Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/452c2b-f2cf-4a92-a1cd-f0198c6c2474/1/Zpauprq3nEj13e5KRr9Ktk2GMWA.mft
File: Zpauprq3nEj13e5KRr9Ktk2GMWA.mft (raw, json)
Hash identifier: IV/PrT+gPLDJ/jyjIAAlei8kKRkuL8zJ8V2oUexxims=
Subject key identifier: 29:D1:B2:33:2C:DD:23:1E:BB:62:FB:C7:70:0B:59:ED:CD:C7:BC:BF
Authority key identifier: 66:96:AE:A6:BA:B7:9C:48:F5:DD:EE:4A:46:BF:4A:B6:4D:86:31:60
Certificate issuer: /CN=6696aea6bab79c48f5ddee4a46bf4ab64d863160
Certificate serial: 0199FEEC16472779B4A4CE1B141437F60501
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zpauprq3nEj13e5KRr9Ktk2GMWA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/452c2b-f2cf-4a92-a1cd-f0198c6c2474/1/Zpauprq3nEj13e5KRr9Ktk2GMWA.mft
Manifest number: 16F0
Signing time: Mon 20 Oct 2025 00:01:48 +0000
Manifest this update: Mon 20 Oct 2025 00:01:48 +0000
Manifest next update: Tue 21 Oct 2025 00:01:48 +0000
Files and hashes: 1: 7xOVAQAhGxaXhRVB4CbcZXKNaLc.roa (hash: k+U35adZwDUqbZfONZN9YxBvYnb8OmgnqwbSFhlvMsw=)
2: Ss4p2Wi9YLUTVxVEOHNi-gD-YLo.roa (hash: IbN6B6NWFefTjZbMVpJkmbwj8ZHivUrVhvuHXNdd+oQ=)
3: Zpauprq3nEj13e5KRr9Ktk2GMWA.crl (hash: 58jEAvqM2Kjiy4v6tadyAOXQMLMITXV3UizdOLQDkX8=)
4: jFXSmkjEC26c8mxhOetY3rp2Ccc.roa (hash: olcLB40Oa+I2BCFt/Z0AGNONx90qq/xMtLVV5Y1vQVY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/452c2b-f2cf-4a92-a1cd-f0198c6c2474/1/Zpauprq3nEj13e5KRr9Ktk2GMWA.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/452c2b-f2cf-4a92-a1cd-f0198c6c2474/1/Zpauprq3nEj13e5KRr9Ktk2GMWA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zpauprq3nEj13e5KRr9Ktk2GMWA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:ec:16:47:27:79:b4:a4:ce:1b:14:14:37:f6:05:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6696aea6bab79c48f5ddee4a46bf4ab64d863160
Validity
Not Before: Oct 20 00:01:48 2025 GMT
Not After : Oct 21 00:01:48 2025 GMT
Subject: CN=29d1b2332cdd231ebb62fbc7700b59edcdc7bcbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:29:57:fc:86:e3:32:f5:b1:79:bd:a2:d2:46:
e8:be:86:6c:01:68:40:a4:d5:92:20:55:3f:47:63:
85:fb:50:23:18:e6:5a:d1:58:cb:23:5a:35:36:07:
28:a7:db:19:f6:cf:d2:e8:59:95:68:b2:50:09:64:
bb:4a:3b:36:21:b5:0d:4e:27:c1:59:4e:60:cb:fe:
93:72:10:bd:c0:ef:32:31:30:08:f3:56:7f:98:a7:
03:07:b6:c9:8c:27:ad:d4:7c:92:19:64:94:a9:87:
c9:fa:f9:b8:17:ad:d6:9b:df:c8:82:b6:3a:31:79:
9d:a5:35:8e:6b:5d:3a:c5:60:04:b4:0a:5e:f8:e4:
10:43:9b:b2:83:a1:c5:e1:2f:72:da:d7:fa:ad:68:
4a:90:c5:ca:05:c7:99:34:86:f7:6d:b9:42:30:55:
0a:bb:57:8c:85:fb:10:a0:81:78:f2:4f:9d:67:79:
43:39:dc:30:db:4b:6f:02:58:b3:ac:6c:6e:2e:f4:
7a:c8:7e:87:ad:f1:34:98:98:49:2c:03:f1:81:c4:
e0:ca:8c:c3:3b:e1:5b:04:59:b5:cf:a6:a5:e6:3d:
ba:33:1f:22:1c:b4:4d:e4:66:fa:b0:60:87:5b:0e:
95:52:08:51:83:0a:39:1b:a0:7a:2b:72:7a:a6:02:
80:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:D1:B2:33:2C:DD:23:1E:BB:62:FB:C7:70:0B:59:ED:CD:C7:BC:BF
X509v3 Authority Key Identifier:
keyid:66:96:AE:A6:BA:B7:9C:48:F5:DD:EE:4A:46:BF:4A:B6:4D:86:31:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zpauprq3nEj13e5KRr9Ktk2GMWA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/452c2b-f2cf-4a92-a1cd-f0198c6c2474/1/Zpauprq3nEj13e5KRr9Ktk2GMWA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/452c2b-f2cf-4a92-a1cd-f0198c6c2474/1/Zpauprq3nEj13e5KRr9Ktk2GMWA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:96:20:3d:73:b7:a9:ed:bf:88:0d:52:19:30:10:dc:ae:c9:
4c:b0:ad:f4:58:3d:59:d4:97:58:2a:c0:5d:16:98:9e:1f:2f:
3c:c4:9a:a2:fc:bb:c6:00:a4:31:a8:a0:49:48:ff:2d:fe:85:
82:78:61:ec:61:73:d9:ed:f3:56:c3:8d:aa:a5:88:67:50:d4:
b3:79:f5:d0:18:56:76:54:33:05:c7:be:7d:e2:1f:39:e5:06:
cc:52:a9:ba:73:a8:3f:c2:5f:13:53:0d:b0:ff:ca:5a:b3:67:
a0:cd:bc:ac:cb:54:b2:03:d7:8f:d6:0b:2d:55:4c:89:f4:7a:
5c:0e:19:0a:2b:f3:a7:a0:9d:f9:d0:ef:e0:66:f7:d8:0b:f7:
93:bd:cf:f6:a6:9a:2c:d1:19:c6:7a:6a:15:0e:86:8a:24:80:
46:fd:42:15:ad:4e:44:4a:dd:b3:bc:96:48:5e:28:bb:3b:88:
ca:6d:a6:2a:78:2b:1f:39:6d:7a:f2:13:27:83:65:14:18:91:
f5:17:0b:c5:0f:61:b6:7c:f1:ef:91:f1:dc:c7:e7:a3:08:a9:
0a:ea:8c:42:f6:c0:58:5f:40:59:05:02:8f:1d:a1:cd:04:5d:
1c:c8:15:b2:55:0f:3a:d7:93:04:48:8f:8e:1d:56:c3:30:c8:
f8:ea:e7:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:33:09 2025 by rpki-client