b32c58/1/ZbEopa3LzN8Vy5ea1qvyuWQP29s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c095fc-d573-4ad9-9e2e-bd86d4b32c58/1/ZbEopa3LzN8Vy5ea1qvyuWQP29s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:04:41:6b:a9:b4:0b:5f:ec:b8:2c:41:06:88:7d:c3:61:26:
5a:a0:90:d9:fc:72:d5:f7:ad:8b:29:04:ba:8f:23:d6:df:76:
94:93:20:f1:8e:4b:76:ea:a5:0e:a2:2d:1b:4e:1f:76:33:e9:
ab:da:6d:b8:53:ba:37:6c:e7:a0:42:18:b6:e7:7e:be:d1:19:
4d:c6:0e:ee:ed:9f:24:f8:5b:31:cc:48:ac:f6:b3:b9:b8:3b:
eb:bd:79:51:ea:9e:23:b7:d4:fb:4d:9b:eb:3c:19:c4:b7:b3:
37:59:57:ad:54:2c:5e:3b:c6:de:80:c9:cc:c6:8a:1f:a7:8d:
c0:55:7a:9d:6c:e4:98:58:36:ea:6e:76:bc:cb:95:23:92:74:
31:1a:86:38:aa:b8:74:d0:cf:17:62:16:74:fe:59:35:de:21:
ed:9c:47:68:84:e1:5c:56:3a:d9:60:1b:f5:0c:cf:f0:4c:ad:
b5:6f:dc:bf:4c:7c:3a:34:be:65:34:77:42:9c:0f:5e:a3:6e:
a8:b7:cb:a0:26:97:17:4d:3b:3c:d1:88:65:97:a3:4f:ed:22:
1d:28:10:f1:af:51:f4:c9:c6:6d:7d:ba:ec:66:8b:9d:77:9f:
cf:82:c1:c8:6b:d2:9d:b9:40:98:dd:ba:e4:4c:94:59:b0:9b:
c9:d1:9f:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 19:54:31 2025 by rpki-client