Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/zepK3ugLBlGc5A3T0T8oup9XWVc.mft
File: zepK3ugLBlGc5A3T0T8oup9XWVc.mft (raw, json)
Hash identifier: NkAcn1gputhyBEPvuuZRRFtlbW6Ku5Cycb5StYO7tWg=
Subject key identifier: 4B:DB:57:62:33:04:FC:72:21:ED:DE:08:C0:4F:F6:D3:69:63:D0:44
Authority key identifier: CD:EA:4A:DE:E8:0B:06:51:9C:E4:0D:D3:D1:3F:28:BA:9F:57:59:57
Certificate issuer: /CN=cdea4adee80b06519ce40dd3d13f28ba9f575957
Certificate serial: 0199FC584206BBD17898616FEFF92F805AC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zepK3ugLBlGc5A3T0T8oup9XWVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/zepK3ugLBlGc5A3T0T8oup9XWVc.mft
Manifest number: 13F2
Signing time: Sun 19 Oct 2025 12:01:06 +0000
Manifest this update: Sun 19 Oct 2025 12:01:06 +0000
Manifest next update: Mon 20 Oct 2025 12:01:06 +0000
Files and hashes: 1: O0pEQEzhWfGPoGN9_GYQs2aEBkA.roa (hash: SE3IDQJtlW1HyYxGFEmw6qC9BXcob4+h3FZns0TYNu4=)
2: sVJ8yb4YMNZC8SR4z31lotsJRHA.roa (hash: +zzqZHb3MjdSyZ19xzKBnWrbrHGVz+kt5/OJZPLUdEA=)
3: zepK3ugLBlGc5A3T0T8oup9XWVc.crl (hash: YIRjZA6JB90MkCiXZRAQ2LxjLvcPuTC5sTEHSvxAFcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/zepK3ugLBlGc5A3T0T8oup9XWVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/zepK3ugLBlGc5A3T0T8oup9XWVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zepK3ugLBlGc5A3T0T8oup9XWVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:42:06:bb:d1:78:98:61:6f:ef:f9:2f:80:5a:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdea4adee80b06519ce40dd3d13f28ba9f575957
Validity
Not Before: Oct 19 12:01:06 2025 GMT
Not After : Oct 20 12:01:06 2025 GMT
Subject: CN=4bdb57623304fc7221edde08c04ff6d36963d044
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:51:1a:33:3f:cf:1f:7b:19:48:e7:96:59:25:
60:e2:4f:77:26:b2:0d:e7:74:31:d0:a6:91:8e:5c:
2d:70:04:4e:e9:be:f1:59:bc:ff:d1:b2:73:39:5b:
c4:ce:c4:21:4f:3a:5c:88:ea:79:75:fa:d6:97:26:
3a:59:97:ea:f1:60:2e:55:c6:44:a5:e9:e3:ef:19:
bf:17:9b:26:94:be:43:4f:6e:99:49:64:7e:f5:3a:
a9:d4:c7:a8:b6:fe:84:e6:6d:9a:a7:51:fa:a3:08:
45:42:54:ae:ca:45:47:3c:df:f9:d2:1e:5e:d1:8e:
0c:f9:85:26:e1:38:35:77:f0:9e:20:ea:39:9f:26:
e7:7e:4e:fe:70:a8:54:b0:30:b4:e5:47:1a:76:7c:
58:42:e3:7a:a0:a9:66:90:4c:97:24:3e:53:ae:d0:
f6:e4:03:82:a2:0f:2a:56:09:2b:a1:c6:13:f6:f1:
5a:22:22:b7:92:11:40:32:95:e9:f1:9b:d9:19:25:
87:0c:a5:99:02:04:ae:26:3d:c2:89:4c:f3:dd:b0:
dc:45:ed:11:66:1d:e5:4a:5c:45:40:8b:96:c6:f6:
a5:68:56:4c:48:93:4e:d4:4c:fa:37:c8:78:53:92:
4e:94:70:3a:d2:ac:ae:f8:7a:34:f7:a5:31:70:bd:
70:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:DB:57:62:33:04:FC:72:21:ED:DE:08:C0:4F:F6:D3:69:63:D0:44
X509v3 Authority Key Identifier:
keyid:CD:EA:4A:DE:E8:0B:06:51:9C:E4:0D:D3:D1:3F:28:BA:9F:57:59:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zepK3ugLBlGc5A3T0T8oup9XWVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/zepK3ugLBlGc5A3T0T8oup9XWVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/zepK3ugLBlGc5A3T0T8oup9XWVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:e5:9c:52:04:ec:6a:49:f9:47:23:79:3b:1a:20:b1:cb:bd:
f2:1d:38:b8:41:35:31:7d:af:54:79:23:74:fe:19:8b:92:7e:
d6:cb:3d:0f:c3:c0:73:d6:61:6c:85:b6:3e:90:33:11:d6:4c:
a1:ac:53:00:0e:ea:f8:45:75:d2:e4:05:a4:7c:c6:1e:cc:4e:
3d:62:9c:22:83:20:33:2b:80:8b:be:d5:16:df:2c:6b:3f:a5:
6b:8c:bd:82:bc:56:88:75:29:5f:3d:ee:18:91:19:02:5d:46:
eb:9f:75:b2:3b:f2:56:2d:6d:df:1c:16:60:05:e6:ea:52:ee:
72:5e:d7:a1:be:1e:77:aa:35:ce:8e:c2:f0:9b:4e:0e:57:eb:
32:1d:0d:95:0f:32:42:d9:4c:10:90:9c:16:21:ea:da:62:fb:
29:db:d7:0a:fa:b0:bb:e2:7f:d8:e2:f0:67:db:77:4e:65:fa:
d2:7f:a3:91:1a:a2:5a:f2:d9:72:67:8d:4b:27:a1:f3:f5:6f:
38:f5:74:c8:c1:84:28:e0:9d:50:c7:fa:ff:54:5e:c2:24:5e:
31:f6:7e:f0:31:7c:7f:56:44:28:9c:30:5d:25:37:7d:68:2c:
75:c7:d0:82:3c:40:3f:99:91:c6:a9:8c:ed:c6:66:f2:18:6d:
81:b6:1d:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:26:34 2025 by rpki-client