Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/45c689-751f-46d7-9b6c-b1fc547b7322/1/zig0CiCbK6Eq6QOnTLteLiOu0jg.mft
File: zig0CiCbK6Eq6QOnTLteLiOu0jg.mft (raw, json)
Hash identifier: VdOc3SYI8Rl8kh94b2vLVYzwLS0weVwyp5Q4XmD+ssA=
Subject key identifier: D1:C0:E2:8C:65:35:03:81:06:34:B6:C5:72:B5:AB:0B:1D:87:15:49
Authority key identifier: CE:28:34:0A:20:9B:2B:A1:2A:E9:03:A7:4C:BB:5E:2E:23:AE:D2:38
Certificate issuer: /CN=ce28340a209b2ba12ae903a74cbb5e2e23aed238
Certificate serial: 0199FEEBE3656D70C39BAF19B0521286AC32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zig0CiCbK6Eq6QOnTLteLiOu0jg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/45c689-751f-46d7-9b6c-b1fc547b7322/1/zig0CiCbK6Eq6QOnTLteLiOu0jg.mft
Manifest number: 167E
Signing time: Mon 20 Oct 2025 00:01:35 +0000
Manifest this update: Mon 20 Oct 2025 00:01:35 +0000
Manifest next update: Tue 21 Oct 2025 00:01:35 +0000
Files and hashes: 1: 3_Faj2Bx30QMBQ_9fq1w0mDX6GU.roa (hash: r9nE6BN+YAUaWRC/VJWHKz/x1whGDYTMWiwj3TDgzA0=)
2: zig0CiCbK6Eq6QOnTLteLiOu0jg.crl (hash: HqiuJh3h0DXAgX74goHTK+Bh77TEuphIro+WPmq2C0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/45c689-751f-46d7-9b6c-b1fc547b7322/1/zig0CiCbK6Eq6QOnTLteLiOu0jg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/45c689-751f-46d7-9b6c-b1fc547b7322/1/zig0CiCbK6Eq6QOnTLteLiOu0jg.mft
rsync://rpki.ripe.net/repository/DEFAULT/zig0CiCbK6Eq6QOnTLteLiOu0jg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:e3:65:6d:70:c3:9b:af:19:b0:52:12:86:ac:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce28340a209b2ba12ae903a74cbb5e2e23aed238
Validity
Not Before: Oct 20 00:01:35 2025 GMT
Not After : Oct 21 00:01:35 2025 GMT
Subject: CN=d1c0e28c653503810634b6c572b5ab0b1d871549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:7f:37:ad:8d:7d:c3:4d:77:4c:17:43:fb:b9:
de:a7:4f:58:05:73:c5:80:16:83:14:9c:f4:7e:3d:
16:08:e4:49:be:19:f4:21:c1:88:56:ff:4f:05:ad:
89:e3:32:14:ce:01:c8:87:c8:cd:0d:04:1b:e1:96:
f1:7b:82:be:5b:cb:e2:1b:30:60:e6:d9:b3:08:fc:
c2:16:59:83:15:49:ae:0f:a8:87:1c:51:c8:55:4b:
7c:ba:ce:07:47:76:0f:66:80:c4:42:6e:c4:07:b3:
74:d2:4a:09:fc:ac:23:ed:e0:ee:53:c1:b2:b7:f8:
66:be:bd:26:e9:f9:3d:f9:7f:08:c6:58:0a:5d:cb:
cf:ff:af:71:37:a5:bb:9b:dc:a5:67:d2:23:92:5a:
24:a2:40:62:0e:d3:d8:e3:3a:a5:f0:12:03:ac:b5:
52:65:69:e8:7d:8f:15:e4:61:84:3c:13:56:5c:f0:
44:ca:e5:ff:90:f4:c6:35:df:9f:03:f2:b5:f2:b1:
2a:12:d2:4e:65:a0:b9:5c:97:36:5c:ce:3f:18:00:
f7:1c:2a:47:f8:a5:fb:cd:be:8c:2f:99:a1:f4:ac:
c5:92:c0:4e:3b:f5:59:bf:e2:91:71:b8:74:46:09:
fa:70:1d:a4:c8:e9:5f:06:47:c6:b1:12:83:11:46:
b7:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:C0:E2:8C:65:35:03:81:06:34:B6:C5:72:B5:AB:0B:1D:87:15:49
X509v3 Authority Key Identifier:
keyid:CE:28:34:0A:20:9B:2B:A1:2A:E9:03:A7:4C:BB:5E:2E:23:AE:D2:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zig0CiCbK6Eq6QOnTLteLiOu0jg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/45c689-751f-46d7-9b6c-b1fc547b7322/1/zig0CiCbK6Eq6QOnTLteLiOu0jg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/45c689-751f-46d7-9b6c-b1fc547b7322/1/zig0CiCbK6Eq6QOnTLteLiOu0jg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:93:ca:18:70:ef:b6:b3:d1:59:06:77:dd:56:c9:62:52:8e:
3a:1c:3e:ba:3c:e9:d0:c0:2c:77:2f:bc:61:27:00:38:e7:2e:
83:84:30:c0:06:23:3a:79:69:d8:0a:07:bc:4f:40:84:4c:82:
32:5c:e8:47:3b:19:e4:61:9f:65:33:d3:38:d8:fa:c1:96:a5:
48:23:4a:cb:24:cc:4b:fc:be:7d:0a:67:cb:92:fe:48:44:f2:
23:02:20:75:2e:f9:91:bf:43:be:df:29:be:29:57:a5:91:05:
fa:41:74:61:da:7b:29:c7:e3:c9:f8:33:ee:5c:eb:0c:e3:40:
ef:9d:0b:f9:4e:95:7d:66:9a:be:d0:63:14:30:76:4c:8a:3b:
f9:e0:c3:73:ed:ad:e9:8f:aa:df:a6:e6:71:99:07:52:61:fe:
53:75:c8:a2:b0:81:33:0a:67:70:a4:c2:98:a0:d6:e2:17:f4:
d4:08:01:70:50:43:9b:7c:22:6c:c7:d4:b3:1e:43:cf:e4:e8:
40:90:a7:17:ad:de:a7:6c:8c:83:4d:c1:d4:0c:a0:2d:3e:ee:
1e:ab:9e:e7:28:c4:e0:fb:3d:de:7b:cb:42:48:3b:5d:7e:7a:
07:68:71:4a:3f:b7:76:af:b9:5d:e5:8d:d8:e1:63:3b:c9:2e:
cd:7f:d7:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:41:34 2025 by rpki-client