Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/3a886e-4c26-425a-a14d-f21b6ae3be6c/1/ZixsPSLPaxAdcUgAbaenKE3LsyA.mft
File: ZixsPSLPaxAdcUgAbaenKE3LsyA.mft (raw, json)
Hash identifier: bF+cIlOZuNJeclboyV4A6PZLIt3MrLehc92KBzys2BU=
Subject key identifier: 8B:84:C7:7C:44:BE:F8:79:A5:86:BD:46:C1:40:CA:18:07:37:80:DD
Authority key identifier: 66:2C:6C:3D:22:CF:6B:10:1D:71:48:00:6D:A7:A7:28:4D:CB:B3:20
Certificate issuer: /CN=662c6c3d22cf6b101d7148006da7a7284dcbb320
Certificate serial: 0199FFC89B211384FD5CBFBA31AD2CAAFB94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZixsPSLPaxAdcUgAbaenKE3LsyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/3a886e-4c26-425a-a14d-f21b6ae3be6c/1/ZixsPSLPaxAdcUgAbaenKE3LsyA.mft
Manifest number: 1676
Signing time: Mon 20 Oct 2025 04:02:40 +0000
Manifest this update: Mon 20 Oct 2025 04:02:40 +0000
Manifest next update: Tue 21 Oct 2025 04:02:40 +0000
Files and hashes: 1: 4Oh7XZMGUvgYsZH7CZdGUoLIrDw.roa (hash: h4FhAkel555dNYUyqzqCdfQBJmgL5LydnG571p+4BQM=)
2: NrJiTnkwY5gDZRzjb1VKFaHAiqc.roa (hash: EZzv8aq1wUrfRrM9fo8iLug2Yq9YGVoqZENURQoeQj4=)
3: ZixsPSLPaxAdcUgAbaenKE3LsyA.crl (hash: TU0LugBcf9ktP9BNiNPthzmR8g9lxOC5YVGYkURWDpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/3a886e-4c26-425a-a14d-f21b6ae3be6c/1/ZixsPSLPaxAdcUgAbaenKE3LsyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/3a886e-4c26-425a-a14d-f21b6ae3be6c/1/ZixsPSLPaxAdcUgAbaenKE3LsyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZixsPSLPaxAdcUgAbaenKE3LsyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:02:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:9b:21:13:84:fd:5c:bf:ba:31:ad:2c:aa:fb:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=662c6c3d22cf6b101d7148006da7a7284dcbb320
Validity
Not Before: Oct 20 04:02:40 2025 GMT
Not After : Oct 21 04:02:40 2025 GMT
Subject: CN=8b84c77c44bef879a586bd46c140ca18073780dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e9:7f:77:01:a6:c6:a3:78:56:53:e8:66:e3:
c7:71:ff:fd:de:20:26:95:1d:1a:43:3f:c1:c7:39:
26:91:19:14:be:cc:68:6c:59:b6:89:5a:79:14:16:
5a:ee:2e:65:05:f1:21:d6:71:e3:4c:c2:ef:9e:56:
ac:69:b2:cf:f3:55:bd:51:a3:cb:d0:9e:4a:63:f3:
8c:aa:a2:96:2b:a6:5a:5d:0b:43:89:3b:f1:53:f6:
f9:40:3a:dc:dd:db:88:64:86:62:2f:3c:a0:da:6b:
93:94:92:7d:54:62:0a:af:25:06:a0:9c:06:90:e4:
6b:74:8c:c7:9c:4a:9c:8f:c1:d4:9f:80:a0:6c:5b:
b5:02:d3:65:b7:ff:91:8a:8b:e9:32:be:6b:df:49:
03:21:40:5f:01:b4:16:2d:7a:34:e4:ce:e7:4f:84:
ea:14:4f:a5:fc:34:d1:79:4c:b1:29:ee:ad:f7:e8:
db:23:8b:a4:b0:f5:80:bb:16:fd:de:ff:09:ff:35:
d2:ce:e6:14:46:82:55:f3:e9:fb:de:75:e0:55:67:
3d:b5:f1:9e:eb:aa:0c:41:d5:a2:11:e8:bd:49:4e:
5e:1c:d9:0c:f6:02:69:85:c3:33:ab:c2:5f:ac:c2:
15:9d:f4:05:31:f2:b8:a1:dd:0f:55:1e:80:28:f6:
a3:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:84:C7:7C:44:BE:F8:79:A5:86:BD:46:C1:40:CA:18:07:37:80:DD
X509v3 Authority Key Identifier:
keyid:66:2C:6C:3D:22:CF:6B:10:1D:71:48:00:6D:A7:A7:28:4D:CB:B3:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZixsPSLPaxAdcUgAbaenKE3LsyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3a886e-4c26-425a-a14d-f21b6ae3be6c/1/ZixsPSLPaxAdcUgAbaenKE3LsyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3a886e-4c26-425a-a14d-f21b6ae3be6c/1/ZixsPSLPaxAdcUgAbaenKE3LsyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:20:ca:52:5f:1f:c4:02:ab:93:65:93:2c:a4:4e:c8:ae:a5:
62:32:ce:66:c0:07:76:36:d8:4b:39:1a:9d:fd:36:83:a8:ea:
9d:a3:8b:9f:45:9a:97:48:0d:98:01:ba:71:c5:50:3a:07:5a:
f2:10:e3:cb:a3:f4:d9:3f:3e:83:0a:b9:5b:e4:a8:03:d5:32:
fa:07:fa:de:ad:f5:4e:b6:e6:08:c9:89:b7:72:d2:e3:32:76:
de:4b:47:b0:95:74:60:4f:19:9b:d2:67:44:94:7c:6f:e6:92:
ed:97:b4:76:48:10:93:2c:9b:53:4b:6b:3c:19:0d:43:30:9b:
3e:30:f9:5a:31:d7:9a:a4:b5:9b:ec:ef:e4:f4:9b:91:b0:3a:
7b:c8:75:5f:d2:8c:fd:4b:d9:ea:35:e5:75:6d:31:8f:f0:86:
3b:5a:af:1d:f9:e7:46:0d:8a:43:1a:cf:5a:b8:77:02:f7:7e:
c7:3b:37:cb:cc:df:c0:90:04:02:ee:6a:88:55:22:8f:c5:1f:
f0:06:1d:8c:93:9b:bc:2d:cf:1b:9a:69:de:b8:0d:ed:e8:26:
27:2c:99:97:89:42:9a:ba:c1:47:05:73:fd:f6:5d:1f:0c:12:
24:70:4e:26:57:c9:4b:e0:ff:53:46:5a:80:ab:02:93:36:10:
7a:ee:21:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:54:16 2025 by rpki-client