Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/e66913-8f5f-47ef-a730-32c1b2cee593/1/ZYwMSZqOadl5X0vQtb8WgrHwD5o.mft
File: ZYwMSZqOadl5X0vQtb8WgrHwD5o.mft (raw, json)
Hash identifier: 9PoXMHwc6sylxz7Nk07fD5E4he0bSchVxRCkjAe4dzY=
Subject key identifier: C3:35:E1:23:B3:31:C1:88:6B:C5:93:97:E5:B2:CA:11:D3:83:53:BC
Authority key identifier: 65:8C:0C:49:9A:8E:69:D9:79:5F:4B:D0:B5:BF:16:82:B1:F0:0F:9A
Certificate issuer: /CN=658c0c499a8e69d9795f4bd0b5bf1682b1f00f9a
Certificate serial: 0199FBEB84036677E76AAE901C6AF5638A36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZYwMSZqOadl5X0vQtb8WgrHwD5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/e66913-8f5f-47ef-a730-32c1b2cee593/1/ZYwMSZqOadl5X0vQtb8WgrHwD5o.mft
Manifest number: 0E6C
Signing time: Sun 19 Oct 2025 10:02:19 +0000
Manifest this update: Sun 19 Oct 2025 10:02:19 +0000
Manifest next update: Mon 20 Oct 2025 10:02:19 +0000
Files and hashes: 1: Hetd0acGcft4F4TkCZSRchEWHjU.roa (hash: DfxL/5EFMBfWrjWF+bprxAQN9pcVeRj5qm/6i9xfMgQ=)
2: ZYwMSZqOadl5X0vQtb8WgrHwD5o.crl (hash: kJRvAAzK7I9sZHyMbdEhlkky1CTi/15SsguHpJkKrdU=)
3: zBgovtm1ad-0i6Hlr99dwqaZZ8A.roa (hash: zlvsRotYH5pOPVXr3W3IYM5PD6gCr9N8XLSfPQUKoN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/e66913-8f5f-47ef-a730-32c1b2cee593/1/ZYwMSZqOadl5X0vQtb8WgrHwD5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/e66913-8f5f-47ef-a730-32c1b2cee593/1/ZYwMSZqOadl5X0vQtb8WgrHwD5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZYwMSZqOadl5X0vQtb8WgrHwD5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:84:03:66:77:e7:6a:ae:90:1c:6a:f5:63:8a:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=658c0c499a8e69d9795f4bd0b5bf1682b1f00f9a
Validity
Not Before: Oct 19 10:02:19 2025 GMT
Not After : Oct 20 10:02:19 2025 GMT
Subject: CN=c335e123b331c1886bc59397e5b2ca11d38353bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:25:5a:53:99:be:87:28:c6:c0:41:44:c2:16:
ef:a1:b3:09:1a:05:89:cd:22:08:b7:f4:a6:48:90:
bd:01:fb:7c:28:7c:61:75:f4:94:ad:f0:1f:70:f9:
c4:bd:ea:82:e6:65:00:2e:e9:7a:3f:08:a1:93:a6:
a1:fa:bd:02:f9:0e:a4:2b:e6:53:c6:0a:21:67:f3:
39:63:1d:c5:b6:4c:d2:1f:7c:49:0a:08:b2:00:d8:
74:54:49:65:a9:8d:17:5b:66:29:7a:4b:54:0d:84:
fd:0d:bf:b7:fb:33:5f:bd:85:5b:97:d1:15:da:a9:
6d:9d:8d:4a:c9:d1:dd:62:a7:c1:95:8b:37:01:5c:
d1:08:3f:e1:bb:06:3f:cd:b4:73:a5:1b:e7:cd:b4:
f7:a6:3a:20:fc:71:43:b2:4a:71:ff:cf:8e:c7:9d:
d0:13:bf:94:1b:da:ba:4e:21:e3:ec:6e:37:d5:f0:
08:de:08:9c:e7:b9:6e:dd:34:9a:c7:32:ad:b4:b2:
a5:98:23:dc:c1:8d:93:ed:ea:a4:c7:81:d7:7d:cb:
fd:d5:4f:8f:f6:08:35:a6:ac:64:15:31:a9:c6:98:
f1:ae:b8:e0:0f:4b:1f:f6:34:50:0e:eb:cd:d8:2e:
8e:cb:9f:b5:f8:5d:4a:4e:8e:13:27:c2:bd:9a:f1:
46:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:35:E1:23:B3:31:C1:88:6B:C5:93:97:E5:B2:CA:11:D3:83:53:BC
X509v3 Authority Key Identifier:
keyid:65:8C:0C:49:9A:8E:69:D9:79:5F:4B:D0:B5:BF:16:82:B1:F0:0F:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZYwMSZqOadl5X0vQtb8WgrHwD5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e66913-8f5f-47ef-a730-32c1b2cee593/1/ZYwMSZqOadl5X0vQtb8WgrHwD5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e66913-8f5f-47ef-a730-32c1b2cee593/1/ZYwMSZqOadl5X0vQtb8WgrHwD5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:24:76:5c:3d:b7:b9:1f:67:d9:94:96:13:d6:6d:41:36:3f:
d4:1b:db:5b:94:2f:a9:5a:74:e1:3e:7a:78:21:c7:af:76:5c:
0b:95:7b:69:0e:2e:0e:53:97:c0:f9:e1:03:bb:ed:e5:cf:a3:
85:24:eb:10:3f:68:87:df:a1:7b:5a:27:43:8c:13:93:a2:fb:
9f:92:47:50:71:c3:7d:d8:44:fc:0a:8d:41:d0:92:29:dd:43:
e9:c8:ac:0e:43:d1:5e:1c:ff:79:a8:cb:9a:b1:af:50:29:ee:
61:f6:a6:21:e7:3c:79:55:d2:33:26:77:e7:ca:f9:a2:32:f2:
9f:c4:60:3a:3c:11:6b:93:ab:ce:17:92:3a:e5:52:d6:0e:cf:
28:ec:9a:8c:40:74:57:bf:f0:3f:bc:ca:23:f3:2d:53:27:5b:
9c:1d:d7:f1:13:e7:ad:fa:a7:4d:1d:e9:aa:32:ab:11:03:65:
c5:36:f4:98:69:05:59:88:ca:6a:5f:ea:e2:5d:ba:54:82:cc:
87:4c:c7:49:7a:3b:08:62:44:c8:33:01:74:f6:80:6f:2b:df:
65:27:54:86:1b:a6:70:65:f7:0f:bb:82:f1:c3:77:73:cc:f7:
0f:1b:e8:8f:46:50:aa:96:04:9b:32:73:cb:dd:32:19:bc:f3:
dd:6b:be:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:27:30 2025 by rpki-client