Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.mft
File: zr9l4AadvMdre1VujB1wWInfJ-k.mft (raw, json)
Hash identifier: 1exqnxZ2Q7HakCgQ6p4z2Km6TmP6Jv4SjoCKRTvvdc8=
Subject key identifier: A0:72:5C:96:1B:94:BA:06:CE:00:E2:B7:DD:AA:7B:66:B3:B2:DF:F1
Authority key identifier: CE:BF:65:E0:06:9D:BC:C7:6B:7B:55:6E:8C:1D:70:58:89:DF:27:E9
Certificate issuer: /CN=cebf65e0069dbcc76b7b556e8c1d705889df27e9
Certificate serial: 0199FEEBAACB4CF9AF1542E94EC6050CBD78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zr9l4AadvMdre1VujB1wWInfJ-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.mft
Manifest number: 16F1
Signing time: Mon 20 Oct 2025 00:01:21 +0000
Manifest this update: Mon 20 Oct 2025 00:01:21 +0000
Manifest next update: Tue 21 Oct 2025 00:01:21 +0000
Files and hashes: 1: kNClGUwsPzE1RbZ5kG_8xETA5bQ.roa (hash: roFZQPowyRc/yMP0/ECMaCg3rilRHfIteyaYIvj0RIc=)
2: zr9l4AadvMdre1VujB1wWInfJ-k.crl (hash: zy/J4FUkXqcZHwAMvtlBpR4GOhN18A0HtHK9yyD29e8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/zr9l4AadvMdre1VujB1wWInfJ-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:aa:cb:4c:f9:af:15:42:e9:4e:c6:05:0c:bd:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cebf65e0069dbcc76b7b556e8c1d705889df27e9
Validity
Not Before: Oct 20 00:01:21 2025 GMT
Not After : Oct 21 00:01:21 2025 GMT
Subject: CN=a0725c961b94ba06ce00e2b7ddaa7b66b3b2dff1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:de:f0:77:32:36:58:de:5b:70:82:ef:dd:06:
4f:73:99:06:5e:85:f0:f6:c5:3a:bd:f1:23:b5:3a:
37:9b:f1:7d:df:e5:84:cc:fb:41:f5:82:38:83:43:
85:28:33:88:a4:b4:44:98:01:8d:f1:2e:aa:6e:69:
e6:e8:10:bb:ca:b7:44:47:a0:b9:cf:56:d0:40:16:
4f:b4:c8:16:ad:f8:43:19:65:96:b2:b7:a1:44:1b:
63:10:23:30:19:34:43:92:a6:66:46:62:6b:6b:e3:
99:4d:3a:fa:8e:dc:95:be:46:50:15:58:76:4a:4e:
a3:79:95:41:1c:f2:29:6a:f2:03:d8:af:40:bb:67:
44:f7:f3:38:8f:a8:4a:07:25:24:5e:28:f2:62:38:
15:3b:db:ba:c6:09:71:33:70:32:c6:22:29:0c:56:
95:92:4b:b4:b6:bf:e5:b0:eb:01:45:4c:f4:dc:5c:
41:79:da:81:cf:13:2a:eb:6a:08:80:00:75:10:48:
33:3a:37:a5:24:62:48:e9:b5:31:b8:64:ca:3f:ce:
1c:96:ab:e8:e0:c9:36:4b:86:17:67:68:c8:ed:80:
8c:6b:19:f5:ca:77:0a:bf:52:d3:5d:e1:af:e7:d1:
0e:95:0b:e0:8a:ba:08:ee:db:c2:97:9f:71:4f:f9:
25:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:72:5C:96:1B:94:BA:06:CE:00:E2:B7:DD:AA:7B:66:B3:B2:DF:F1
X509v3 Authority Key Identifier:
keyid:CE:BF:65:E0:06:9D:BC:C7:6B:7B:55:6E:8C:1D:70:58:89:DF:27:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zr9l4AadvMdre1VujB1wWInfJ-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:4c:12:bf:4f:b3:eb:cd:83:d4:42:b8:56:b8:d9:27:db:3d:
ea:03:72:54:33:20:d5:b0:38:35:3f:62:48:f4:b3:9e:de:30:
29:f2:7b:30:22:46:77:64:da:3d:0b:41:5f:4a:ad:b8:65:d9:
cb:26:8e:77:33:3e:6b:4f:0f:c9:30:b9:15:1e:71:21:f0:0d:
40:5f:d1:fb:2d:87:d3:0b:16:0a:a1:2d:ce:70:70:00:e5:32:
7c:92:eb:1b:fe:b2:1c:3a:26:03:8a:f6:58:ac:c3:0d:5f:f0:
cd:35:db:27:70:d0:55:dc:5d:bf:ea:28:70:49:cd:c0:d5:54:
59:7f:dc:30:e8:f8:a8:13:b9:04:1d:4e:78:16:d0:17:fa:00:
7e:fa:51:64:89:5b:c4:00:51:fe:d6:6d:e2:c5:eb:e1:2d:00:
67:60:f5:b9:69:d1:88:80:5e:f7:91:b8:43:b3:e8:05:60:31:
e5:9c:be:30:83:4d:35:1e:8d:3f:81:05:ff:7e:b2:47:82:21:
ef:a7:7c:95:42:cf:bd:cf:e8:7a:cd:0c:cc:94:00:ac:08:e9:
3b:94:b2:95:1d:fe:c5:4c:31:3e:18:20:c0:99:5f:7c:57:6f:
09:73:b8:71:ee:c4:6f:b1:67:bb:a7:78:b7:21:7d:b9:3e:14:
c6:22:b9:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:41:54 2025 by rpki-client