Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/0feb89-7d8c-4300-99b5-06247a978d69/1/zJxBoSN2TPfcDy25hB9zKjuWE0M.mft
File: zJxBoSN2TPfcDy25hB9zKjuWE0M.mft (raw, json)
Hash identifier: 5wUb3Hx8n0VguM3H6YbD4kLtdx+TYaA1E2UyXg4+l2Q=
Subject key identifier: AD:AF:5A:5E:94:BF:56:0D:9D:8D:4B:61:5E:75:6D:1D:B2:53:D3:5F
Authority key identifier: CC:9C:41:A1:23:76:4C:F7:DC:0F:2D:B9:84:1F:73:2A:3B:96:13:43
Certificate issuer: /CN=cc9c41a123764cf7dc0f2db9841f732a3b961343
Certificate serial: 0199FBEAAB69E5451C6EEAEE5F8366470F9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zJxBoSN2TPfcDy25hB9zKjuWE0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/0feb89-7d8c-4300-99b5-06247a978d69/1/zJxBoSN2TPfcDy25hB9zKjuWE0M.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 10:01:24 +0000
Manifest this update: Sun 19 Oct 2025 10:01:24 +0000
Manifest next update: Mon 20 Oct 2025 10:01:24 +0000
Files and hashes: 1: B8c-KiiuWVbKdd6Eyr8wAePUEWY.roa (hash: 8i+mj8IGmve8qUZWFCAwe3JPzP0zTBzNHkZJDJW66Pg=)
2: zJxBoSN2TPfcDy25hB9zKjuWE0M.crl (hash: 45XlEu4feiuM8v2Fx7Mril+uTMA3GQr4VM4q1VisWKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/0feb89-7d8c-4300-99b5-06247a978d69/1/zJxBoSN2TPfcDy25hB9zKjuWE0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/0feb89-7d8c-4300-99b5-06247a978d69/1/zJxBoSN2TPfcDy25hB9zKjuWE0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/zJxBoSN2TPfcDy25hB9zKjuWE0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:ab:69:e5:45:1c:6e:ea:ee:5f:83:66:47:0f:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc9c41a123764cf7dc0f2db9841f732a3b961343
Validity
Not Before: Oct 19 10:01:24 2025 GMT
Not After : Oct 20 10:01:24 2025 GMT
Subject: CN=adaf5a5e94bf560d9d8d4b615e756d1db253d35f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:28:a2:8b:1b:8d:5b:d0:ce:8a:af:0d:47:dc:
e8:9c:87:f6:01:ce:51:89:c2:3e:a7:8c:ff:13:de:
e8:04:6a:3b:c6:62:29:90:d9:30:37:3a:fc:8f:5a:
c1:7f:ea:fe:04:d8:89:77:a2:2b:ab:ee:34:f7:08:
5a:5c:c9:41:0e:67:3a:03:6c:ec:25:81:e0:13:f1:
79:66:2e:67:0a:7e:d2:26:4c:80:36:bb:2e:fb:8a:
9f:c3:15:66:cf:6a:06:d4:f0:13:7b:04:95:03:14:
91:eb:da:f8:55:85:df:f8:2f:b4:4b:19:cf:e0:b9:
16:49:cd:ca:25:a3:ee:dc:eb:f0:5e:20:3c:7d:7b:
a8:e2:6b:54:8a:5a:32:fd:25:cf:c3:e6:54:e6:61:
1d:2f:b5:91:af:2a:61:06:34:e1:c5:95:d1:d5:a8:
1b:ba:18:6a:40:3d:c7:a2:ca:bd:8c:52:06:54:f6:
80:eb:d5:6f:dd:7d:59:2b:a0:bb:3e:00:5a:bc:47:
1b:df:4b:74:db:31:b6:ea:a9:34:9e:9a:86:91:03:
45:e0:c9:ca:9c:7d:03:72:8d:5a:94:b2:ff:79:b0:
74:41:83:10:80:ac:84:e3:bc:42:c7:da:eb:0d:ee:
21:88:bb:a0:d6:98:9a:78:3c:7b:38:c7:83:87:4e:
b4:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:AF:5A:5E:94:BF:56:0D:9D:8D:4B:61:5E:75:6D:1D:B2:53:D3:5F
X509v3 Authority Key Identifier:
keyid:CC:9C:41:A1:23:76:4C:F7:DC:0F:2D:B9:84:1F:73:2A:3B:96:13:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zJxBoSN2TPfcDy25hB9zKjuWE0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/0feb89-7d8c-4300-99b5-06247a978d69/1/zJxBoSN2TPfcDy25hB9zKjuWE0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/0feb89-7d8c-4300-99b5-06247a978d69/1/zJxBoSN2TPfcDy25hB9zKjuWE0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:20:23:08:12:16:5c:88:14:4f:0a:31:ec:61:16:8b:d5:28:
c0:ee:6b:f4:3e:95:3f:b6:98:14:30:e0:f4:4e:b1:16:9e:88:
dc:fb:cc:32:a3:bc:0e:06:fd:40:c9:d8:6c:92:21:52:65:d8:
b5:aa:5b:75:e9:0f:3b:ec:23:28:a0:4d:a3:90:09:01:c0:27:
4e:4b:44:d2:18:b3:5e:81:16:ab:0c:1a:9e:34:1f:83:9b:d4:
d5:99:b3:14:9f:35:8c:94:16:56:86:1c:74:00:5e:cb:95:9f:
50:34:97:77:0d:18:f2:25:c3:32:8b:df:35:a5:b0:0a:58:ee:
ff:a7:04:e8:e1:d7:2a:fb:27:8b:bc:a3:f6:b5:2e:7f:4e:1d:
da:ed:22:e5:8a:47:6c:6a:bc:f1:20:c3:0c:e2:91:8c:45:fa:
27:6c:1a:aa:9f:36:a5:1a:de:0b:ae:5e:0e:32:1c:87:00:61:
da:60:1a:f6:9c:58:9f:f3:b5:34:d0:aa:c6:e7:7a:be:ba:da:
1f:a4:d4:a3:48:92:7c:d0:4b:39:c4:4b:b8:28:21:3e:88:c0:
b1:e8:74:ba:6a:62:9d:ba:d7:92:79:ae:8a:12:cb:c8:0c:52:
4a:d2:10:7a:dc:77:91:61:97:6e:8c:42:d7:e8:58:ad:39:49:
44:9f:0d:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:09:45 2025 by rpki-client