Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/d743df-5f6f-4f17-a225-202e19c088b1/1/ZZb7iaiiPL5PKtsWXInybeireHY.mft
File: ZZb7iaiiPL5PKtsWXInybeireHY.mft (raw, json)
Hash identifier: iqKmZvKd7xVtc35R98Da25eV9LXXxfNvF+PP8Fb+gls=
Subject key identifier: 29:AA:7B:D6:5F:B9:30:41:C5:EA:90:8B:A0:08:CF:1F:F2:83:F4:E8
Authority key identifier: 65:96:FB:89:A8:A2:3C:BE:4F:2A:DB:16:5C:89:F2:6D:E8:AB:78:76
Certificate issuer: /CN=6596fb89a8a23cbe4f2adb165c89f26de8ab7876
Certificate serial: 0199FC8F7EB86D5A8E1F3E5CC852C70CDB14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZZb7iaiiPL5PKtsWXInybeireHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/d743df-5f6f-4f17-a225-202e19c088b1/1/ZZb7iaiiPL5PKtsWXInybeireHY.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 13:01:26 +0000
Manifest this update: Sun 19 Oct 2025 13:01:26 +0000
Manifest next update: Mon 20 Oct 2025 13:01:26 +0000
Files and hashes: 1: E_L2oklniQj05pWuM0xgBEBv9Z0.roa (hash: vggfw58sjlCL17O/pPVvpJxnAr4298gihw1aekiLNHY=)
2: ZZb7iaiiPL5PKtsWXInybeireHY.crl (hash: 1MR+5+ygvDbamKZUqj3DVlenrEhmWJIiuxvxOGGBW6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/d743df-5f6f-4f17-a225-202e19c088b1/1/ZZb7iaiiPL5PKtsWXInybeireHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/d743df-5f6f-4f17-a225-202e19c088b1/1/ZZb7iaiiPL5PKtsWXInybeireHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZZb7iaiiPL5PKtsWXInybeireHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:7e:b8:6d:5a:8e:1f:3e:5c:c8:52:c7:0c:db:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6596fb89a8a23cbe4f2adb165c89f26de8ab7876
Validity
Not Before: Oct 19 13:01:26 2025 GMT
Not After : Oct 20 13:01:26 2025 GMT
Subject: CN=29aa7bd65fb93041c5ea908ba008cf1ff283f4e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d0:51:ca:9b:e4:f0:ed:4e:d3:04:c8:46:58:
6f:c2:b2:9a:4c:3a:f8:d6:13:76:19:a0:8f:65:1e:
98:b1:96:09:cc:56:59:9b:7a:40:b7:46:b3:70:31:
6f:47:56:2a:36:81:04:16:02:30:eb:6d:d1:89:fd:
0e:6e:56:50:88:5e:b7:d5:50:c4:49:5d:3d:9b:ec:
61:15:77:98:9d:31:0b:f6:46:3e:96:f8:0f:32:62:
c8:e7:74:d0:71:71:69:87:f4:99:06:ec:41:70:9e:
5c:85:e6:d9:0e:ab:71:3c:e9:e4:69:13:71:16:a4:
7d:05:ae:b0:5f:26:04:ba:77:aa:c9:ab:29:37:af:
88:88:b8:2d:0b:73:32:b8:ac:34:53:5e:65:d9:32:
48:fb:14:1a:cb:64:c5:cc:07:c6:f3:dd:74:13:44:
13:0c:d3:cc:8f:a3:36:77:f1:73:d1:f0:74:fe:14:
11:7e:a6:31:13:22:78:15:c2:49:19:f9:b8:56:fa:
02:e5:a9:f2:21:8a:72:b2:da:0a:af:a6:3a:0b:45:
68:bc:41:82:79:e9:e6:00:2c:c8:02:27:31:04:02:
ca:cc:ea:81:ad:f9:99:1d:a8:0b:33:d5:26:1b:30:
1f:41:13:e5:7d:6d:c0:c6:46:f8:87:63:47:c0:63:
37:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:AA:7B:D6:5F:B9:30:41:C5:EA:90:8B:A0:08:CF:1F:F2:83:F4:E8
X509v3 Authority Key Identifier:
keyid:65:96:FB:89:A8:A2:3C:BE:4F:2A:DB:16:5C:89:F2:6D:E8:AB:78:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZb7iaiiPL5PKtsWXInybeireHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/d743df-5f6f-4f17-a225-202e19c088b1/1/ZZb7iaiiPL5PKtsWXInybeireHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/d743df-5f6f-4f17-a225-202e19c088b1/1/ZZb7iaiiPL5PKtsWXInybeireHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:c9:36:38:af:13:55:e3:b4:eb:0b:5c:d4:06:83:12:1e:3e:
de:c0:12:00:00:d6:45:39:5b:02:2f:7c:9a:b8:96:53:d6:6a:
ed:13:a2:94:9d:0f:d0:7c:4d:b3:92:47:52:3d:55:87:30:a6:
e0:84:ed:07:0d:62:2c:dc:ea:04:9e:02:c3:1f:d5:1e:d0:bc:
9a:b5:5d:84:9b:4c:2f:12:3e:96:6e:ef:e5:fd:62:4f:d8:25:
93:8d:4f:be:44:9b:64:b5:ae:ca:69:43:af:d5:8b:b8:31:7c:
e1:64:e5:27:75:cb:1a:2f:7a:e4:99:b7:f8:39:ef:aa:b0:f9:
fe:07:a8:22:ba:9d:88:f8:56:07:6d:e0:5b:ab:64:6b:d3:b5:
f1:c7:14:ab:2f:14:18:ae:7a:24:79:fd:52:c0:70:36:13:2d:
63:e8:ad:43:14:54:fe:50:a5:78:6d:75:b2:28:d4:ec:5f:70:
cc:74:9f:e8:4a:ed:8f:8a:55:f3:d9:0b:11:4b:0b:c4:3d:20:
52:db:9d:27:2c:cd:da:a9:2c:32:cc:1c:fb:0e:f9:37:4b:8a:
3d:91:b1:07:81:ad:ba:ec:0a:ae:f7:7f:fc:ea:b7:79:b3:21:
7b:c3:3b:ba:f9:ca:a7:e2:92:c7:4c:bc:6b:44:c6:f3:b8:8e:
20:6b:2a:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:23 2025 by rpki-client