Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/b8d400-e6e8-41ef-ad24-55c3a28e62c3/1/ZgwymWrhJGGJciLi2cwJOTCSfd0.mft
File: ZgwymWrhJGGJciLi2cwJOTCSfd0.mft (raw, json)
Hash identifier: s+XkoFD5FlwZUZ/yimo7H6QweEAlzoeL4075jrm3V0Y=
Subject key identifier: 53:2B:81:3B:7E:23:F7:F9:C9:79:33:E6:1E:F7:EC:48:B0:7F:D7:DF
Authority key identifier: 66:0C:32:99:6A:E1:24:61:89:72:22:E2:D9:CC:09:39:30:92:7D:DD
Certificate issuer: /CN=660c32996ae12461897222e2d9cc093930927ddd
Certificate serial: 0199FF22C71F75C52830DEDE4B8242A640CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZgwymWrhJGGJciLi2cwJOTCSfd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/b8d400-e6e8-41ef-ad24-55c3a28e62c3/1/ZgwymWrhJGGJciLi2cwJOTCSfd0.mft
Manifest number: 16E8
Signing time: Mon 20 Oct 2025 01:01:33 +0000
Manifest this update: Mon 20 Oct 2025 01:01:33 +0000
Manifest next update: Tue 21 Oct 2025 01:01:33 +0000
Files and hashes: 1: ZgwymWrhJGGJciLi2cwJOTCSfd0.crl (hash: xv9DH1MzkYYLzd9Yg8liiC8f0k9f+yEh2/3SKGzbSNM=)
2: eTKPP1Wu3aoon8pt_QrTkfCfijI.roa (hash: 40MqBGQjbWUX+1wVm2enGIIcrfvo/5OK7+JG7rETf4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/b8d400-e6e8-41ef-ad24-55c3a28e62c3/1/ZgwymWrhJGGJciLi2cwJOTCSfd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/b8d400-e6e8-41ef-ad24-55c3a28e62c3/1/ZgwymWrhJGGJciLi2cwJOTCSfd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZgwymWrhJGGJciLi2cwJOTCSfd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:c7:1f:75:c5:28:30:de:de:4b:82:42:a6:40:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=660c32996ae12461897222e2d9cc093930927ddd
Validity
Not Before: Oct 20 01:01:33 2025 GMT
Not After : Oct 21 01:01:33 2025 GMT
Subject: CN=532b813b7e23f7f9c97933e61ef7ec48b07fd7df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:bd:bf:43:49:f0:9a:be:bf:d6:a2:d8:07:72:
da:3b:78:ac:32:60:4f:0f:d8:18:5e:ba:e0:d8:56:
24:e3:25:c7:e0:58:ef:19:a7:ed:a0:06:13:09:8e:
a1:97:ba:70:19:8e:e5:61:a6:55:a9:2d:43:c2:7c:
2e:cf:94:77:a6:8f:35:54:f8:98:7c:8c:38:c0:64:
74:ac:ad:7f:ac:6a:70:cf:2b:4d:6b:25:af:75:9f:
bb:75:4f:4a:8c:a2:eb:11:29:d8:0f:74:cc:15:5c:
05:a0:f6:7e:5b:8e:8a:19:82:80:e6:9f:bf:98:6e:
e5:f4:7f:11:60:a7:d0:ff:d5:97:8b:ab:32:8d:5a:
7e:b2:18:b4:fa:8f:83:84:5a:eb:7c:06:42:6a:ea:
ef:1d:1a:05:03:67:b5:b5:5b:8a:c5:66:99:c5:84:
7e:e1:53:5d:41:01:04:df:d4:a5:21:39:fb:e3:e4:
4b:23:9f:13:0a:51:46:ba:96:d4:4d:9f:ab:37:54:
94:54:ec:d1:8f:c7:e3:7f:a5:be:c7:15:fd:b5:1b:
1d:27:50:94:d0:fc:87:97:9a:53:64:cf:01:08:d5:
d9:2e:e1:81:cd:c1:a9:d1:5d:9b:91:4c:e7:71:07:
35:fd:8d:ee:75:92:2c:9e:01:d9:a2:74:ae:53:66:
2d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:2B:81:3B:7E:23:F7:F9:C9:79:33:E6:1E:F7:EC:48:B0:7F:D7:DF
X509v3 Authority Key Identifier:
keyid:66:0C:32:99:6A:E1:24:61:89:72:22:E2:D9:CC:09:39:30:92:7D:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZgwymWrhJGGJciLi2cwJOTCSfd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b8d400-e6e8-41ef-ad24-55c3a28e62c3/1/ZgwymWrhJGGJciLi2cwJOTCSfd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b8d400-e6e8-41ef-ad24-55c3a28e62c3/1/ZgwymWrhJGGJciLi2cwJOTCSfd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:e8:ce:b7:ce:db:1f:17:47:6e:02:93:84:a4:b7:37:aa:54:
cb:b9:c7:22:be:7b:70:4f:6c:8e:e4:50:a9:33:99:b1:65:05:
b5:4e:b8:3f:d2:17:47:32:60:44:c5:02:59:ef:0f:2e:5d:1d:
ea:2a:7e:79:c5:bb:b9:72:59:ac:96:0e:69:d1:b9:cf:78:91:
d1:ec:65:66:60:0b:f8:e2:45:af:6a:48:5c:e6:c5:f5:24:2d:
34:85:de:33:97:dc:e9:68:97:f7:63:0e:f7:1c:0d:8b:2e:43:
23:46:b0:51:13:a0:db:8e:3f:47:d7:bc:61:d5:f2:52:14:44:
8a:42:22:09:8e:fe:63:63:97:c9:45:75:22:68:55:ac:fb:b3:
c8:c8:04:ce:28:70:12:80:16:d2:8c:4f:58:db:8c:d8:0f:3e:
48:b0:f3:15:fe:b5:1f:b4:52:4c:6c:f5:cf:b3:b1:7b:ae:fa:
3c:cd:ec:e1:7a:c7:84:53:4a:05:c9:08:65:c9:70:4a:69:b7:
47:6f:03:b4:1b:70:3e:5e:c2:07:d0:31:d4:25:0a:bd:fd:c7:
13:7c:1b:5e:08:eb:9f:7b:e8:7a:8e:43:b2:7f:bd:06:5b:aa:
cf:17:72:93:d8:61:cf:5c:95:76:31:c9:a9:6e:41:8f:eb:35:
78:c2:c4:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:55:59 2025 by rpki-client