
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/Z5IEIPci99fzxLJagOF9cpAXEYA.mft
File: Z5IEIPci99fzxLJagOF9cpAXEYA.mft (raw, json)
Hash identifier: w6l0bV0GCaBjjhjtLdnl+yfbP2gWBQyZrAl5wzCX5W8=
Subject key identifier: EA:8E:29:B0:46:B3:C6:7D:8F:24:40:80:E9:0D:1D:22:8B:2C:F6:3A
Authority key identifier: 67:92:04:20:F7:22:F7:D7:F3:C4:B2:5A:80:E1:7D:72:90:17:11:80
Certificate issuer: /CN=67920420f722f7d7f3c4b25a80e17d7290171180
Certificate serial: 0199FC8F40FC791C61E9B65D605C95914634
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5IEIPci99fzxLJagOF9cpAXEYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/Z5IEIPci99fzxLJagOF9cpAXEYA.mft
Manifest number: 16E8
Signing time: Sun 19 Oct 2025 13:01:10 +0000
Manifest this update: Sun 19 Oct 2025 13:01:10 +0000
Manifest next update: Mon 20 Oct 2025 13:01:10 +0000
Files and hashes: 1: Z5IEIPci99fzxLJagOF9cpAXEYA.crl (hash: +kBDYde0HSEiPVtBBcos7p/Le6j9XqCZev0cgOv7oH8=)
2: Z_jY3GWRnD6yHDyYL47ZMC9cQoU.roa (hash: WEDbZfz2xY2QG+1hs64UqV8JMCBq7ofZo+b0N35NykY=)
3: xBNVpyyOOL8xE0VBiFpOltY2l4Q.roa (hash: lrgPvLXOCgVkDldPssS2AHRsC1SEtuYHBOG2NxYMrqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/Z5IEIPci99fzxLJagOF9cpAXEYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/Z5IEIPci99fzxLJagOF9cpAXEYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z5IEIPci99fzxLJagOF9cpAXEYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:40:fc:79:1c:61:e9:b6:5d:60:5c:95:91:46:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67920420f722f7d7f3c4b25a80e17d7290171180
Validity
Not Before: Oct 19 13:01:10 2025 GMT
Not After : Oct 20 13:01:10 2025 GMT
Subject: CN=ea8e29b046b3c67d8f244080e90d1d228b2cf63a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:88:d1:29:f7:3b:a1:dd:e9:f4:61:32:49:2e:
13:c8:a1:63:e1:cb:02:77:10:8c:a4:73:2a:68:b7:
73:d6:6f:cb:8a:52:ba:8e:d7:9f:8a:ec:ed:f4:93:
45:7c:dd:44:e4:a7:69:db:93:17:03:3e:61:94:aa:
49:6f:1b:fd:56:0f:ce:fc:68:e8:bf:69:a7:43:79:
d2:cd:9f:d0:30:76:68:fa:54:c8:5f:5e:5f:93:ea:
1a:6c:a8:63:77:a0:f7:90:3c:98:fb:51:c3:6b:83:
75:61:d8:e6:69:32:58:f5:69:d6:ce:a8:19:dc:a1:
b2:f9:67:8b:a3:9f:08:a8:15:ee:72:27:15:24:23:
6f:dd:24:de:a4:ac:66:d1:ba:c7:2e:f6:95:0b:93:
3c:18:ad:26:83:f1:98:48:70:c0:68:4a:ac:ff:63:
02:30:b3:76:74:7e:8c:f5:f0:53:99:94:2a:68:bf:
43:c8:70:2f:1a:4b:c3:2c:13:34:51:b1:a4:02:38:
cd:33:4d:7f:67:2f:44:9d:cd:f7:c1:cb:66:9b:50:
d7:62:a8:a5:25:2c:61:b7:0a:05:20:ca:19:d1:4c:
cf:c9:8b:8b:1c:55:c8:80:76:45:25:6a:40:db:c7:
0d:72:57:45:ab:40:4b:5d:cb:26:02:24:2b:d4:c6:
af:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:8E:29:B0:46:B3:C6:7D:8F:24:40:80:E9:0D:1D:22:8B:2C:F6:3A
X509v3 Authority Key Identifier:
keyid:67:92:04:20:F7:22:F7:D7:F3:C4:B2:5A:80:E1:7D:72:90:17:11:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5IEIPci99fzxLJagOF9cpAXEYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/Z5IEIPci99fzxLJagOF9cpAXEYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/Z5IEIPci99fzxLJagOF9cpAXEYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:fc:d1:c4:c7:1f:28:de:de:42:bd:f9:7a:9a:bc:98:e6:a5:
76:6d:a1:92:95:bb:fc:76:17:fc:1f:31:9c:1e:c2:41:31:ae:
68:87:46:72:98:19:4a:e7:3a:77:2c:d9:7f:da:ec:ef:17:84:
91:66:ce:4e:be:e0:7e:ac:10:e7:52:97:9b:67:70:7b:03:25:
62:20:43:ca:38:2f:6a:82:37:47:4f:9f:f3:5b:82:f5:ca:3a:
5a:9a:22:8c:96:2d:03:73:a2:8e:5d:d1:d7:a0:36:8b:c6:e6:
f6:ae:e6:79:f2:1f:36:c2:0d:c9:e6:aa:84:d4:53:e0:ba:a6:
08:b6:52:3c:5d:a6:26:65:7a:1d:9e:06:80:5d:ac:5f:d8:cb:
7c:a2:e9:18:6e:47:c5:95:a3:4f:f6:00:6a:58:9c:57:a8:dc:
36:8b:0d:25:68:f9:5c:5f:f0:dc:71:f9:86:94:d0:a1:85:59:
03:eb:c4:ea:b9:3c:5d:fa:3a:8c:2e:39:ae:3d:4e:b6:f1:ab:
23:eb:7a:bc:9d:83:c7:f1:3d:b4:c4:9f:f7:b9:ad:72:61:93:
8c:6c:1e:c0:37:c7:d7:3b:52:c3:b6:74:ed:6c:82:4c:45:b9:
69:cf:49:a8:3d:45:1f:64:10:99:46:74:40:90:91:9d:54:07:
d3:84:60:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:18:36 2025 by rpki-client