Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/09f918-aced-42a8-8a3a-33e2705b4c3e/1/zixQX3fcqBF-8GJXEHRMs1lzaxk.mft
File: zixQX3fcqBF-8GJXEHRMs1lzaxk.mft (raw, json)
Hash identifier: KFB/fp0kdwX/Q2ptc8qU4ZzQYdvxI9xVej1r4Dca3F0=
Subject key identifier: 67:5D:5C:B4:96:EF:BE:CB:1A:60:26:89:8E:8A:A1:14:65:B0:6B:51
Authority key identifier: CE:2C:50:5F:77:DC:A8:11:7E:F0:62:57:10:74:4C:B3:59:73:6B:19
Certificate issuer: /CN=ce2c505f77dca8117ef0625710744cb359736b19
Certificate serial: 0199FDD95EF55A33A0302840F5CBCABF33F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zixQX3fcqBF-8GJXEHRMs1lzaxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/09f918-aced-42a8-8a3a-33e2705b4c3e/1/zixQX3fcqBF-8GJXEHRMs1lzaxk.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 19:01:45 +0000
Manifest this update: Sun 19 Oct 2025 19:01:45 +0000
Manifest next update: Mon 20 Oct 2025 19:01:45 +0000
Files and hashes: 1: hD4ft5vuw1Wk9UZZqMkIcSTxRFk.roa (hash: h4/9pXQ7Wpk9BBxdxTpq0aRzvgxJkU0Udbbc6bAhob8=)
2: zixQX3fcqBF-8GJXEHRMs1lzaxk.crl (hash: Ar1IwrgZJsv9t8Bd68/pMNaa+vMIQXP+Bsm9AtBxt28=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/09f918-aced-42a8-8a3a-33e2705b4c3e/1/zixQX3fcqBF-8GJXEHRMs1lzaxk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/09f918-aced-42a8-8a3a-33e2705b4c3e/1/zixQX3fcqBF-8GJXEHRMs1lzaxk.mft
rsync://rpki.ripe.net/repository/DEFAULT/zixQX3fcqBF-8GJXEHRMs1lzaxk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:5e:f5:5a:33:a0:30:28:40:f5:cb:ca:bf:33:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce2c505f77dca8117ef0625710744cb359736b19
Validity
Not Before: Oct 19 19:01:45 2025 GMT
Not After : Oct 20 19:01:45 2025 GMT
Subject: CN=675d5cb496efbecb1a6026898e8aa11465b06b51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a3:5e:ce:9e:1a:b3:29:5a:0d:dd:66:00:eb:
96:56:85:01:2a:87:67:44:1e:d1:9d:b7:0d:d8:d5:
2e:80:ba:83:d6:4c:ae:fa:94:92:c2:bb:9d:f0:1d:
a4:83:ed:67:9f:81:e3:f5:ab:9d:a6:2a:16:d8:5f:
e1:2f:d6:4c:7e:77:e5:5f:c6:14:19:73:e4:e1:fc:
77:d1:09:c0:e4:89:7f:56:62:e5:5c:cc:e7:5d:1f:
10:e0:3a:7a:aa:25:58:93:62:c7:22:ad:50:71:4d:
df:9f:8f:c1:ea:e3:03:1a:db:d2:e3:db:db:b1:58:
09:50:94:3f:42:bb:31:e8:59:36:98:e2:d3:00:34:
66:cd:75:52:63:5d:ef:b7:45:70:6a:84:fa:17:a7:
04:9c:7b:4b:92:fd:83:01:af:89:c7:b4:7e:19:2d:
d4:ea:e4:bc:c5:cf:91:98:1a:a7:93:21:24:41:02:
a1:4d:20:b7:af:3d:a0:57:7c:f9:9d:78:7e:a9:72:
2c:ce:12:e5:74:c0:bc:8f:80:51:48:ab:7b:94:f4:
8d:27:42:fe:69:fb:81:51:d3:da:fe:9a:2f:f1:26:
2d:3c:9d:03:d6:85:c9:bf:e4:7f:88:1e:ce:44:2f:
f2:1b:8c:0f:3d:06:a3:92:59:bb:9c:71:ee:e0:99:
2f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:5D:5C:B4:96:EF:BE:CB:1A:60:26:89:8E:8A:A1:14:65:B0:6B:51
X509v3 Authority Key Identifier:
keyid:CE:2C:50:5F:77:DC:A8:11:7E:F0:62:57:10:74:4C:B3:59:73:6B:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zixQX3fcqBF-8GJXEHRMs1lzaxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/09f918-aced-42a8-8a3a-33e2705b4c3e/1/zixQX3fcqBF-8GJXEHRMs1lzaxk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/09f918-aced-42a8-8a3a-33e2705b4c3e/1/zixQX3fcqBF-8GJXEHRMs1lzaxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:66:ec:39:53:8f:14:20:1e:c8:b7:8c:48:91:08:dd:a0:6f:
9a:d3:31:f5:3b:d3:2f:50:91:ad:eb:e7:e3:3b:ce:e7:cb:7e:
a3:d3:ae:18:2d:98:a6:8d:cf:f0:f9:17:96:de:6b:02:04:01:
cd:bc:fc:d5:f3:61:e4:9b:40:76:ee:8c:5c:db:eb:9e:c9:13:
f9:ea:81:0b:ce:52:26:f1:2b:fd:41:1d:35:0e:a3:2d:f5:59:
47:6a:5a:4c:22:f2:4d:f5:cc:84:a8:00:ab:df:83:de:3f:2e:
e3:71:7e:60:43:f6:5c:c0:20:cb:6c:65:99:8d:75:df:e1:69:
cc:10:95:f4:97:f2:27:3b:b0:0e:36:6c:d9:d9:b9:69:29:3f:
b1:55:a2:a5:b5:a0:f3:29:c1:c8:58:a1:9f:fc:bf:7f:ef:13:
f7:81:d1:52:12:bf:50:79:42:22:66:60:bf:c3:4b:1c:46:12:
cc:71:1a:09:1b:b2:8e:a5:69:22:3c:4f:87:13:a4:98:17:eb:
ed:91:3a:2c:3c:d2:98:9f:11:95:0f:78:83:85:39:b7:9f:3c:
ec:46:0e:17:71:e3:e4:5f:b5:bc:6e:3a:81:11:0b:ba:41:cf:
8d:9d:a5:6e:6e:53:13:82:df:70:af:aa:82:27:58:e0:2d:ad:
f8:2c:61:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:41:12 2025 by rpki-client