Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0d3b13-c4a1-41c0-a839-aede3ffa4457/1/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.mft
File: ZYKQ_pgU_LBiq3HjLsH5bamXOjM.mft (raw, json)
Hash identifier: W0F75qApfzMImOj+iHS9iRBYomQWccyFP8ii4bqEW38=
Subject key identifier: 69:62:30:C8:37:04:94:1B:85:5A:1D:47:59:EC:83:C4:EC:81:92:E8
Authority key identifier: 65:82:90:FE:98:14:FC:B0:62:AB:71:E3:2E:C1:F9:6D:A9:97:3A:33
Certificate issuer: /CN=658290fe9814fcb062ab71e32ec1f96da9973a33
Certificate serial: 0199FC21CC82408072B891A6060D8EC44537
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0d3b13-c4a1-41c0-a839-aede3ffa4457/1/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 11:01:37 +0000
Manifest this update: Sun 19 Oct 2025 11:01:37 +0000
Manifest next update: Mon 20 Oct 2025 11:01:37 +0000
Files and hashes: 1: CHPWlUWLkhhN8KqcQvdgSIi7nSQ.roa (hash: oTR4o/Lu/P2pP/jqKMJRfshRV5ap+zULnMucNhK6ij0=)
2: D4kPuzxI99LO9za1uzpIOKYzyZk.roa (hash: c+Ehw1XN1UBVbiuLbeIY9bu5RDnn9bT1POuqZJ3ek+g=)
3: ZYKQ_pgU_LBiq3HjLsH5bamXOjM.crl (hash: TXYw4zHlevHiS2ivRskQJHQHLDSv8s1goKnSMuPPd7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/0d3b13-c4a1-41c0-a839-aede3ffa4457/1/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/0d3b13-c4a1-41c0-a839-aede3ffa4457/1/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:cc:82:40:80:72:b8:91:a6:06:0d:8e:c4:45:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=658290fe9814fcb062ab71e32ec1f96da9973a33
Validity
Not Before: Oct 19 11:01:37 2025 GMT
Not After : Oct 20 11:01:37 2025 GMT
Subject: CN=696230c83704941b855a1d4759ec83c4ec8192e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ed:87:93:e5:48:60:6a:e7:d4:f0:0c:d1:76:
dc:64:2b:07:c6:43:e3:df:3c:bc:b0:9e:4d:d5:ce:
3f:12:62:72:74:d7:43:97:58:cd:03:b6:09:99:e6:
e8:44:a6:03:2b:64:90:d6:09:26:cc:8b:15:dd:b5:
fe:95:52:85:9a:ef:79:9e:78:1c:3e:ce:23:b6:b7:
fb:a0:b8:69:7a:ee:37:b3:5c:9d:61:15:95:74:06:
bb:cc:e4:b2:4e:43:c1:4f:81:26:15:21:0e:0d:b1:
fe:e5:bf:d4:79:d2:2d:a8:33:63:78:f2:88:b5:ec:
f3:96:2e:0e:9c:11:98:2c:96:64:ee:3c:8a:d3:72:
a7:d3:4e:cd:b9:52:18:d7:67:31:9f:fb:f9:51:3d:
eb:8a:e5:17:52:42:db:9c:53:2f:11:32:6e:49:1c:
0e:11:f9:3c:23:90:29:1f:c0:90:f5:6e:ae:83:59:
05:d6:ec:75:5c:2f:9e:47:3a:c1:96:c0:cd:be:b6:
34:cc:f5:38:84:fb:48:24:a1:e7:43:0d:fd:cb:91:
aa:20:ec:43:2d:3f:55:8d:be:5a:1c:fa:c9:a5:56:
c9:73:c7:c5:34:3c:88:52:d9:0f:d7:74:99:c5:f1:
cd:ca:6e:f8:9a:ec:f9:2f:c5:cc:58:38:e2:66:54:
5d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:62:30:C8:37:04:94:1B:85:5A:1D:47:59:EC:83:C4:EC:81:92:E8
X509v3 Authority Key Identifier:
keyid:65:82:90:FE:98:14:FC:B0:62:AB:71:E3:2E:C1:F9:6D:A9:97:3A:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d3b13-c4a1-41c0-a839-aede3ffa4457/1/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d3b13-c4a1-41c0-a839-aede3ffa4457/1/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:7e:ac:d8:84:c2:d8:bd:ba:8b:d8:96:bc:7b:bb:5e:7c:ba:
a9:29:fe:cc:ec:c2:5e:72:11:d9:8c:5c:04:f5:d2:ab:e3:b4:
08:70:5a:cb:ff:98:67:b0:76:c9:cf:8c:4e:51:6c:71:ed:a9:
7b:bc:ee:af:a8:4e:e4:85:58:41:9a:0f:a3:eb:62:57:15:85:
3e:47:7b:de:77:df:0c:3f:b3:12:1d:1f:a2:73:6f:17:85:e0:
25:8e:ce:f7:6e:90:a8:02:c2:01:18:c8:15:31:a8:49:23:ca:
ab:ec:c5:75:de:49:0e:2e:e6:a7:25:21:b6:36:d7:da:ad:75:
e7:d6:2f:43:24:33:46:99:27:23:19:34:af:3f:92:7f:df:2a:
f8:de:3a:fa:27:da:08:42:f4:15:21:cc:15:f0:22:57:2d:cf:
56:33:8e:3a:a0:54:28:4f:09:f8:5f:be:02:4a:b5:47:b0:49:
13:4e:17:3a:79:5a:b0:65:10:aa:00:95:6a:8a:d6:7b:54:91:
c5:15:7f:e8:53:2b:47:b9:5c:26:69:cb:f4:3c:80:83:7f:96:
74:72:56:c2:7c:e0:a3:8d:71:1b:71:d1:4e:c0:04:4f:bd:a0:
dd:51:56:e2:74:9e:58:f3:f6:89:02:7d:b4:c5:b3:29:46:e4:
32:e1:0b:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:00:44 2025 by rpki-client