Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/b8169b-8bfd-40ff-b9ba-403043048118/1/ZvmDE4lp-NpnT3tcATPgwtAptMg.mft
File: ZvmDE4lp-NpnT3tcATPgwtAptMg.mft (raw, json)
Hash identifier: qxYml+ifGhgPGIvdjeMbKEdLTCQSrTUnZMa5Nh2UZjE=
Subject key identifier: 49:0B:69:F2:C6:1B:36:B5:0B:90:85:BC:E3:9B:28:5E:A8:D4:87:7C
Authority key identifier: 66:F9:83:13:89:69:F8:DA:67:4F:7B:5C:01:33:E0:C2:D0:29:B4:C8
Certificate issuer: /CN=66f983138969f8da674f7b5c0133e0c2d029b4c8
Certificate serial: 0199FB45A238F3FB092E55036D756C095819
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZvmDE4lp-NpnT3tcATPgwtAptMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/b8169b-8bfd-40ff-b9ba-403043048118/1/ZvmDE4lp-NpnT3tcATPgwtAptMg.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 07:01:08 +0000
Manifest this update: Sun 19 Oct 2025 07:01:08 +0000
Manifest next update: Mon 20 Oct 2025 07:01:08 +0000
Files and hashes: 1: 1-mam0MNYijlsUMBvUuzN8saQbSA.roa (hash: 7/MiQ2GbC+9P+jtI1s6HZozavARFckuLPrIIYS9KDUU=)
2: P1AdxUyUjVnpvB2qJGHDHOSGgqE.roa (hash: X7W16uCiCg3Hk2XdddLjkg7PZ/jHsdu8vmq4ZCQC5eQ=)
3: ZvmDE4lp-NpnT3tcATPgwtAptMg.crl (hash: N38oOllFoeLG52kb+I/s3h0G+JrPS2zPfiXLxdn4P2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/b8169b-8bfd-40ff-b9ba-403043048118/1/ZvmDE4lp-NpnT3tcATPgwtAptMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/b8169b-8bfd-40ff-b9ba-403043048118/1/ZvmDE4lp-NpnT3tcATPgwtAptMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZvmDE4lp-NpnT3tcATPgwtAptMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:a2:38:f3:fb:09:2e:55:03:6d:75:6c:09:58:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66f983138969f8da674f7b5c0133e0c2d029b4c8
Validity
Not Before: Oct 19 07:01:08 2025 GMT
Not After : Oct 20 07:01:08 2025 GMT
Subject: CN=490b69f2c61b36b50b9085bce39b285ea8d4877c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:99:dc:84:e9:73:0f:6f:c1:4a:de:28:a3:ef:
bc:a9:4c:b2:0a:a3:21:e8:aa:6c:45:b4:87:3f:80:
42:27:c5:63:41:4f:c3:67:bb:37:b4:ad:66:ab:29:
7b:1d:5b:65:9f:d4:ba:b8:6b:c2:c9:d6:45:4f:d5:
58:16:a1:b4:6e:a3:6c:14:6e:9a:79:c4:98:ce:f0:
8c:4c:d8:f0:79:f2:c2:e3:e3:c2:f4:ea:1e:9b:14:
66:a5:7c:5e:e0:6b:45:16:c6:48:b6:54:36:15:04:
a5:73:c5:dc:03:cd:84:f8:b8:4b:9f:49:2a:44:ee:
ea:8e:f1:1f:5f:20:48:c1:5b:0d:27:81:ff:1f:89:
e8:b4:13:e1:5c:05:62:fd:1f:57:93:df:ee:6b:a9:
ab:51:20:39:2c:57:30:e8:c1:1d:2e:49:9c:8c:d0:
3f:fe:82:a1:d7:2b:8a:84:1f:2d:4b:1c:d1:6b:22:
f6:06:2b:bd:55:1d:0b:f3:0f:4e:09:87:31:99:ef:
7d:9f:a8:15:32:de:3c:bf:8a:f9:7a:05:09:b5:30:
f7:9e:12:d3:4f:11:27:11:61:6b:83:a3:67:42:b7:
0a:64:20:55:37:52:3f:b2:c9:b4:4b:39:a7:09:09:
22:de:4f:d6:31:41:b7:d5:43:09:8a:ea:92:3b:fe:
1a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:0B:69:F2:C6:1B:36:B5:0B:90:85:BC:E3:9B:28:5E:A8:D4:87:7C
X509v3 Authority Key Identifier:
keyid:66:F9:83:13:89:69:F8:DA:67:4F:7B:5C:01:33:E0:C2:D0:29:B4:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZvmDE4lp-NpnT3tcATPgwtAptMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b8169b-8bfd-40ff-b9ba-403043048118/1/ZvmDE4lp-NpnT3tcATPgwtAptMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b8169b-8bfd-40ff-b9ba-403043048118/1/ZvmDE4lp-NpnT3tcATPgwtAptMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:94:dc:25:83:c8:b8:ee:bd:87:6c:8f:9e:0e:23:3b:55:75:
67:7d:1a:e6:1d:c5:e8:e2:6f:fa:09:ad:09:32:f4:20:18:20:
31:a7:be:15:93:98:4e:ef:64:df:e0:aa:1e:23:0e:61:0c:6f:
bc:0f:b5:7e:0a:15:6a:00:8e:e3:72:98:be:13:e4:59:d6:df:
2e:5c:2c:36:c4:47:9e:a7:ae:d1:a7:c8:5b:ab:f3:b7:cf:a6:
3a:c1:ec:7e:26:c3:5f:bc:ee:f5:d9:41:da:53:53:c2:48:21:
e6:ac:d7:25:11:89:86:fa:51:63:8c:87:2f:f1:f5:24:2f:fd:
25:ea:e4:08:2d:85:bc:95:3c:33:6f:e4:b6:56:9b:7a:98:60:
76:07:e8:c3:e2:c8:31:b6:5b:80:e8:b9:28:1c:46:90:0f:f6:
4a:34:46:e0:41:86:30:9a:fe:18:ff:50:56:b9:62:4d:e1:36:
b7:76:e9:89:4f:ab:4f:58:b1:9e:e9:4c:3f:23:23:d0:35:da:
e3:71:d3:13:d0:eb:74:fe:39:42:73:27:cf:f5:38:3a:79:fd:
d0:bf:09:3d:cb:93:e6:58:a6:72:2b:7e:2e:54:7f:43:d5:f7:
00:22:fb:28:82:2e:d9:dd:80:dd:7a:f5:d5:56:b4:f9:db:93:
db:95:c8:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:18 2025 by rpki-client