Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.mft
File: zPmm0vbNWIp39CNiLmuNHGVLzfI.mft (raw, json)
Hash identifier: nVr6WYMDQjjhx6b7kaslT2zeOY4mZWRiECXajcjAoh4=
Subject key identifier: 76:73:7D:F5:F8:46:87:D2:BD:EE:45:72:BD:02:AF:3E:EB:18:00:93
Authority key identifier: CC:F9:A6:D2:F6:CD:58:8A:77:F4:23:62:2E:6B:8D:1C:65:4B:CD:F2
Certificate issuer: /CN=ccf9a6d2f6cd588a77f423622e6b8d1c654bcdf2
Certificate serial: 0199FDD91EC655E6563B65E4A4B1FB2DCF53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zPmm0vbNWIp39CNiLmuNHGVLzfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 19:01:28 +0000
Manifest this update: Sun 19 Oct 2025 19:01:28 +0000
Manifest next update: Mon 20 Oct 2025 19:01:28 +0000
Files and hashes: 1: 8AaX1oZur1xLUT7FOH4w1HiClyE.roa (hash: ZmZVR5duIhKlHeRuLvV8xQewe9xOIP6Io6cn8nsn8x0=)
2: x51a-tBphj5oeqxqtMYJ9_3xAwg.roa (hash: dokuT2vkCwkEoIqbgmJLQO0fZKjjInT+5d9CuE+kfOE=)
3: zPmm0vbNWIp39CNiLmuNHGVLzfI.crl (hash: 7/dWI669EGUxIkVaMZ32ddNynt8Yky2+S/kIDotHifE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zPmm0vbNWIp39CNiLmuNHGVLzfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:1e:c6:55:e6:56:3b:65:e4:a4:b1:fb:2d:cf:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccf9a6d2f6cd588a77f423622e6b8d1c654bcdf2
Validity
Not Before: Oct 19 19:01:28 2025 GMT
Not After : Oct 20 19:01:28 2025 GMT
Subject: CN=76737df5f84687d2bdee4572bd02af3eeb180093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ce:94:a5:19:a5:1f:65:f2:50:86:98:da:82:
6b:51:3f:2e:46:2f:f6:bc:7d:cc:77:96:db:48:c4:
c0:a8:83:d4:28:b8:ef:6e:e8:11:9d:78:21:e9:3b:
38:4f:e1:f5:69:7d:44:55:ef:87:3f:48:1c:e6:7d:
ea:b9:91:53:43:32:cc:12:c2:c4:91:cc:ed:8d:cc:
5a:6b:1c:c1:f7:a7:80:1c:42:74:64:05:41:a3:9e:
51:62:97:cd:89:f1:60:05:ab:9c:cc:d6:6e:4b:d9:
d5:44:c6:8c:df:36:4d:dc:88:fa:38:a4:8e:07:fa:
cc:01:88:19:1f:b7:ca:6d:fa:53:99:d0:f9:0d:99:
9c:ea:91:6a:e7:2d:5e:f9:3c:8a:f2:7f:ed:b2:9d:
58:0f:45:63:27:a0:83:08:e9:c4:bf:ae:b6:18:b6:
58:22:e9:b8:4d:43:ba:ca:4d:a3:74:2d:5c:07:38:
ed:3f:4b:90:71:00:d9:85:dc:c6:0b:b0:ad:31:f9:
f3:61:b8:11:61:6a:9c:8a:af:fa:06:cd:36:d0:a2:
a4:e6:9f:45:bd:64:5f:a3:ff:1b:5f:44:04:d0:c4:
3c:9a:3b:b0:fe:d4:ac:3a:d4:e0:e4:dd:44:fc:bd:
a7:0c:28:58:14:50:e6:fd:02:1d:85:af:07:85:9f:
2b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:73:7D:F5:F8:46:87:D2:BD:EE:45:72:BD:02:AF:3E:EB:18:00:93
X509v3 Authority Key Identifier:
keyid:CC:F9:A6:D2:F6:CD:58:8A:77:F4:23:62:2E:6B:8D:1C:65:4B:CD:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zPmm0vbNWIp39CNiLmuNHGVLzfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:9d:36:c2:88:03:46:39:06:e6:20:0a:79:e5:ae:a2:65:5b:
1b:9d:3a:0e:23:2f:50:16:cd:82:21:ad:c5:3e:da:5a:6b:f8:
4f:01:80:47:28:16:ae:aa:c3:61:62:5e:6c:bb:38:80:a4:83:
56:e3:71:c7:f8:4f:45:94:66:29:bd:8b:5c:4b:d0:f6:7e:84:
8c:44:28:b6:b9:e2:c0:16:bd:89:b9:64:08:94:fe:6d:2c:91:
8b:34:d0:98:06:b8:f5:a4:e4:bb:6c:8e:f3:82:90:30:0f:8b:
14:1b:e6:49:29:a5:a2:41:c6:0e:78:13:a0:d2:50:ba:95:df:
3d:76:e5:7c:f3:af:a3:66:16:c1:81:ac:7b:e0:90:06:b0:8c:
b6:bd:4e:82:9d:1e:21:24:a9:67:a1:40:5a:81:22:9c:b1:c2:
3f:b3:00:bf:e1:39:af:26:f7:93:14:31:dd:d6:f9:50:06:41:
79:d1:22:b9:82:b3:f1:cd:db:2f:98:95:e0:89:51:74:fb:5f:
61:2f:69:33:c0:f0:9d:eb:12:ee:1c:23:91:5d:7a:b6:64:af:
11:1e:b4:90:d6:8b:97:16:48:ce:1a:0d:62:11:bf:ce:05:2b:
a1:dc:28:06:59:0b:ea:81:97:80:2e:08:ac:c8:21:9f:0b:7e:
0f:af:e8:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:44:00 2025 by rpki-client