Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/d1353b-fa9d-4e6e-8c22-0ab25d0b0bee/1/zejmVDmS20l1mMIueouVePiNmC8.mft
File: zejmVDmS20l1mMIueouVePiNmC8.mft (raw, json)
Hash identifier: Gyk4GaNw7RH1GyKC2EG4Na0JYJOnbHikzTJsHMfeMos=
Subject key identifier: 66:15:DD:35:FE:2C:5E:92:56:81:41:91:2E:01:88:7D:87:44:CF:B7
Authority key identifier: CD:E8:E6:54:39:92:DB:49:75:98:C2:2E:7A:8B:95:78:F8:8D:98:2F
Certificate issuer: /CN=cde8e6543992db497598c22e7a8b9578f88d982f
Certificate serial: 0199FBEBEF3EB6A5004CA06077BE2BF39278
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zejmVDmS20l1mMIueouVePiNmC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/d1353b-fa9d-4e6e-8c22-0ab25d0b0bee/1/zejmVDmS20l1mMIueouVePiNmC8.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 10:02:47 +0000
Manifest this update: Sun 19 Oct 2025 10:02:47 +0000
Manifest next update: Mon 20 Oct 2025 10:02:47 +0000
Files and hashes: 1: Y9gCH4thucbTjT0xARnAurkdlt0.roa (hash: yAFowKPItllcTMSoNXQVDZSzSIBjFl8626mwMV3sNgo=)
2: zejmVDmS20l1mMIueouVePiNmC8.crl (hash: v4aG5rcSfdbLeLu2bwCGWuDf/hpBBUWxwYl6rBh9Uok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/d1353b-fa9d-4e6e-8c22-0ab25d0b0bee/1/zejmVDmS20l1mMIueouVePiNmC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/d1353b-fa9d-4e6e-8c22-0ab25d0b0bee/1/zejmVDmS20l1mMIueouVePiNmC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zejmVDmS20l1mMIueouVePiNmC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:ef:3e:b6:a5:00:4c:a0:60:77:be:2b:f3:92:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cde8e6543992db497598c22e7a8b9578f88d982f
Validity
Not Before: Oct 19 10:02:47 2025 GMT
Not After : Oct 20 10:02:47 2025 GMT
Subject: CN=6615dd35fe2c5e92568141912e01887d8744cfb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:56:90:44:b3:7f:2a:bf:95:ed:69:70:c2:97:
d5:99:c8:16:c6:37:79:50:d0:4f:a0:cb:b8:00:04:
81:7b:8d:96:74:ff:c8:01:46:a0:f2:d5:06:28:8d:
5f:72:f9:20:d3:2b:5c:97:6f:2a:f8:0c:3c:1e:69:
96:ac:02:90:b2:b9:2f:ed:43:fe:95:d5:29:62:9d:
70:02:4c:fc:cd:e0:73:72:1e:35:19:0b:e3:33:16:
53:dc:17:ba:63:28:c6:2c:01:4a:5a:7d:c8:6e:db:
88:3a:e7:15:f1:f2:d3:86:85:ab:08:68:a6:58:6c:
71:2e:f4:ae:c9:72:b3:cf:97:f4:99:63:5b:3d:d5:
75:60:3d:a6:40:75:52:07:89:de:02:60:da:e4:20:
2f:84:dc:e2:cc:97:01:90:65:16:fe:8f:9f:56:3a:
f6:f8:61:9f:a7:f9:3d:a7:0f:2f:e8:de:a9:9b:40:
ad:03:25:5b:9e:e0:65:aa:aa:d1:26:ac:f2:83:f8:
10:b3:52:f3:e7:88:9b:dc:4f:70:40:76:04:29:d3:
6f:74:6f:37:1f:55:21:17:9d:85:1d:1c:ee:ee:4f:
d2:56:8c:d4:98:36:79:a6:a7:d2:e2:ca:83:77:0b:
a1:51:a6:25:0c:23:6e:05:d9:a9:64:c7:f4:da:c6:
a7:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:15:DD:35:FE:2C:5E:92:56:81:41:91:2E:01:88:7D:87:44:CF:B7
X509v3 Authority Key Identifier:
keyid:CD:E8:E6:54:39:92:DB:49:75:98:C2:2E:7A:8B:95:78:F8:8D:98:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zejmVDmS20l1mMIueouVePiNmC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/d1353b-fa9d-4e6e-8c22-0ab25d0b0bee/1/zejmVDmS20l1mMIueouVePiNmC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/d1353b-fa9d-4e6e-8c22-0ab25d0b0bee/1/zejmVDmS20l1mMIueouVePiNmC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:10:80:9f:9c:e5:14:01:9e:40:09:0d:f3:82:b9:c2:fe:1e:
b3:a3:55:c6:aa:d5:6e:72:0b:e2:31:7b:30:2d:d2:e9:59:38:
2b:7f:83:10:03:f5:07:de:53:a4:b7:84:48:e6:10:9d:b5:a6:
5b:47:10:fa:ca:c5:a7:54:bf:8d:ad:b1:aa:08:e8:95:ae:6b:
b9:d8:0f:b6:a4:f3:27:1b:03:34:2d:a9:c7:64:03:7b:ef:cb:
fc:14:e1:34:4d:13:4b:dc:fc:5f:4c:40:1e:8e:de:e7:c7:47:
5d:26:36:c2:3e:48:a8:7e:c9:3e:c4:b1:a9:08:0d:3c:59:90:
24:b9:86:35:df:8a:5c:08:16:a3:99:32:3e:c3:ed:a4:6a:9a:
06:04:61:1b:af:0f:1e:0f:70:e9:43:03:c0:82:a5:47:5d:d0:
79:b7:c1:7e:1c:51:f3:af:0f:59:71:f3:02:53:35:ab:2d:bb:
3a:77:e2:5e:a1:e4:da:a4:0d:95:b2:8d:39:4f:a1:7a:8f:d4:
0f:96:fb:50:65:6f:84:9f:83:a9:28:dd:f5:2b:f0:41:5b:fd:
f0:81:43:55:c7:f8:7e:d9:28:8b:32:22:e4:f2:0e:15:43:2f:
0e:44:2e:13:cf:6b:09:b7:c1:73:7e:58:01:60:37:0a:f2:8f:
dd:1d:2c:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:14:26 2025 by rpki-client