Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/4fa2d8-d71d-49b1-8eb0-a3589da16c85/1/zh9ZrjRUgTKJL8yJsVlfmwNgGY0.mft
File: zh9ZrjRUgTKJL8yJsVlfmwNgGY0.mft (raw, json)
Hash identifier: EJ/K4455lwBMgsJZOuu9jsl6i5LBqFMwcZUHo/s8g9E=
Subject key identifier: E5:99:25:5E:0B:FD:33:C5:F5:C8:63:F6:45:BA:A8:66:D3:DF:9A:92
Authority key identifier: CE:1F:59:AE:34:54:81:32:89:2F:CC:89:B1:59:5F:9B:03:60:19:8D
Certificate issuer: /CN=ce1f59ae34548132892fcc89b1595f9b0360198d
Certificate serial: 0199FE472E3D53E5B6FF9D04EAC7D81F0678
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zh9ZrjRUgTKJL8yJsVlfmwNgGY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/4fa2d8-d71d-49b1-8eb0-a3589da16c85/1/zh9ZrjRUgTKJL8yJsVlfmwNgGY0.mft
Manifest number: 10DE
Signing time: Sun 19 Oct 2025 21:01:41 +0000
Manifest this update: Sun 19 Oct 2025 21:01:41 +0000
Manifest next update: Mon 20 Oct 2025 21:01:41 +0000
Files and hashes: 1: DnTbZNQqyk7b1Kpp-h3yl2scJwY.roa (hash: TJ12NvtCptbjwY91XKfeBV5bJZ6ugQZ1nYOaUhjOlp4=)
2: zh9ZrjRUgTKJL8yJsVlfmwNgGY0.crl (hash: cJz4Pp8QCXYGEt6XFBmK0jHWjX2wBKXfJER22L8e7YI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/4fa2d8-d71d-49b1-8eb0-a3589da16c85/1/zh9ZrjRUgTKJL8yJsVlfmwNgGY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/4fa2d8-d71d-49b1-8eb0-a3589da16c85/1/zh9ZrjRUgTKJL8yJsVlfmwNgGY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/zh9ZrjRUgTKJL8yJsVlfmwNgGY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:47:2e:3d:53:e5:b6:ff:9d:04:ea:c7:d8:1f:06:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce1f59ae34548132892fcc89b1595f9b0360198d
Validity
Not Before: Oct 19 21:01:41 2025 GMT
Not After : Oct 20 21:01:41 2025 GMT
Subject: CN=e599255e0bfd33c5f5c863f645baa866d3df9a92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:02:ee:42:25:6d:c8:05:dc:57:9d:90:a7:c9:
43:02:c9:5a:00:24:72:2a:db:a6:92:f6:60:77:bc:
c8:7a:3b:db:cd:f6:b7:f2:65:53:aa:18:7e:10:84:
ac:d4:62:0e:7e:f4:eb:ed:7a:50:73:1b:b7:9b:a5:
85:8c:15:35:7f:32:58:0f:98:3e:80:c7:be:f7:eb:
7b:c0:f3:ea:07:e8:f3:37:9b:bd:f1:3c:10:04:05:
1c:83:73:6a:b0:2e:d4:27:94:d4:28:2d:31:3b:c0:
19:48:6b:55:a7:53:89:7d:1d:cd:82:46:84:e7:2f:
45:7c:16:fc:97:61:ac:d7:bd:d4:a6:88:9d:41:4d:
51:32:a9:c3:06:8a:a9:63:8a:6d:15:f7:54:c6:05:
20:c7:99:5a:b5:2f:0a:25:63:61:f7:cc:6d:37:b3:
15:a7:41:79:78:47:6a:b6:3f:fd:05:c5:84:1d:80:
25:95:14:6b:b6:ae:3e:90:59:04:c4:bf:47:b7:33:
0b:d4:61:d4:31:3f:d5:b1:84:8f:1f:a4:13:17:0d:
8b:29:cf:4d:8a:09:49:e9:ef:9f:d5:f7:fc:7f:53:
cd:b8:45:16:20:99:f4:c5:58:da:7a:4a:a8:d5:97:
b2:9d:46:61:ae:15:9e:ea:98:84:02:10:a5:16:87:
35:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:99:25:5E:0B:FD:33:C5:F5:C8:63:F6:45:BA:A8:66:D3:DF:9A:92
X509v3 Authority Key Identifier:
keyid:CE:1F:59:AE:34:54:81:32:89:2F:CC:89:B1:59:5F:9B:03:60:19:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zh9ZrjRUgTKJL8yJsVlfmwNgGY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4fa2d8-d71d-49b1-8eb0-a3589da16c85/1/zh9ZrjRUgTKJL8yJsVlfmwNgGY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4fa2d8-d71d-49b1-8eb0-a3589da16c85/1/zh9ZrjRUgTKJL8yJsVlfmwNgGY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:59:41:e3:32:24:5c:b4:bd:38:d0:a8:63:c7:d7:2e:ec:2f:
8d:74:d6:66:56:2b:02:de:60:5c:4e:49:f8:0f:c0:0a:43:52:
1c:f9:c9:59:4f:c3:b5:ab:21:1c:ab:62:dd:40:07:2a:58:94:
08:40:14:fa:fd:b1:d9:63:b1:3c:4e:ff:ee:aa:b2:2b:b6:9a:
e2:ab:fc:eb:87:80:6b:e6:54:03:28:0d:51:f6:d2:7e:b8:74:
b8:33:93:17:68:cf:d3:46:fc:66:47:4b:7c:36:1b:6e:ba:2d:
5b:41:28:45:37:bf:4a:a7:ba:ad:bd:09:85:b8:a8:82:15:1c:
fc:24:0c:27:f9:ac:53:97:dd:d5:b0:a0:bb:b9:d9:8f:d5:09:
97:e6:7e:29:9e:30:2e:89:a0:09:54:28:34:b6:67:84:06:7c:
37:14:7c:b2:79:b9:db:6b:60:49:0a:df:0d:df:7a:b4:b2:20:
d9:c0:95:02:19:78:22:cc:24:c5:16:26:bf:66:1c:7f:27:2d:
58:49:9a:a3:b3:20:2f:f5:36:15:4e:2a:1b:a5:61:cc:0e:27:
c8:ae:7d:49:e1:14:3e:c8:fb:e7:fb:57:e7:1f:15:f4:b9:14:
1d:3b:26:ca:11:cf:af:9d:60:ef:df:83:74:c9:3d:45:d2:82:
7a:80:d5:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:59:11 2025 by rpki-client