Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/5005b4-301d-4a5b-9c96-43883487e492/1/zbY--iaaFBF1Thzaq4SPsG-ghBE.mft
File: zbY--iaaFBF1Thzaq4SPsG-ghBE.mft (raw, json)
Hash identifier: yWlw0Oh9Tq0H8R0/JHMI52a4Od3E/ELx0wkA9Rj1yPQ=
Subject key identifier: C4:A7:BD:C1:FF:50:7C:F7:92:63:F7:23:84:71:61:21:76:1F:6F:0C
Authority key identifier: CD:B6:3E:FA:26:9A:14:11:75:4E:1C:DA:AB:84:8F:B0:6F:A0:84:11
Certificate issuer: /CN=cdb63efa269a1411754e1cdaab848fb06fa08411
Certificate serial: 0199FC58FC9E124BADADAE4AC9B58B012CAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zbY--iaaFBF1Thzaq4SPsG-ghBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/5005b4-301d-4a5b-9c96-43883487e492/1/zbY--iaaFBF1Thzaq4SPsG-ghBE.mft
Manifest number: 0E19
Signing time: Sun 19 Oct 2025 12:01:54 +0000
Manifest this update: Sun 19 Oct 2025 12:01:54 +0000
Manifest next update: Mon 20 Oct 2025 12:01:54 +0000
Files and hashes: 1: 3vOkms1tZ1ngilXRsF2AnSNXRpc.roa (hash: /PiOxJIXqSLan9pb27DlpE7/naqh5TR5sTdBHisw3+w=)
2: zbY--iaaFBF1Thzaq4SPsG-ghBE.crl (hash: ZyXDUdKDUeRS422x8AWdvti3VfOdhC6X0XKiPw1EQgA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/5005b4-301d-4a5b-9c96-43883487e492/1/zbY--iaaFBF1Thzaq4SPsG-ghBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/5005b4-301d-4a5b-9c96-43883487e492/1/zbY--iaaFBF1Thzaq4SPsG-ghBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zbY--iaaFBF1Thzaq4SPsG-ghBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:fc:9e:12:4b:ad:ad:ae:4a:c9:b5:8b:01:2c:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdb63efa269a1411754e1cdaab848fb06fa08411
Validity
Not Before: Oct 19 12:01:54 2025 GMT
Not After : Oct 20 12:01:54 2025 GMT
Subject: CN=c4a7bdc1ff507cf79263f72384716121761f6f0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:08:36:91:09:51:8f:01:2a:a0:c3:75:99:3e:
a8:9c:61:ec:3d:bd:4b:ca:d6:c7:46:68:cd:41:7f:
de:5d:11:af:f6:e3:e1:71:6e:fb:cc:5d:47:6d:e9:
61:b7:b8:33:df:b5:21:52:ad:64:ab:4b:a8:5f:c8:
cf:55:c7:40:e3:7f:22:f7:2e:a1:21:96:9c:e5:ed:
fe:0e:b6:de:2e:28:e6:2a:ab:ff:92:77:48:1e:75:
08:e1:c4:bc:05:fa:d8:52:dc:6b:6b:a3:09:89:f9:
38:f1:44:d0:e2:17:4e:68:59:ad:64:9d:c2:88:4a:
cf:23:87:37:d1:6e:74:5b:b5:35:b3:a1:08:c5:04:
68:13:6e:81:95:68:48:c8:5d:dc:f3:18:e2:93:f7:
49:e3:ca:f7:be:a0:9c:26:a6:82:b0:05:89:0d:29:
2f:36:38:4d:69:f6:2a:53:e5:fc:82:78:19:15:bd:
b7:0d:d9:c8:1b:3d:79:71:a8:20:e5:1b:9a:62:c1:
5a:1c:8a:89:22:e0:ba:29:f2:7d:38:86:d2:ad:10:
42:e2:5e:f7:03:fe:3d:bb:54:ee:4e:2e:4c:85:fa:
7a:e5:8e:43:65:87:dd:93:6a:30:c8:e7:07:e1:e2:
87:0d:2c:67:c2:e7:56:28:b6:fe:83:4f:d9:51:b3:
53:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:A7:BD:C1:FF:50:7C:F7:92:63:F7:23:84:71:61:21:76:1F:6F:0C
X509v3 Authority Key Identifier:
keyid:CD:B6:3E:FA:26:9A:14:11:75:4E:1C:DA:AB:84:8F:B0:6F:A0:84:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbY--iaaFBF1Thzaq4SPsG-ghBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/5005b4-301d-4a5b-9c96-43883487e492/1/zbY--iaaFBF1Thzaq4SPsG-ghBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/5005b4-301d-4a5b-9c96-43883487e492/1/zbY--iaaFBF1Thzaq4SPsG-ghBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:3b:09:b3:3b:fa:14:54:19:b9:71:0e:ed:1d:a3:4c:02:41:
62:4b:f3:b5:be:14:01:06:d4:39:7f:79:85:97:c9:07:2e:e3:
b8:83:1a:fa:d3:c2:e5:7b:7b:74:ce:d9:df:2f:90:53:31:a4:
b1:f9:59:4d:94:79:3e:1d:b8:ef:e0:a8:5b:c9:da:12:75:31:
b8:fc:19:48:fc:7e:29:5a:23:c2:4b:78:fd:b3:87:34:64:87:
bf:3b:c3:c7:d9:c7:99:90:68:05:d7:08:2d:ea:66:53:42:e5:
cf:5d:e6:c6:1e:1c:60:21:92:99:93:7b:96:ba:08:0f:c5:32:
a5:41:c7:4b:0c:aa:50:4e:4a:92:8e:26:3e:62:01:61:74:ba:
4a:a9:1d:5a:28:2c:9d:a7:dc:12:20:75:96:56:0b:06:bc:f8:
86:b0:b4:a1:18:b8:e5:5c:ad:b1:d4:db:fa:a2:b3:29:44:40:
e3:73:8c:a6:0f:5d:cf:e3:3f:a6:77:bc:73:fb:04:6a:dd:4b:
7a:04:26:87:ea:00:1e:2a:af:d3:2f:10:4e:ef:12:85:11:dd:
b4:28:75:e9:20:58:83:ac:f2:ac:db:02:5e:a1:9b:78:fa:58:
05:95:bd:98:83:5d:d5:8b:ae:6a:a2:ef:3d:ea:c7:ae:c9:6a:
e8:e7:38:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:43:21 2025 by rpki-client