Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/1baff1-dda3-4304-b1b3-5182eede2a29/1/ZDZqc5FfkJDUsQg4l6pAJXfhY94.mft
File: ZDZqc5FfkJDUsQg4l6pAJXfhY94.mft (raw, json)
Hash identifier: B/nmJv3vwRRw7vDgZfw1dmpp2Ycdgj/KvyN8QEHD0lk=
Subject key identifier: 38:34:61:16:91:E6:E0:D2:1B:57:86:81:02:F0:B9:62:67:D9:5F:7A
Authority key identifier: 64:36:6A:73:91:5F:90:90:D4:B1:08:38:97:AA:40:25:77:E1:63:DE
Certificate issuer: /CN=64366a73915f9090d4b1083897aa402577e163de
Certificate serial: 0199FB7C95178A3F427F71D10C5DE35A8A41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZDZqc5FfkJDUsQg4l6pAJXfhY94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/1baff1-dda3-4304-b1b3-5182eede2a29/1/ZDZqc5FfkJDUsQg4l6pAJXfhY94.mft
Manifest number: 06C4
Signing time: Sun 19 Oct 2025 08:01:09 +0000
Manifest this update: Sun 19 Oct 2025 08:01:09 +0000
Manifest next update: Mon 20 Oct 2025 08:01:09 +0000
Files and hashes: 1: UMWovwfUscq8UXa7HcOk99jOyUw.roa (hash: qIZD+/8tTRjxnDRolqscZk7I94oyVCzhMP8LFn0HeeI=)
2: ZDZqc5FfkJDUsQg4l6pAJXfhY94.crl (hash: K+Z3XhWJ5mrq3eeYe9dAm+x/mYmh95S+eAD2yE2oiPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/1baff1-dda3-4304-b1b3-5182eede2a29/1/ZDZqc5FfkJDUsQg4l6pAJXfhY94.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/1baff1-dda3-4304-b1b3-5182eede2a29/1/ZDZqc5FfkJDUsQg4l6pAJXfhY94.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZDZqc5FfkJDUsQg4l6pAJXfhY94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:95:17:8a:3f:42:7f:71:d1:0c:5d:e3:5a:8a:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64366a73915f9090d4b1083897aa402577e163de
Validity
Not Before: Oct 19 08:01:09 2025 GMT
Not After : Oct 20 08:01:09 2025 GMT
Subject: CN=3834611691e6e0d21b57868102f0b96267d95f7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a7:65:60:93:96:ee:18:52:a3:59:fa:b6:b7:
70:66:9b:f8:bc:73:75:85:72:dc:ef:27:f1:a4:0c:
35:3b:1c:4e:33:46:35:90:5e:fe:f7:69:bb:76:4c:
18:2c:13:c2:7b:ff:19:c0:f5:00:19:a5:7a:9d:33:
5f:7a:8d:ff:18:12:dd:8c:24:f3:e6:63:9e:7b:98:
44:88:fb:d6:cd:be:71:a6:c6:64:24:f8:f4:69:e1:
64:33:58:fb:f9:7f:52:fa:9f:50:1c:af:b0:4b:bf:
ad:c9:43:76:6d:40:43:48:dc:51:34:65:b0:3b:11:
9f:cd:37:98:ef:ad:60:22:56:67:73:6a:8d:67:45:
35:a7:19:e2:4f:8b:32:02:81:1a:eb:e0:c4:95:3b:
7e:a7:1b:94:2b:a7:fb:e3:4a:02:2e:9b:c4:2d:fb:
f9:aa:7a:1f:d9:2f:50:82:31:ce:84:7c:86:e9:49:
02:58:29:99:3c:ef:05:85:99:6e:b8:82:04:31:61:
7d:d5:81:23:d1:45:c6:8e:e9:15:b0:b5:b9:46:5c:
8e:2c:b3:33:b4:7a:bc:f4:19:99:db:c5:db:c4:c2:
7c:4e:b2:cc:58:73:54:96:f5:ea:0b:ef:ab:94:f4:
85:f8:35:de:6b:46:1b:a4:c9:d0:98:0d:48:e0:77:
36:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:34:61:16:91:E6:E0:D2:1B:57:86:81:02:F0:B9:62:67:D9:5F:7A
X509v3 Authority Key Identifier:
keyid:64:36:6A:73:91:5F:90:90:D4:B1:08:38:97:AA:40:25:77:E1:63:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZDZqc5FfkJDUsQg4l6pAJXfhY94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/1baff1-dda3-4304-b1b3-5182eede2a29/1/ZDZqc5FfkJDUsQg4l6pAJXfhY94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/1baff1-dda3-4304-b1b3-5182eede2a29/1/ZDZqc5FfkJDUsQg4l6pAJXfhY94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:c2:7c:20:2f:21:a4:13:8a:61:5d:72:fc:1c:e9:89:32:c1:
db:45:0d:36:a1:61:09:1c:2d:d5:dd:13:6e:d7:35:b9:35:36:
40:fb:9d:6c:9f:b1:51:21:c1:58:92:7a:e2:40:42:19:b5:27:
0f:be:90:0d:94:21:e2:cb:8d:63:fc:40:b9:9a:fc:9f:55:e0:
1f:9b:39:f8:43:28:36:a1:5e:01:86:58:00:98:62:ba:8b:02:
08:e9:28:78:60:fc:36:fd:d6:dc:3b:3e:42:9d:9e:c3:5b:37:
2e:b8:4e:0e:7f:4c:68:45:6e:93:f5:ef:f8:b2:86:27:98:bf:
f8:c7:42:70:86:19:be:2b:a0:03:a8:db:4d:f3:53:c7:cf:58:
f8:95:8f:16:c4:d0:5f:36:24:e7:a7:33:94:94:01:5c:d5:80:
9d:19:45:ee:6f:a7:58:1f:d3:4b:d0:66:81:20:b6:f0:40:96:
7c:34:30:6e:56:2f:53:92:70:23:62:45:5e:c1:64:3b:da:5f:
74:71:a7:56:70:6d:93:ca:ff:31:f0:54:33:fd:5d:c6:2a:7e:
0f:12:b8:04:d0:29:ff:b5:61:46:7d:80:66:a7:dd:27:b9:df:
c4:4f:72:e6:ad:27:dc:2c:6f:d4:a1:92:27:eb:68:f1:b0:c2:
6c:d6:09:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:00 2025 by rpki-client