Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.mft
File: ZRIcP5IHo3NF44cCyJ0Xm_REqgg.mft (raw, json)
Hash identifier: RGbp5xSSXmMnsICzDCdrLIIGE4GGJUqgtdz3Z/zVrjk=
Subject key identifier: D4:69:2D:A2:44:73:B7:C7:8F:43:40:7B:7D:17:A5:BE:C0:0B:AA:51
Authority key identifier: 65:12:1C:3F:92:07:A3:73:45:E3:87:02:C8:9D:17:9B:F4:44:AA:08
Certificate issuer: /CN=65121c3f9207a37345e38702c89d179bf444aa08
Certificate serial: 0199FCFD368E8F1CA55E9A5EDF65FF670E5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 15:01:16 +0000
Manifest this update: Sun 19 Oct 2025 15:01:16 +0000
Manifest next update: Mon 20 Oct 2025 15:01:16 +0000
Files and hashes: 1: Q47WtOQCnZpCmGtfa6Ew40Gy4MM.roa (hash: duMBQWWRYKd9t18S6r0lV3zHXTUBGHlTePHIZBRiz1Q=)
2: ZRIcP5IHo3NF44cCyJ0Xm_REqgg.crl (hash: MKepNGmeUh9rnoSySnuNB7JZomQGBcFxtZGtfIG2FUs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:36:8e:8f:1c:a5:5e:9a:5e:df:65:ff:67:0e:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65121c3f9207a37345e38702c89d179bf444aa08
Validity
Not Before: Oct 19 15:01:16 2025 GMT
Not After : Oct 20 15:01:16 2025 GMT
Subject: CN=d4692da24473b7c78f43407b7d17a5bec00baa51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:cf:30:18:e1:43:80:96:c0:f4:b1:7f:5a:12:
3a:cd:3d:b5:78:06:db:69:50:7d:bc:2f:f6:74:31:
6f:fc:93:53:bd:70:1b:e1:3d:9c:d5:88:cc:38:2d:
fa:47:ed:7f:15:5f:f8:01:6c:25:d8:65:9e:47:9e:
c5:d5:58:60:5d:4d:26:8b:45:95:bb:17:d5:cb:6e:
36:95:c4:7a:f2:41:a3:91:3d:6c:f1:e1:ac:7e:ee:
a0:98:95:0e:e1:da:91:0e:7d:38:ca:70:c9:b8:13:
4d:1c:22:a3:d5:fe:3a:1d:71:8f:3a:5b:e6:86:c7:
e1:fe:a9:c7:a8:57:ff:7b:7f:65:da:e3:1a:81:ec:
15:9d:79:c4:57:25:1e:c1:ff:7f:bd:d9:7d:72:18:
da:01:81:7e:64:7e:1b:cd:d2:34:67:38:92:5b:c3:
c7:fc:71:56:f5:ba:a3:03:78:18:6c:1b:50:62:b7:
b7:d8:40:3c:89:5a:4e:51:c3:71:05:4e:81:20:b0:
a7:a6:7f:b3:87:6c:b9:fc:20:49:b4:4e:05:9c:a2:
fb:ee:93:d3:7e:33:fd:fb:45:0b:b3:38:e5:2d:9b:
6d:2a:d2:c0:e2:74:5c:8f:cf:e4:9e:b5:0b:ba:05:
b9:5d:de:24:af:26:c5:4c:13:ec:89:1b:6c:de:b8:
a4:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:69:2D:A2:44:73:B7:C7:8F:43:40:7B:7D:17:A5:BE:C0:0B:AA:51
X509v3 Authority Key Identifier:
keyid:65:12:1C:3F:92:07:A3:73:45:E3:87:02:C8:9D:17:9B:F4:44:AA:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:6c:ed:ad:6b:1c:27:4a:1b:29:da:90:26:f0:b9:18:0f:5e:
b1:df:ec:31:f1:d3:08:d5:c6:a3:ad:32:f4:90:6b:f4:f6:0f:
28:5d:14:ff:4b:6f:b9:63:86:ce:f8:91:d7:f5:73:07:82:f6:
a0:9d:f2:ac:9b:63:2b:8a:4a:84:1f:6e:41:ce:66:df:4c:67:
a5:9b:8a:a6:ce:39:ea:67:87:8f:66:96:c1:37:4c:78:b9:55:
03:88:19:5d:f6:16:df:25:61:91:29:a2:18:5e:e4:3d:d8:07:
16:78:80:a0:23:dc:1b:7c:fe:e4:24:ae:18:e5:61:24:bc:73:
6b:9e:c0:ce:bc:c6:7b:de:41:d5:cb:83:ff:57:e1:59:dd:16:
1e:54:2f:e8:87:57:62:d4:98:83:e9:3a:2a:80:4c:19:6f:10:
3e:bd:cb:f5:2c:07:52:4e:60:14:77:ad:15:fe:52:23:cc:49:
66:8c:d7:35:07:1b:38:4d:ef:42:ac:14:77:a5:e5:32:4c:23:
08:39:55:6b:f4:2e:66:d6:5c:d9:ce:8b:33:60:c1:94:e6:6e:
c0:70:f2:c8:a8:5b:2e:2e:2e:20:ac:3d:40:02:3a:6f:a4:57:
33:e1:36:b6:e3:57:03:80:97:cf:01:ef:8e:4c:50:e8:79:cf:
83:40:20:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:48:29 2025 by rpki-client