Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.mft
File: ZRaETSRdQSSiKlNrBG2oYzLQuRE.mft (raw, json)
Hash identifier: ZemeJHcrFUNzi40+o157hv6F+owgWVVBq14SKBal8b0=
Subject key identifier: 59:97:33:88:9B:6F:68:03:F8:5A:28:53:84:CA:39:5F:32:D8:B0:19
Authority key identifier: 65:16:84:4D:24:5D:41:24:A2:2A:53:6B:04:6D:A8:63:32:D0:B9:11
Certificate issuer: /CN=6516844d245d4124a22a536b046da86332d0b911
Certificate serial: 0199FAD7B9A7B0212BF497AB467C49D21112
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZRaETSRdQSSiKlNrBG2oYzLQuRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.mft
Manifest number: 075F
Signing time: Sun 19 Oct 2025 05:01:05 +0000
Manifest this update: Sun 19 Oct 2025 05:01:05 +0000
Manifest next update: Mon 20 Oct 2025 05:01:05 +0000
Files and hashes: 1: 59hx8MiVy0L5bbCsrmz6L5yJrmQ.roa (hash: tUrCnGXwIpcsX6KWOsldh7ImOj30jilIGBTNNVRq1UU=)
2: ZRaETSRdQSSiKlNrBG2oYzLQuRE.crl (hash: tp6NwhBO6+7wTLPSd3IC3y0tOpNH9v+3YVLYRT3sIVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZRaETSRdQSSiKlNrBG2oYzLQuRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d7:b9:a7:b0:21:2b:f4:97:ab:46:7c:49:d2:11:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6516844d245d4124a22a536b046da86332d0b911
Validity
Not Before: Oct 19 05:01:05 2025 GMT
Not After : Oct 20 05:01:05 2025 GMT
Subject: CN=599733889b6f6803f85a285384ca395f32d8b019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:53:b4:ec:5e:ff:1f:62:ee:e1:55:0c:83:42:
09:1e:5a:ae:68:56:9c:cc:10:4a:54:e7:76:44:83:
a4:e7:6d:0c:05:14:bf:8e:05:5d:c3:b0:a9:c2:e4:
0c:c1:c1:a6:f6:81:d6:0d:e3:92:24:5d:ee:ca:69:
93:b3:00:a1:7c:bb:e9:d0:d1:16:62:36:c4:aa:eb:
f6:03:76:64:3b:a1:99:4d:10:5c:fb:d2:02:23:9b:
89:40:0b:6b:98:8b:d7:c5:9b:2a:30:e6:62:eb:bc:
3f:5d:19:dd:4c:9b:90:12:95:a8:ef:4a:14:02:97:
a4:29:6f:65:8f:38:d1:7c:ee:32:5e:c5:51:fb:81:
2b:41:cc:82:ce:5c:db:e4:fa:4f:8e:34:c2:06:d9:
9f:35:c4:39:e1:1b:c7:30:7e:87:06:4c:d1:7b:55:
d1:92:a5:fa:52:a4:83:46:f5:ed:bd:f5:7b:01:38:
9a:3e:ea:37:27:4b:ac:ea:d0:91:79:d2:d9:84:7e:
d4:a7:2e:97:d3:ee:45:b1:01:9d:b9:5c:d3:ca:68:
78:2f:c2:f3:8d:8a:a6:9d:53:dc:7c:da:50:8f:49:
86:cb:b3:1e:5e:9a:f2:02:41:4c:fa:88:bd:3a:2d:
68:22:83:6a:91:3c:17:17:0a:58:c1:00:fd:99:1b:
f0:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:97:33:88:9B:6F:68:03:F8:5A:28:53:84:CA:39:5F:32:D8:B0:19
X509v3 Authority Key Identifier:
keyid:65:16:84:4D:24:5D:41:24:A2:2A:53:6B:04:6D:A8:63:32:D0:B9:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRaETSRdQSSiKlNrBG2oYzLQuRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:80:78:bc:30:20:f9:93:16:68:3a:83:fb:98:29:8d:57:f3:
8c:f6:e7:88:da:2b:82:3f:07:6d:67:6c:77:62:28:f6:ff:67:
89:82:94:65:74:72:83:01:c2:6b:9f:84:2c:08:3b:75:36:d2:
98:e3:ee:ed:8c:ff:de:6e:e8:41:ca:a0:f5:a9:52:8a:69:79:
19:db:bc:37:4c:bf:51:1b:57:95:4a:23:c5:6d:7f:7f:fa:51:
f7:58:dc:1c:2e:dc:1c:de:25:98:fe:07:05:17:9f:15:27:62:
25:1c:ad:28:48:49:6c:1e:77:d8:0a:d8:b2:f5:df:91:a1:06:
06:45:44:a2:fb:2a:6e:22:9d:37:86:f9:e3:66:70:d9:3f:6e:
b2:6c:57:4d:f8:e1:d9:3f:93:ea:11:7f:a8:c2:af:17:07:65:
f6:29:ab:0f:65:e1:a2:67:56:05:3a:29:46:c8:90:84:b7:64:
38:58:de:e0:36:6c:2e:27:11:43:fc:e2:d9:f2:38:93:d4:93:
8e:16:4b:50:91:31:cb:bd:5c:53:13:8a:d4:26:5f:2c:57:38:
65:42:76:d1:23:a2:0a:7e:f4:94:f0:72:e7:4c:ab:60:b4:5e:
36:17:4a:29:49:3b:29:25:74:82:91:88:a4:df:f2:20:8c:f6:
4f:6a:dc:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:10:20 2025 by rpki-client