Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/a646af-e61d-48b6-89d2-eba988a548e7/1/ZGASnCIfekeBKIWmSDixLuaxXtU.mft
File: ZGASnCIfekeBKIWmSDixLuaxXtU.mft (raw, json)
Hash identifier: 7ReqY4Uf7NCn3/JQtlYlgqyr9TKIvn7iu8iPQj6I45Q=
Subject key identifier: 14:DF:7D:69:8E:54:C8:40:39:C8:12:C4:66:95:FD:CC:92:3B:81:A3
Authority key identifier: 64:60:12:9C:22:1F:7A:47:81:28:85:A6:48:38:B1:2E:E6:B1:5E:D5
Certificate issuer: /CN=6460129c221f7a47812885a64838b12ee6b15ed5
Certificate serial: 0199FBEAAB6A0F187BEEC2CAD655ABA51692
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZGASnCIfekeBKIWmSDixLuaxXtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/a646af-e61d-48b6-89d2-eba988a548e7/1/ZGASnCIfekeBKIWmSDixLuaxXtU.mft
Manifest number: 0CFC
Signing time: Sun 19 Oct 2025 10:01:24 +0000
Manifest this update: Sun 19 Oct 2025 10:01:24 +0000
Manifest next update: Mon 20 Oct 2025 10:01:24 +0000
Files and hashes: 1: JmllacFYtWc-oOoWU-KiBC-dzBI.roa (hash: ofZ7OlX/Buue/GMQQmZdmktJZ/jzN3/Huw6iGY9j4no=)
2: ZGASnCIfekeBKIWmSDixLuaxXtU.crl (hash: foKLUPaHH1JVaqTA/4wKmQOM06WIVvILd6+Ip1p1eqU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/a646af-e61d-48b6-89d2-eba988a548e7/1/ZGASnCIfekeBKIWmSDixLuaxXtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/a646af-e61d-48b6-89d2-eba988a548e7/1/ZGASnCIfekeBKIWmSDixLuaxXtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZGASnCIfekeBKIWmSDixLuaxXtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:ab:6a:0f:18:7b:ee:c2:ca:d6:55:ab:a5:16:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6460129c221f7a47812885a64838b12ee6b15ed5
Validity
Not Before: Oct 19 10:01:24 2025 GMT
Not After : Oct 20 10:01:24 2025 GMT
Subject: CN=14df7d698e54c84039c812c46695fdcc923b81a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2b:92:8a:5b:c4:93:59:75:9d:81:56:2c:b3:
35:7b:0a:64:32:7b:8e:25:e0:fb:f8:2b:de:01:47:
36:01:22:1d:6c:22:b6:20:16:ed:43:46:dc:2d:6a:
a3:7b:17:67:e2:88:ce:3e:63:5c:99:9f:5c:6b:90:
8c:d3:e9:ff:f9:13:bb:dd:9c:50:64:2b:28:fb:3e:
75:0c:42:3b:c4:56:33:11:58:66:1f:73:78:19:86:
b1:7f:2a:0d:b3:73:ec:e4:4c:1b:d9:a6:5d:a6:9b:
74:d4:2d:19:44:b4:27:21:a0:f1:16:35:5b:0c:2d:
62:46:88:8f:b1:46:ca:9d:53:08:74:e1:b4:39:e4:
1f:fa:90:9f:5e:20:b1:18:a5:1a:31:9d:22:a6:b9:
a3:61:be:df:22:37:a8:e3:da:3d:60:3c:98:80:95:
7c:cd:bb:c5:39:05:02:40:17:f8:c0:02:ef:c9:7b:
c0:0f:c2:0c:df:be:03:73:dd:88:d8:f0:5e:a0:25:
b8:a4:c8:bc:c2:f5:e1:8c:ef:07:5e:96:c3:c2:da:
aa:d0:05:34:2e:f9:e1:99:12:54:84:cc:cc:8d:aa:
78:a8:c5:5c:78:dc:9d:47:f6:bc:4a:f9:38:40:53:
44:a7:29:e7:94:91:be:f1:a1:ff:19:61:4d:83:50:
fc:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:DF:7D:69:8E:54:C8:40:39:C8:12:C4:66:95:FD:CC:92:3B:81:A3
X509v3 Authority Key Identifier:
keyid:64:60:12:9C:22:1F:7A:47:81:28:85:A6:48:38:B1:2E:E6:B1:5E:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZGASnCIfekeBKIWmSDixLuaxXtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/a646af-e61d-48b6-89d2-eba988a548e7/1/ZGASnCIfekeBKIWmSDixLuaxXtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/a646af-e61d-48b6-89d2-eba988a548e7/1/ZGASnCIfekeBKIWmSDixLuaxXtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:11:d8:b1:9c:1a:11:7f:fc:71:98:90:91:d1:8f:90:6a:fe:
22:8e:a1:7f:a0:1c:3a:bd:8a:19:7a:8b:6d:c5:e6:e7:ac:60:
a5:49:68:7a:42:2f:df:1c:e3:a3:86:11:05:a3:b3:75:47:97:
c8:e6:5b:77:21:aa:e6:04:39:04:26:75:91:75:50:58:75:de:
46:f2:9c:59:3f:3c:5c:03:92:d7:47:08:de:91:e1:7c:0d:20:
be:6c:5f:a7:a6:60:7a:3b:96:81:8c:b5:e2:d0:42:cf:8b:ed:
a4:43:b4:5b:ba:d0:03:1c:f6:59:48:6c:31:cc:13:72:f9:da:
b0:75:48:1d:e1:e6:5a:3d:bb:11:86:d2:07:02:9b:3f:55:d9:
14:eb:d8:b2:4d:7d:fa:8f:a9:e2:30:16:98:ab:e4:06:77:be:
87:65:72:61:e8:cf:11:53:b7:60:49:7d:05:7d:fb:bd:9d:8c:
77:fc:31:e4:17:4b:37:d6:42:9a:48:8d:c3:c7:a5:59:8d:c2:
4f:51:d9:b4:a4:0b:8a:e2:95:a4:24:3b:98:e9:b4:c1:f6:bf:
51:2f:99:e5:75:a9:47:59:d4:f1:d0:07:ad:c7:85:13:20:95:
bb:99:12:85:52:b9:7f:cd:bc:75:05:f5:36:f6:30:8d:22:a2:
0b:cd:80:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:33:50 2025 by rpki-client