Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/cae548-c3e1-4571-9a0b-145e95e8a7be/1/ZC8kHMyieCtfxAfhu696l6mEdGA.mft
File: ZC8kHMyieCtfxAfhu696l6mEdGA.mft (raw, json)
Hash identifier: QPtYjPfkFZeCfLmi+uyp4U8CCnjj6XgyGOsIET5oEwY=
Subject key identifier: D5:4F:86:25:1D:4F:6A:6C:7A:29:ED:D5:78:F8:A8:D6:29:34:88:A7
Authority key identifier: 64:2F:24:1C:CC:A2:78:2B:5F:C4:07:E1:BB:AF:7A:97:A9:84:74:60
Certificate issuer: /CN=642f241ccca2782b5fc407e1bbaf7a97a9847460
Certificate serial: 0199FBEB5AC8D7A30224B188501BEDD8653F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZC8kHMyieCtfxAfhu696l6mEdGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/cae548-c3e1-4571-9a0b-145e95e8a7be/1/ZC8kHMyieCtfxAfhu696l6mEdGA.mft
Manifest number: 0816
Signing time: Sun 19 Oct 2025 10:02:09 +0000
Manifest this update: Sun 19 Oct 2025 10:02:09 +0000
Manifest next update: Mon 20 Oct 2025 10:02:09 +0000
Files and hashes: 1: O6G70f_k228z-ZHm2ohB4tt-ekc.roa (hash: /bGnkVKQw6cLnt6o6jgq/vbGsus5bIRs/NypwJUrJ1g=)
2: ZC8kHMyieCtfxAfhu696l6mEdGA.crl (hash: 7k9kOulCKga7hVfMvVZbbW5vIim1xk1mYt/lmDe5krs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/cae548-c3e1-4571-9a0b-145e95e8a7be/1/ZC8kHMyieCtfxAfhu696l6mEdGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/cae548-c3e1-4571-9a0b-145e95e8a7be/1/ZC8kHMyieCtfxAfhu696l6mEdGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZC8kHMyieCtfxAfhu696l6mEdGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:5a:c8:d7:a3:02:24:b1:88:50:1b:ed:d8:65:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=642f241ccca2782b5fc407e1bbaf7a97a9847460
Validity
Not Before: Oct 19 10:02:09 2025 GMT
Not After : Oct 20 10:02:09 2025 GMT
Subject: CN=d54f86251d4f6a6c7a29edd578f8a8d6293488a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6b:3b:00:b8:cd:cd:e7:af:25:b7:1f:84:82:
65:7f:d0:aa:7d:89:59:12:1e:f3:9a:62:51:db:88:
79:83:d6:bc:ca:32:40:01:78:bf:7f:8c:42:07:35:
0c:63:5b:83:67:1a:64:ca:29:32:73:bf:4d:f5:21:
fe:e3:9e:e8:f4:20:8c:64:9d:8e:9c:e7:4a:cb:a5:
bb:3e:bc:6a:90:b2:33:77:fd:e9:47:54:24:57:71:
ce:82:46:89:0e:b9:2f:04:58:f5:11:26:1c:6a:fb:
eb:37:98:0f:37:18:18:32:ff:c2:8f:03:98:9d:6c:
52:4f:bf:f3:43:8b:36:b0:17:b5:99:bd:42:aa:05:
ad:1d:41:f3:e2:4d:2b:5f:6c:93:29:6e:b3:24:a5:
dd:0e:2f:52:5f:d2:96:25:ad:6e:c9:2d:3b:57:a0:
83:5d:1d:9b:eb:f1:ed:52:50:ad:c4:5f:fd:6e:2d:
88:96:cd:4f:9c:22:f7:50:40:6f:50:06:cd:74:93:
5d:24:d0:01:34:45:6b:34:5a:36:0b:2e:23:76:2b:
38:b6:ee:5b:12:b9:76:4c:00:24:6b:a5:5e:db:38:
32:4a:d0:aa:3f:c7:2a:4d:ac:ac:80:6d:53:aa:57:
3f:4d:26:ca:05:2a:e6:53:c9:45:b6:ea:7c:31:5d:
28:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:4F:86:25:1D:4F:6A:6C:7A:29:ED:D5:78:F8:A8:D6:29:34:88:A7
X509v3 Authority Key Identifier:
keyid:64:2F:24:1C:CC:A2:78:2B:5F:C4:07:E1:BB:AF:7A:97:A9:84:74:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZC8kHMyieCtfxAfhu696l6mEdGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/cae548-c3e1-4571-9a0b-145e95e8a7be/1/ZC8kHMyieCtfxAfhu696l6mEdGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/cae548-c3e1-4571-9a0b-145e95e8a7be/1/ZC8kHMyieCtfxAfhu696l6mEdGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:32:94:18:1d:e1:1e:90:e4:20:fa:c0:28:91:d8:45:d6:1a:
d9:a5:d3:26:fb:ea:3b:2f:01:3d:95:9f:fa:bd:30:90:9e:85:
f6:9a:7c:11:e9:3c:cc:55:9e:8b:4d:5e:6f:91:d9:66:07:0e:
f3:86:c1:26:a8:54:75:71:a5:06:1e:1b:2d:a7:e7:69:e3:30:
6d:d0:14:48:1c:eb:2b:93:2b:60:84:a8:ba:f0:6c:77:89:53:
d3:fe:3b:97:02:d3:72:ed:ae:53:21:1e:fb:20:4c:37:69:24:
59:24:67:b2:d8:17:75:7c:31:da:8c:14:cf:80:37:6f:8a:25:
91:2e:d9:5b:8e:c8:fe:27:79:6a:01:d9:28:e8:ff:90:9a:04:
71:de:da:67:43:bd:f5:d4:27:19:14:bc:1c:6d:16:29:f2:b1:
1e:ea:54:87:d7:fe:30:e6:38:17:3e:89:ec:3e:3e:bb:17:af:
8d:1a:60:db:ad:03:bd:c3:9f:44:6b:d6:49:83:ed:dc:b6:ae:
50:eb:58:06:eb:05:d8:65:1e:68:ca:02:0d:56:50:8f:26:22:
39:96:64:86:11:0d:99:d4:e2:50:00:fa:0b:2c:72:84:aa:5c:
78:4b:67:ed:d6:34:d8:52:b8:66:eb:ad:15:6e:00:35:5e:82:
3e:d9:89:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:58:29 2025 by rpki-client