Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/81235b-2e04-471f-8689-69baafdd9a6e/1/Zm2XzrhOnGFr_m2TV2zDO79LY-8.mft
File: Zm2XzrhOnGFr_m2TV2zDO79LY-8.mft (raw, json)
Hash identifier: uI/kaHvW1aaJ2qVbaKKHlk/o/6pmlYxwkRW8P7NA9Ds=
Subject key identifier: 64:A0:E3:C4:A0:70:81:02:61:82:6B:C8:BB:E2:A0:EB:4C:5A:0D:62
Authority key identifier: 66:6D:97:CE:B8:4E:9C:61:6B:FE:6D:93:57:6C:C3:3B:BF:4B:63:EF
Certificate issuer: /CN=666d97ceb84e9c616bfe6d93576cc33bbf4b63ef
Certificate serial: 019A01EC17C73330CDDB76A714148E73F305
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zm2XzrhOnGFr_m2TV2zDO79LY-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/81235b-2e04-471f-8689-69baafdd9a6e/1/Zm2XzrhOnGFr_m2TV2zDO79LY-8.mft
Manifest number: 1659
Signing time: Mon 20 Oct 2025 14:00:40 +0000
Manifest this update: Mon 20 Oct 2025 14:00:40 +0000
Manifest next update: Tue 21 Oct 2025 14:00:40 +0000
Files and hashes: 1: Zm2XzrhOnGFr_m2TV2zDO79LY-8.crl (hash: 7DHt9QJi2P9doPEJBFFFzD3cMHk6FIw54u+ovD6qUwU=)
2: ozTEzJ9CezdFTub-OtUArZTGCUk.roa (hash: hY/JTd/yJ1qrW6X45LIcw6pONHk7vyqJi7EpOCN1u7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/81235b-2e04-471f-8689-69baafdd9a6e/1/Zm2XzrhOnGFr_m2TV2zDO79LY-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/81235b-2e04-471f-8689-69baafdd9a6e/1/Zm2XzrhOnGFr_m2TV2zDO79LY-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zm2XzrhOnGFr_m2TV2zDO79LY-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:ec:17:c7:33:30:cd:db:76:a7:14:14:8e:73:f3:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=666d97ceb84e9c616bfe6d93576cc33bbf4b63ef
Validity
Not Before: Oct 20 14:00:40 2025 GMT
Not After : Oct 21 14:00:40 2025 GMT
Subject: CN=64a0e3c4a070810261826bc8bbe2a0eb4c5a0d62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3d:26:08:2c:3b:83:ea:21:06:7c:05:90:9d:
11:4b:74:42:45:32:c6:ca:ab:36:77:81:4c:65:8f:
e8:b8:6c:48:7e:94:e2:81:51:48:e1:42:bd:04:11:
e9:e5:d8:c4:e6:10:ef:be:00:d7:d7:32:f6:35:b3:
90:b5:2f:01:2b:3d:a0:7f:da:63:ee:ab:b2:c3:c4:
cf:c0:5b:d1:fd:6a:ae:eb:b3:61:20:36:e2:56:10:
88:a1:b3:1b:4c:9e:65:f4:10:bd:9f:36:46:b5:83:
5f:d8:1b:8d:49:79:b1:6c:b8:71:3e:b3:17:1f:3b:
ae:d3:3d:75:ec:e2:48:86:3d:10:ec:26:bc:aa:68:
be:8f:5d:87:1a:96:5d:fe:94:0f:f5:66:4f:77:cf:
3b:8e:b8:d8:a6:f3:fc:b8:2e:f8:97:7b:ba:e2:a6:
f0:06:68:77:bd:55:ca:9c:15:98:8f:48:4d:f3:d3:
ea:17:f2:cb:f6:69:e8:ce:6c:76:01:e9:51:bd:00:
14:16:65:19:ff:da:1a:46:41:fe:ec:d7:7a:d9:2d:
b2:93:92:8f:a1:35:0d:bc:71:ad:47:cd:d4:54:f8:
a7:e1:4a:cc:11:b8:8b:16:39:5f:91:1f:93:c9:8b:
cc:9a:61:a7:a6:5b:b9:5c:45:e0:95:27:07:77:f5:
29:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:A0:E3:C4:A0:70:81:02:61:82:6B:C8:BB:E2:A0:EB:4C:5A:0D:62
X509v3 Authority Key Identifier:
keyid:66:6D:97:CE:B8:4E:9C:61:6B:FE:6D:93:57:6C:C3:3B:BF:4B:63:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zm2XzrhOnGFr_m2TV2zDO79LY-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/81235b-2e04-471f-8689-69baafdd9a6e/1/Zm2XzrhOnGFr_m2TV2zDO79LY-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/81235b-2e04-471f-8689-69baafdd9a6e/1/Zm2XzrhOnGFr_m2TV2zDO79LY-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:b9:00:08:e3:78:21:0a:de:d2:90:36:e8:49:a3:9b:3d:ce:
be:9d:3f:15:2e:c1:f0:eb:e2:35:b4:90:68:5e:eb:84:42:fb:
78:4b:f5:7a:c0:78:a9:05:19:fc:89:dd:a8:db:37:f6:bb:13:
20:5f:96:2c:f2:b0:1b:04:be:51:cd:1f:fe:de:bd:5a:33:8d:
48:7d:94:7e:07:98:d6:2f:35:31:49:d3:59:f1:99:e5:72:8a:
6f:e5:db:d6:70:a7:60:a8:f4:dd:0d:7a:f9:fb:4f:02:27:d5:
15:53:97:5b:56:b0:3f:b6:26:16:26:2c:4c:c5:e1:71:ed:bc:
63:7b:77:06:45:74:3b:ab:d6:5d:7f:12:4c:c6:41:b6:c1:c0:
d9:37:c5:4c:0c:3c:39:12:df:69:da:4a:15:c4:99:ef:de:a5:
0c:21:d1:f7:e5:a4:97:f7:84:a7:e4:a3:c0:d5:2b:31:94:c5:
d9:a9:31:c2:ef:7f:18:f0:4c:1b:b3:0e:27:e2:d9:8b:9e:5a:
92:54:15:7a:fc:48:41:6d:5f:f7:f9:88:08:f7:86:32:f1:c1:
70:6e:e8:3a:24:c2:2d:0a:46:6e:3a:0a:33:71:04:3b:17:5f:
66:70:04:13:06:08:14:0d:b0:dc:57:dc:4e:a7:67:2b:1a:98:
b8:8f:2d:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:34:43 2025 by rpki-client