Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/zEa__4uQ43SFVboUR_1O3sw0ChM.mft
File: zEa__4uQ43SFVboUR_1O3sw0ChM.mft (raw, json)
Hash identifier: mLJ/NctLPph+t/5P9DdmkcAOaD+YdXLeXLXeqDq8gho=
Subject key identifier: 39:9A:82:7C:29:27:81:BE:7C:35:14:03:5F:33:BA:B0:CB:F3:F6:B0
Authority key identifier: CC:46:BF:FF:8B:90:E3:74:85:55:BA:14:47:FD:4E:DE:CC:34:0A:13
Certificate issuer: /CN=cc46bfff8b90e3748555ba1447fd4edecc340a13
Certificate serial: 0199FC2188A688B951C4DC9E40873D7CE495
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zEa__4uQ43SFVboUR_1O3sw0ChM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/zEa__4uQ43SFVboUR_1O3sw0ChM.mft
Manifest number: 16E6
Signing time: Sun 19 Oct 2025 11:01:20 +0000
Manifest this update: Sun 19 Oct 2025 11:01:20 +0000
Manifest next update: Mon 20 Oct 2025 11:01:20 +0000
Files and hashes: 1: F0jtKGP40uC6UeGFBvx9vjMBKeg.roa (hash: /o36By5Q83qZbeXySOjiZ7fpjLFdoyPEIY6paV+aTiU=)
2: K0qFWulaqLgz9oT0AMcv9eNzEJE.roa (hash: Y/5We05dA9t/MagriMHFfJFSjAFcig5JEV5W+cYXjE4=)
3: zEa__4uQ43SFVboUR_1O3sw0ChM.crl (hash: Z4hotD3POehz3zFsZrF6ADklcFSYDS9KmKK2BvDWhJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/zEa__4uQ43SFVboUR_1O3sw0ChM.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/zEa__4uQ43SFVboUR_1O3sw0ChM.mft
rsync://rpki.ripe.net/repository/DEFAULT/zEa__4uQ43SFVboUR_1O3sw0ChM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:88:a6:88:b9:51:c4:dc:9e:40:87:3d:7c:e4:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc46bfff8b90e3748555ba1447fd4edecc340a13
Validity
Not Before: Oct 19 11:01:20 2025 GMT
Not After : Oct 20 11:01:20 2025 GMT
Subject: CN=399a827c292781be7c3514035f33bab0cbf3f6b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3e:e6:af:49:53:6c:71:f0:44:1e:8a:6d:0f:
72:70:10:38:74:d5:cf:df:b4:2f:eb:35:79:6a:2d:
59:df:69:b1:26:49:b1:f3:14:5c:df:a2:3e:64:3a:
24:de:0c:9d:05:12:0a:88:71:94:12:18:f6:8b:a4:
6b:1b:8a:2f:13:5c:65:0a:28:cd:d2:0b:14:f8:28:
07:19:f2:2d:ad:07:e1:91:8b:04:2f:47:8c:d2:96:
e4:3a:22:d2:1b:ad:eb:99:16:49:49:02:d2:0a:be:
37:82:2c:d4:a2:4f:84:4c:c0:87:1b:5a:1a:cc:59:
64:22:6b:27:6d:c3:c1:59:e7:3f:11:b1:44:7e:ad:
29:24:8b:b0:6c:b7:c7:21:e9:17:af:b0:95:6c:1d:
ed:72:35:f4:23:7b:c4:62:36:83:ee:a4:aa:57:c0:
d1:7b:d5:db:e1:37:5a:0f:97:e6:42:fa:46:84:41:
78:23:57:ab:d8:00:03:04:0e:bf:35:45:41:4f:43:
7a:ce:5a:82:12:d6:dd:45:ff:9b:ce:3c:9a:3f:fb:
95:7e:2a:a4:b5:4c:29:5c:d8:eb:8f:a7:ac:d9:e0:
c3:c3:bf:4c:a4:0e:58:13:c2:b6:a9:09:9e:d9:06:
2f:4c:d7:ce:79:83:cd:f9:6f:f0:81:85:b8:88:fe:
f0:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:9A:82:7C:29:27:81:BE:7C:35:14:03:5F:33:BA:B0:CB:F3:F6:B0
X509v3 Authority Key Identifier:
keyid:CC:46:BF:FF:8B:90:E3:74:85:55:BA:14:47:FD:4E:DE:CC:34:0A:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zEa__4uQ43SFVboUR_1O3sw0ChM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/zEa__4uQ43SFVboUR_1O3sw0ChM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/zEa__4uQ43SFVboUR_1O3sw0ChM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:4b:54:18:65:23:24:5e:ba:a6:14:09:3f:0f:88:50:98:40:
40:33:51:69:ec:33:5d:9a:2d:53:0e:76:f6:ed:15:a6:5c:15:
75:53:da:fb:61:53:e3:01:27:0e:93:63:c1:fb:67:71:6b:1f:
8e:20:94:3f:5e:58:c9:f0:fb:25:95:0f:00:77:88:dc:cf:19:
85:63:2c:c9:81:da:7f:8a:33:52:b8:63:71:37:66:d6:ec:f6:
7e:d3:6d:68:c8:e9:6c:41:35:cd:91:21:43:72:6a:50:ed:6b:
bb:bf:1a:6d:9a:39:b8:ef:7a:e7:00:a4:ea:e8:7c:66:a1:e7:
b8:9c:93:3f:fb:1e:73:68:20:cd:d9:71:6c:42:de:46:ef:ee:
ed:66:b3:1e:8e:df:7e:a1:2d:cc:dd:c5:d3:ec:6f:47:ef:c7:
fe:74:59:0a:3b:1e:57:d3:70:75:b5:ef:0e:cc:90:c6:16:51:
33:bf:bd:0e:65:3e:2d:8b:3d:62:81:70:34:61:cb:54:86:43:
7b:f1:f2:dc:77:6d:ed:95:a5:1d:d9:2c:ff:0d:2b:e4:8d:8f:
f6:2a:ae:13:ef:a3:4f:98:4c:5a:15:db:52:74:77:d0:a9:77:
d1:bc:f4:8d:a3:47:26:e5:57:96:da:9e:13:56:08:b9:d4:14:
2c:9a:a4:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:17 2025 by rpki-client