Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/6db264-73d4-43ac-a97e-590b1b2a4609/1/ZBa8chx0DBD8ew2LGzWKLTX0iLc.mft
File: ZBa8chx0DBD8ew2LGzWKLTX0iLc.mft (raw, json)
Hash identifier: NgAQMVoLsi/guQf4QdxbUnn/HJk2JhA7ryQZk8W/5IM=
Subject key identifier: F2:F8:6C:6F:66:77:EE:46:DD:47:DA:E4:4C:F0:0A:D4:C5:8C:CB:5F
Authority key identifier: 64:16:BC:72:1C:74:0C:10:FC:7B:0D:8B:1B:35:8A:2D:35:F4:88:B7
Certificate issuer: /CN=6416bc721c740c10fc7b0d8b1b358a2d35f488b7
Certificate serial: 0199FCC65EE6F63F3ED1A8B264A70651B445
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBa8chx0DBD8ew2LGzWKLTX0iLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/6db264-73d4-43ac-a97e-590b1b2a4609/1/ZBa8chx0DBD8ew2LGzWKLTX0iLc.mft
Manifest number: 0897
Signing time: Sun 19 Oct 2025 14:01:22 +0000
Manifest this update: Sun 19 Oct 2025 14:01:22 +0000
Manifest next update: Mon 20 Oct 2025 14:01:22 +0000
Files and hashes: 1: Evho_cMgUimufNWmo89VlB8ZA3M.roa (hash: 2vAp0+W0OyinQ7bz3KRWYoOM0rGntzBMfgwLVb6cFF4=)
2: GmmTJrDnl5l4oNm96pmFHnUTmtw.roa (hash: pwolnRd5ZwHSnC/gP9Agf6nFawzcw4azMTiVm2n1TBU=)
3: OTa2_ClY6w9bRnknrGzz6ZpLbY0.roa (hash: auzCJAX6dLQz9Niz6mEEUMnopgCP2rrZW6Motu990Ng=)
4: ZBa8chx0DBD8ew2LGzWKLTX0iLc.crl (hash: 10fMZpB51Nn1uqJLQjK8mlQseNZl7k8k946Bj/AUo44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/6db264-73d4-43ac-a97e-590b1b2a4609/1/ZBa8chx0DBD8ew2LGzWKLTX0iLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/6db264-73d4-43ac-a97e-590b1b2a4609/1/ZBa8chx0DBD8ew2LGzWKLTX0iLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZBa8chx0DBD8ew2LGzWKLTX0iLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 14:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:5e:e6:f6:3f:3e:d1:a8:b2:64:a7:06:51:b4:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6416bc721c740c10fc7b0d8b1b358a2d35f488b7
Validity
Not Before: Oct 19 14:01:22 2025 GMT
Not After : Oct 20 14:01:22 2025 GMT
Subject: CN=f2f86c6f6677ee46dd47dae44cf00ad4c58ccb5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8c:77:9e:cc:d9:31:52:c2:bf:ed:67:8c:a0:
1f:0c:50:08:7d:a4:3c:81:1e:e2:d4:0e:64:70:14:
2b:2c:21:95:aa:c6:ca:0c:aa:55:41:a1:cf:66:76:
3d:7d:73:cc:06:16:e0:fc:38:28:92:4d:80:76:51:
75:08:60:f9:17:86:51:4f:0c:96:af:0c:78:00:1a:
13:4c:dc:1c:d7:d3:d4:c4:a4:ae:51:da:01:90:e9:
72:45:ba:fb:90:83:17:ca:dc:56:53:51:17:81:a1:
39:f4:0b:3e:b1:e4:ea:9b:9c:60:cb:ae:77:95:c9:
2b:1b:0e:39:e1:5f:67:10:19:86:b1:17:84:f1:ea:
5e:5c:bc:54:72:7f:3c:98:7e:39:d7:6a:1e:00:cf:
c4:68:87:da:6f:f0:95:a3:e7:f8:d7:e1:b7:67:a9:
01:d3:89:ec:4f:52:a5:d9:7a:55:52:86:36:81:15:
9e:69:33:0f:06:3b:c3:1c:4e:4f:f5:b4:b3:95:ff:
db:3f:aa:18:14:df:62:79:4a:4c:d7:83:19:d1:be:
08:a3:dd:ff:f0:14:7b:db:7b:58:ed:c5:a5:b5:37:
65:47:92:69:8c:60:a8:cf:33:cf:7b:38:3d:00:4c:
39:da:c0:47:33:c8:2d:65:a8:94:2a:54:ba:c2:6e:
58:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:F8:6C:6F:66:77:EE:46:DD:47:DA:E4:4C:F0:0A:D4:C5:8C:CB:5F
X509v3 Authority Key Identifier:
keyid:64:16:BC:72:1C:74:0C:10:FC:7B:0D:8B:1B:35:8A:2D:35:F4:88:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBa8chx0DBD8ew2LGzWKLTX0iLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/6db264-73d4-43ac-a97e-590b1b2a4609/1/ZBa8chx0DBD8ew2LGzWKLTX0iLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/6db264-73d4-43ac-a97e-590b1b2a4609/1/ZBa8chx0DBD8ew2LGzWKLTX0iLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:88:87:f1:ee:f0:26:04:8f:ca:c2:70:1b:54:20:98:1b:43:
3e:ae:b5:12:dc:66:a2:37:70:39:fc:a7:3f:ec:44:b2:ee:a1:
36:f9:66:c1:07:3e:54:63:7a:87:26:a6:e9:4d:16:2d:1c:d6:
1c:2c:ca:22:ac:ef:d0:52:1c:60:b7:04:b2:02:e5:96:8b:64:
6a:62:3a:c0:92:99:d3:b8:d1:22:d6:cf:65:1e:4c:a2:bc:df:
2b:b6:df:14:95:a1:98:b0:30:97:cb:0b:af:39:cc:7f:43:af:
6c:8f:f6:c4:83:2e:18:ee:f6:1c:bc:1b:b2:06:48:ae:7b:ca:
8e:f0:eb:8e:07:10:c8:a3:24:25:db:32:15:02:35:c8:9f:21:
5d:ce:52:7d:d2:f2:b5:4b:ed:49:82:88:01:9a:aa:99:94:72:
98:7c:4a:03:b7:de:a3:6f:85:ea:81:6b:0b:d2:87:7e:b7:b7:
25:88:fe:8c:a2:68:35:2e:44:7a:99:43:90:d7:39:4b:a1:2f:
66:91:ff:64:80:21:43:cf:1b:e4:e7:5b:aa:db:d5:3c:72:1c:
fe:f6:51:e2:bc:3b:c1:8c:05:f3:7f:48:e8:6a:4f:72:9e:00:
a3:5a:6a:fc:ec:40:f2:c2:1e:1d:41:50:7f:2e:d3:0d:5f:56:
32:45:d7:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:25:53 2025 by rpki-client