Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/c75f12-97a4-4d9e-9978-b1822755f712/1/ziLdGXJbalnnnw_zl4mlZY5KX90.mft
File: ziLdGXJbalnnnw_zl4mlZY5KX90.mft (raw, json)
Hash identifier: ePwHZNFdduPvSHIJ8mvH3ve1fsyskBVqnlKcTZvfHwM=
Subject key identifier: 28:03:F8:6F:EB:F2:09:4E:12:AD:30:61:6C:C6:46:0E:25:85:07:E1
Authority key identifier: CE:22:DD:19:72:5B:6A:59:E7:9F:0F:F3:97:89:A5:65:8E:4A:5F:DD
Certificate issuer: /CN=ce22dd19725b6a59e79f0ff39789a5658e4a5fdd
Certificate serial: 0199FE0FC6822F7A2022705884C54B3AC7C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ziLdGXJbalnnnw_zl4mlZY5KX90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/c75f12-97a4-4d9e-9978-b1822755f712/1/ziLdGXJbalnnnw_zl4mlZY5KX90.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 20:01:10 +0000
Manifest this update: Sun 19 Oct 2025 20:01:10 +0000
Manifest next update: Mon 20 Oct 2025 20:01:10 +0000
Files and hashes: 1: vCN5n7XgRlbJNVyUvtiVehd0W-c.roa (hash: doLyWpoVrhe1vhRGrAeN+5Um0tW+zvGku8pJrn/YoG0=)
2: ziLdGXJbalnnnw_zl4mlZY5KX90.crl (hash: v7rCv9FSh3QN8uyKNPcWso542CwMcAzhvdA3ywIyMi8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/c75f12-97a4-4d9e-9978-b1822755f712/1/ziLdGXJbalnnnw_zl4mlZY5KX90.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/c75f12-97a4-4d9e-9978-b1822755f712/1/ziLdGXJbalnnnw_zl4mlZY5KX90.mft
rsync://rpki.ripe.net/repository/DEFAULT/ziLdGXJbalnnnw_zl4mlZY5KX90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:0f:c6:82:2f:7a:20:22:70:58:84:c5:4b:3a:c7:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce22dd19725b6a59e79f0ff39789a5658e4a5fdd
Validity
Not Before: Oct 19 20:01:10 2025 GMT
Not After : Oct 20 20:01:10 2025 GMT
Subject: CN=2803f86febf2094e12ad30616cc6460e258507e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:a2:b3:46:12:7c:35:69:8d:ff:9a:94:74:f6:
5c:1a:11:85:1f:86:13:81:44:31:e2:da:e5:b7:52:
db:dd:61:19:7b:d7:75:e8:6f:a0:e2:9d:01:0d:7a:
f4:05:fc:d5:f8:fb:01:a2:67:02:5d:43:4f:87:34:
c7:98:5d:06:f6:6e:3e:d0:86:7f:99:4c:4d:65:2d:
39:2e:1a:fc:97:b7:ef:9d:92:20:58:5f:4a:66:2a:
b5:3e:9f:fc:bd:1a:52:3e:96:9f:d7:d6:02:d1:4a:
1d:80:5d:cb:2d:84:b5:75:91:ad:a7:2f:9c:59:d0:
b5:ac:33:1b:36:f8:1c:88:73:02:06:17:50:f0:f0:
2c:f7:3c:d7:bd:68:90:ca:a5:3d:bd:ad:8a:c0:9a:
da:b5:e3:2b:dc:ab:76:8e:88:38:62:b1:2a:de:5c:
17:7d:9a:0e:ab:ce:76:ad:81:be:40:48:0a:2e:37:
f3:72:6f:57:a2:e0:df:00:f5:3a:4f:78:ab:f9:72:
f1:c6:d7:15:6c:e5:79:4f:01:f7:e9:67:6f:2b:4a:
ff:bd:ed:78:83:7f:15:78:ad:68:f3:4c:3a:63:3d:
4f:35:a4:6b:54:d5:9d:58:bc:9c:62:dd:4c:01:66:
8d:36:48:a4:e4:58:39:93:c8:95:0d:ef:0b:cf:65:
5a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:03:F8:6F:EB:F2:09:4E:12:AD:30:61:6C:C6:46:0E:25:85:07:E1
X509v3 Authority Key Identifier:
keyid:CE:22:DD:19:72:5B:6A:59:E7:9F:0F:F3:97:89:A5:65:8E:4A:5F:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ziLdGXJbalnnnw_zl4mlZY5KX90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c75f12-97a4-4d9e-9978-b1822755f712/1/ziLdGXJbalnnnw_zl4mlZY5KX90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c75f12-97a4-4d9e-9978-b1822755f712/1/ziLdGXJbalnnnw_zl4mlZY5KX90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:3f:55:89:cd:77:27:81:2f:24:2e:04:30:b3:2f:28:2c:e1:
0d:dc:19:31:c2:bf:fc:7d:10:dd:9d:01:d7:6d:9c:cf:17:9f:
10:e6:69:fb:3a:c4:84:e7:40:5a:a1:e0:3f:ba:32:15:c7:4e:
36:31:77:cb:cf:ee:5e:28:e5:be:9e:e2:42:6a:82:56:ce:f7:
df:cd:f9:6a:83:6c:3f:27:37:dd:de:b7:6d:1f:4e:e2:bc:75:
b4:71:13:6d:36:23:fd:37:5a:1e:fa:15:1a:46:71:a4:c5:5b:
9d:3a:2b:8b:9e:57:b4:9f:2f:85:c1:35:b3:40:90:12:60:d2:
f5:ec:9f:58:ef:1d:5c:04:e9:02:59:95:30:36:04:0e:8a:ca:
5d:84:a0:e8:4e:d5:ab:90:dc:49:f6:b0:b7:ad:0a:be:57:e4:
e6:a1:3b:bd:0a:5a:30:a1:c1:26:8d:52:41:c2:b6:a0:42:cc:
9d:3a:f8:79:ec:c9:29:27:71:25:93:ee:4a:43:00:34:01:d2:
e3:f2:a3:f0:cd:f7:5b:4c:01:b3:92:a4:bf:1a:80:90:52:83:
b1:8c:1a:89:4e:1c:48:bd:ab:9f:ea:d9:2f:6a:44:e2:44:2e:
a9:68:d8:0d:ad:f3:62:d5:d9:df:f2:2b:63:22:68:83:20:97:
c8:d8:c9:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:08:09 2025 by rpki-client