Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/3a886e-4c26-425a-a14d-f21b6ae3be6c/1/ZixsPSLPaxAdcUgAbaenKE3LsyA.mft
File: ZixsPSLPaxAdcUgAbaenKE3LsyA.mft (raw, json)
Hash identifier: xQpqRl3suXWRhfMS9PTn1fpI7HB1tHj728FWI006tEI=
Subject key identifier: 67:C1:79:C4:09:A4:AB:6D:2E:2F:9B:7A:A4:46:FB:C7:AF:47:20:E4
Authority key identifier: 66:2C:6C:3D:22:CF:6B:10:1D:71:48:00:6D:A7:A7:28:4D:CB:B3:20
Certificate issuer: /CN=662c6c3d22cf6b101d7148006da7a7284dcbb320
Certificate serial: 019A01B681F5F17EE4B8AE4A217327F83F34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZixsPSLPaxAdcUgAbaenKE3LsyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/3a886e-4c26-425a-a14d-f21b6ae3be6c/1/ZixsPSLPaxAdcUgAbaenKE3LsyA.mft
Manifest number: 1677
Signing time: Mon 20 Oct 2025 13:02:09 +0000
Manifest this update: Mon 20 Oct 2025 13:02:09 +0000
Manifest next update: Tue 21 Oct 2025 13:02:09 +0000
Files and hashes: 1: 4Oh7XZMGUvgYsZH7CZdGUoLIrDw.roa (hash: h4FhAkel555dNYUyqzqCdfQBJmgL5LydnG571p+4BQM=)
2: NrJiTnkwY5gDZRzjb1VKFaHAiqc.roa (hash: EZzv8aq1wUrfRrM9fo8iLug2Yq9YGVoqZENURQoeQj4=)
3: ZixsPSLPaxAdcUgAbaenKE3LsyA.crl (hash: vsBnDXIpk6gGnk/xSAv0ZFrCD9sfcOmH7RPJs5oDo/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/3a886e-4c26-425a-a14d-f21b6ae3be6c/1/ZixsPSLPaxAdcUgAbaenKE3LsyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/3a886e-4c26-425a-a14d-f21b6ae3be6c/1/ZixsPSLPaxAdcUgAbaenKE3LsyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZixsPSLPaxAdcUgAbaenKE3LsyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:b6:81:f5:f1:7e:e4:b8:ae:4a:21:73:27:f8:3f:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=662c6c3d22cf6b101d7148006da7a7284dcbb320
Validity
Not Before: Oct 20 13:02:09 2025 GMT
Not After : Oct 21 13:02:09 2025 GMT
Subject: CN=67c179c409a4ab6d2e2f9b7aa446fbc7af4720e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2c:fb:48:00:66:b3:76:c7:9e:50:42:eb:44:
23:53:86:b4:62:84:7f:f3:77:01:4b:2c:f6:e6:c5:
ce:97:5f:e9:ee:3e:67:13:57:76:8e:53:76:f1:cc:
df:f3:71:82:55:a3:8c:9e:33:e9:a9:c1:36:d8:84:
84:4c:40:96:c8:1e:ad:9e:da:18:70:5d:dd:77:1f:
ce:4b:9e:f9:fb:81:5f:e6:1b:a0:e5:7d:24:8e:50:
6a:91:13:16:f4:d1:67:3b:2d:79:91:7c:68:a4:9f:
dd:3d:4b:31:9f:8e:6d:f3:0d:35:f1:65:3f:6b:7e:
06:88:11:63:fc:f7:aa:70:a5:b5:b4:66:a7:28:7e:
52:d7:88:97:05:cd:58:2c:93:8d:ea:4e:6f:94:5b:
25:ba:30:11:60:1a:73:b6:89:37:06:27:11:9a:b9:
bb:dc:3c:2e:26:a1:4e:55:ad:e4:3e:03:c5:a8:c2:
15:7a:90:71:40:e9:5b:da:4b:c9:ac:a5:a7:76:69:
f0:6a:83:92:8a:e1:b5:7b:a2:54:93:e2:8b:64:3f:
7d:07:fa:d8:bc:ee:29:a3:23:4b:cf:f5:d9:af:ec:
a0:3e:71:5d:6d:ad:33:5a:55:ba:d6:11:60:57:0e:
02:7f:a0:ee:8e:81:8b:c4:a8:8f:1f:91:90:70:dd:
3a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:C1:79:C4:09:A4:AB:6D:2E:2F:9B:7A:A4:46:FB:C7:AF:47:20:E4
X509v3 Authority Key Identifier:
keyid:66:2C:6C:3D:22:CF:6B:10:1D:71:48:00:6D:A7:A7:28:4D:CB:B3:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZixsPSLPaxAdcUgAbaenKE3LsyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3a886e-4c26-425a-a14d-f21b6ae3be6c/1/ZixsPSLPaxAdcUgAbaenKE3LsyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3a886e-4c26-425a-a14d-f21b6ae3be6c/1/ZixsPSLPaxAdcUgAbaenKE3LsyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:c6:4d:90:6c:bc:02:c3:13:30:4c:18:0d:d1:13:de:63:61:
12:6d:e9:0e:b8:4c:f8:df:e1:d4:81:a9:83:df:52:0b:43:a7:
65:ab:81:b0:90:4e:b0:54:3b:28:26:1b:22:80:5c:5b:7b:aa:
fd:3d:52:39:ba:10:54:cb:d9:d8:ee:0b:78:66:b0:30:14:f5:
3c:e3:aa:48:08:0c:27:2e:a2:be:42:f9:3e:79:c8:eb:c4:4a:
fb:82:b0:a7:6e:42:96:c5:14:c9:60:0d:9e:1d:89:d6:d5:13:
90:84:b6:7a:01:45:2c:66:72:f5:cb:98:5d:e8:e7:e1:24:ca:
94:e5:79:3b:cb:74:66:07:fa:75:2d:84:fb:9b:ae:a3:95:36:
38:b6:5e:f1:f4:8f:0c:4d:f1:c1:9e:a6:5c:c4:e0:45:2f:6d:
b1:1a:fc:f3:c1:4c:59:ab:fa:ea:3c:06:df:53:92:84:d0:ad:
82:6c:c7:91:65:96:e3:60:72:67:e8:42:52:00:de:0b:fa:74:
56:70:48:f2:a2:e6:df:4a:bc:b8:53:01:3c:36:84:4e:56:2d:
4e:2b:b6:dd:5e:24:66:ac:33:17:c7:7b:f3:9a:fc:e0:3f:ba:
56:47:a0:41:f5:f4:cd:b2:00:72:cc:31:0d:09:ef:49:c4:99:
d4:df:12:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:14:50 2025 by rpki-client