Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/c38360-743a-428f-ab97-6369b17ff178/1/zS0l92kTYIeMus6YWJC59e_PfZU.mft
File: zS0l92kTYIeMus6YWJC59e_PfZU.mft (raw, json)
Hash identifier: TupnO3QjmqolkO+Md3tWul81GfAFGu8N5cZiph9ky1E=
Subject key identifier: 8C:E6:15:A1:20:1C:FF:0C:CA:F9:05:FA:1C:6A:44:B6:B0:12:01:4F
Authority key identifier: CD:2D:25:F7:69:13:60:87:8C:BA:CE:98:58:90:B9:F5:EF:CF:7D:95
Certificate issuer: /CN=cd2d25f7691360878cbace985890b9f5efcf7d95
Certificate serial: 0199FD6B467E14C2249D10C7875D3A870E87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zS0l92kTYIeMus6YWJC59e_PfZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/c38360-743a-428f-ab97-6369b17ff178/1/zS0l92kTYIeMus6YWJC59e_PfZU.mft
Manifest number: 1639
Signing time: Sun 19 Oct 2025 17:01:29 +0000
Manifest this update: Sun 19 Oct 2025 17:01:29 +0000
Manifest next update: Mon 20 Oct 2025 17:01:29 +0000
Files and hashes: 1: lUKZFEQR5YFLyzQjNbMEJSbndmc.roa (hash: Ev1zfRFSrBx+hG5oLqV3IujShWJmSxI4j5cxDJLVNpw=)
2: zS0l92kTYIeMus6YWJC59e_PfZU.crl (hash: z7VYQgsrl5EGqhKUJgTiTkenwgr2VDDoOpkHWiMIErI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/c38360-743a-428f-ab97-6369b17ff178/1/zS0l92kTYIeMus6YWJC59e_PfZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/c38360-743a-428f-ab97-6369b17ff178/1/zS0l92kTYIeMus6YWJC59e_PfZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/zS0l92kTYIeMus6YWJC59e_PfZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:46:7e:14:c2:24:9d:10:c7:87:5d:3a:87:0e:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd2d25f7691360878cbace985890b9f5efcf7d95
Validity
Not Before: Oct 19 17:01:29 2025 GMT
Not After : Oct 20 17:01:29 2025 GMT
Subject: CN=8ce615a1201cff0ccaf905fa1c6a44b6b012014f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b1:82:d0:12:ef:59:cd:9c:ed:b4:f7:05:f8:
40:6a:7e:fd:e9:14:7e:34:26:7d:c4:fc:8d:01:d3:
5e:c9:0a:42:58:2b:af:52:a7:17:44:cc:8c:10:e4:
f5:90:45:44:8a:17:44:13:74:f4:f6:d6:58:51:34:
40:ba:b5:31:44:b3:08:f2:b1:0a:f1:c9:47:46:ff:
d4:b6:0e:dc:d5:fb:7c:5c:cb:a1:ca:8f:5d:fd:f6:
cd:da:61:e2:dd:e3:b8:3e:fa:dd:e8:1a:0a:99:1d:
0c:fc:fc:2c:f3:d6:fb:af:6b:ab:40:0c:39:b0:16:
9b:f5:76:84:b0:17:e0:9c:78:e4:cc:f1:b1:24:a1:
e5:86:9f:e9:1b:fe:e8:1d:c8:8e:72:e5:3f:c3:30:
90:16:78:6a:14:63:50:fb:81:28:e4:0b:2a:70:a3:
a6:1b:a0:5d:1f:aa:70:a5:56:a5:2d:e3:6e:b4:ef:
32:4c:9c:61:7a:5c:8b:ce:08:e6:55:5c:c7:61:5f:
2d:05:bd:10:a5:ba:4e:eb:e7:91:bd:e7:f1:e9:24:
bd:5b:db:91:b6:26:bc:f3:51:64:f0:e0:61:af:43:
32:ce:59:bb:15:c8:9a:eb:3d:ee:35:0e:6d:02:e3:
fb:d5:5f:38:04:aa:c9:7f:bd:f6:d9:11:d9:80:17:
43:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:E6:15:A1:20:1C:FF:0C:CA:F9:05:FA:1C:6A:44:B6:B0:12:01:4F
X509v3 Authority Key Identifier:
keyid:CD:2D:25:F7:69:13:60:87:8C:BA:CE:98:58:90:B9:F5:EF:CF:7D:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zS0l92kTYIeMus6YWJC59e_PfZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c38360-743a-428f-ab97-6369b17ff178/1/zS0l92kTYIeMus6YWJC59e_PfZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c38360-743a-428f-ab97-6369b17ff178/1/zS0l92kTYIeMus6YWJC59e_PfZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:7f:60:95:e0:aa:66:67:ae:eb:d7:72:ed:93:5a:6c:db:1f:
3d:e4:f5:31:ad:c7:76:9f:54:98:1a:6a:b6:0a:5e:79:d6:f0:
6b:b5:b2:42:ca:6d:6f:b8:46:16:2a:63:66:06:37:46:90:40:
ae:2e:ec:46:f9:e9:7b:4d:f3:e2:42:0b:54:70:4e:37:03:26:
58:ee:ed:98:b3:d6:bf:04:bf:e5:65:b1:72:1e:a9:da:69:d8:
42:51:6a:d1:a0:dc:ae:23:8f:c5:eb:bf:13:2b:a2:e7:9c:ac:
93:55:01:21:00:80:be:e4:2c:8b:76:4d:20:d0:58:d5:49:f0:
89:1e:a4:60:7a:fa:ba:31:0f:24:47:24:eb:00:60:4d:a9:49:
29:d7:2d:2f:ec:d0:5e:73:9e:f3:9e:ad:cb:67:af:f4:a5:5f:
ab:70:9e:cc:9f:65:33:f9:53:e6:0a:85:39:2e:cc:20:b5:05:
2e:9f:35:15:47:4f:c7:89:65:12:a2:5d:00:29:27:46:d3:2c:
34:f1:ff:9a:14:71:06:58:b8:8f:f0:2e:3b:dd:7a:dd:a1:d0:
d2:48:22:a8:8c:77:e3:39:ea:2d:58:e6:ae:8f:7d:0b:8c:3e:
02:5b:f9:de:d1:e3:6b:19:bc:d2:aa:46:f7:7c:1a:0f:a1:4c:
7b:97:36:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:36:14 2025 by rpki-client