Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/2be009-1ef1-4d57-8f01-7e184b070bbd/1/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.mft
File: zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.mft (raw, json)
Hash identifier: B5MzkLGyHycPIG3Nl0Ce/MISnip3FauWzEZ4bSyuH+Y=
Subject key identifier: D4:2C:D3:E7:56:2F:CD:94:56:0D:8A:55:F1:CF:BB:27:B6:55:23:14
Authority key identifier: CE:46:EA:62:9A:FB:0C:2D:54:20:0B:5A:65:72:7B:E1:8C:BB:45:A4
Certificate issuer: /CN=ce46ea629afb0c2d54200b5a65727be18cbb45a4
Certificate serial: 0199FD6AD788D8E9AF964DB64692DF5B3CFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/2be009-1ef1-4d57-8f01-7e184b070bbd/1/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.mft
Manifest number: 0F94
Signing time: Sun 19 Oct 2025 17:01:01 +0000
Manifest this update: Sun 19 Oct 2025 17:01:01 +0000
Manifest next update: Mon 20 Oct 2025 17:01:01 +0000
Files and hashes: 1: xWr5Uv-m_2n6jrRfiUwYnyQQGpc.roa (hash: i1R3GX2qn3HUs47acSt8qqkjUz+ff6QT9CroD89ajl8=)
2: zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.crl (hash: lrKb2V7yhbRVkzuPQ7J/vzm1D1W6wx6t52rA6podp4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/2be009-1ef1-4d57-8f01-7e184b070bbd/1/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/2be009-1ef1-4d57-8f01-7e184b070bbd/1/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 17:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6a:d7:88:d8:e9:af:96:4d:b6:46:92:df:5b:3c:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce46ea629afb0c2d54200b5a65727be18cbb45a4
Validity
Not Before: Oct 19 17:01:01 2025 GMT
Not After : Oct 20 17:01:01 2025 GMT
Subject: CN=d42cd3e7562fcd94560d8a55f1cfbb27b6552314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f7:00:e4:37:c4:cf:34:e9:f2:d7:ca:16:47:
f7:33:14:a4:a5:b2:59:c0:be:17:f8:3f:8a:e1:60:
8c:4f:72:1b:5e:46:b3:1c:87:50:ec:36:a9:4d:2c:
0d:c5:b2:ef:1b:a5:c7:55:bf:42:be:88:64:9e:6f:
6e:2c:47:7a:13:3c:8b:c3:cd:92:dc:ad:8d:23:6f:
7e:18:ae:50:7f:17:fc:e9:12:6d:77:cf:19:3f:d4:
53:78:7e:74:ed:8e:13:c7:95:a3:cf:e8:c7:8c:05:
f4:88:ac:e6:db:19:ee:c8:19:6a:a6:a7:bb:0c:c2:
ae:c3:56:bc:ca:35:03:40:c9:21:fd:92:7d:9c:9e:
03:43:55:ee:37:48:10:f0:72:b2:5e:54:0a:01:60:
5f:2c:46:0e:97:e2:14:98:b5:f1:1c:b3:c1:b5:02:
17:21:de:ff:ea:5c:78:ef:b0:07:1a:12:70:a0:a1:
fb:6d:04:c9:9f:93:ef:b4:59:75:a5:1b:7f:1a:b4:
6c:a9:d4:63:7d:83:1d:12:75:98:75:63:b2:ea:42:
3d:60:0b:04:15:80:78:ad:d0:ed:eb:c7:16:c7:16:
cb:ee:6a:9e:ae:2c:d1:be:2f:80:b8:de:12:30:f8:
cd:99:23:9c:34:cf:93:59:9d:96:e2:d8:5f:61:5a:
13:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:2C:D3:E7:56:2F:CD:94:56:0D:8A:55:F1:CF:BB:27:B6:55:23:14
X509v3 Authority Key Identifier:
keyid:CE:46:EA:62:9A:FB:0C:2D:54:20:0B:5A:65:72:7B:E1:8C:BB:45:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/2be009-1ef1-4d57-8f01-7e184b070bbd/1/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/2be009-1ef1-4d57-8f01-7e184b070bbd/1/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:b5:d5:66:9d:e9:11:44:c2:0f:69:c9:2a:68:c3:89:a3:44:
60:3a:d0:aa:6b:f1:d1:97:52:5e:2f:3e:e3:f6:ed:c8:b4:82:
15:80:9e:42:26:ab:73:d2:25:23:5f:ef:3f:8b:7d:f9:1d:70:
5d:e3:bf:a1:aa:a8:09:86:40:d9:6d:83:f0:ab:25:08:3f:ed:
cd:56:16:ee:8e:46:31:52:b2:10:a6:0c:04:c8:86:6e:ce:37:
b1:81:66:99:31:f9:31:7c:38:6c:b0:c0:dc:34:c9:f6:35:ad:
bf:f4:b9:06:3a:18:54:b9:6a:a2:d8:f7:33:f7:8f:ad:6e:6b:
d7:54:c5:9f:27:60:e7:ba:10:e7:66:fc:8a:28:7a:1d:1d:46:
04:c7:32:e5:0a:74:fe:cc:d8:67:0a:02:98:8b:d5:cb:10:1d:
dc:ed:ab:fd:b0:76:6e:9b:2d:76:1f:22:06:97:6d:7c:d7:a4:
c3:6e:fb:37:02:0d:0c:1f:c3:d6:42:49:b8:31:70:af:36:24:
9f:23:72:c1:48:2f:00:5e:3d:9e:19:06:1a:ef:dc:b5:b4:77:
ce:77:c2:60:75:3e:2e:f1:27:f8:35:0d:11:9f:15:7c:f2:d1:
e7:de:57:2f:55:2e:26:1e:ea:e5:36:5c:13:d6:e3:d4:e7:07:
d6:54:96:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:41:18 2025 by rpki-client