Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/zZGetcIQg2AVXef7TyFqBVrjHwk.mft
File: zZGetcIQg2AVXef7TyFqBVrjHwk.mft (raw, json)
Hash identifier: +6CZA0V1vVWVoGn8NVF2q+5gFZvuY41jhzoVczUrz0E=
Subject key identifier: 49:A9:25:FA:23:B3:B1:08:F4:D2:0E:EA:50:7D:FB:0B:87:FD:BC:CE
Authority key identifier: CD:91:9E:B5:C2:10:83:60:15:5D:E7:FB:4F:21:6A:05:5A:E3:1F:09
Certificate issuer: /CN=cd919eb5c2108360155de7fb4f216a055ae31f09
Certificate serial: 0199FCFD48966A224C55224F6D0599D5EEC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZGetcIQg2AVXef7TyFqBVrjHwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/zZGetcIQg2AVXef7TyFqBVrjHwk.mft
Manifest number: 16EA
Signing time: Sun 19 Oct 2025 15:01:21 +0000
Manifest this update: Sun 19 Oct 2025 15:01:21 +0000
Manifest next update: Mon 20 Oct 2025 15:01:21 +0000
Files and hashes: 1: QrfYxaTHhTSXop-ghzKRc2pRZhA.roa (hash: PMTolMEGmvsQvzQ9GGSfcadwLJNVLNi1hDvyzf87EUg=)
2: ahq3UrSwaIQvDkIrorl5O5ztGvQ.roa (hash: rt6AciC29jxzpxpxz0n9wcvl0rWHWyCvo8/vyh12WeY=)
3: zZGetcIQg2AVXef7TyFqBVrjHwk.crl (hash: gGR/pFSN70Bpzy7lggozh+H1mM7zkUWbTZ4+BRp7sjw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/zZGetcIQg2AVXef7TyFqBVrjHwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/zZGetcIQg2AVXef7TyFqBVrjHwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/zZGetcIQg2AVXef7TyFqBVrjHwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:48:96:6a:22:4c:55:22:4f:6d:05:99:d5:ee:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd919eb5c2108360155de7fb4f216a055ae31f09
Validity
Not Before: Oct 19 15:01:21 2025 GMT
Not After : Oct 20 15:01:21 2025 GMT
Subject: CN=49a925fa23b3b108f4d20eea507dfb0b87fdbcce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ef:7f:a7:17:2d:42:7f:d9:9c:0d:9c:9c:99:
8e:a4:8e:f0:c4:16:36:4a:16:da:8b:cd:16:6a:6e:
1e:8e:29:31:7d:99:2d:b6:9d:6f:7e:e1:3a:88:27:
3a:70:54:98:19:b8:cd:9f:f4:db:62:34:04:a2:32:
91:41:c8:60:c9:c2:9e:6d:c4:d2:69:a3:10:fc:f2:
e6:e6:6e:46:04:61:81:f0:5d:49:59:96:23:7e:ae:
bb:e1:69:b4:de:fd:b1:16:a8:c0:d4:d9:ac:db:d1:
09:ba:06:33:20:00:06:bd:76:db:28:eb:74:5d:bd:
2d:42:2b:2d:57:e0:79:92:2c:60:6d:12:7d:ed:c7:
f9:24:6f:13:dd:50:be:1f:dc:77:fd:2e:a0:fe:42:
ef:56:50:49:8b:90:7d:f1:d4:78:8e:e3:53:3a:ff:
45:fb:6a:c5:88:8b:49:f1:40:c4:05:82:98:4c:22:
c7:00:12:f9:5d:64:3c:84:96:77:22:0c:61:4d:59:
f7:e8:43:83:f5:60:10:34:f3:2a:72:3c:16:29:e6:
28:7e:60:c0:09:da:4d:1e:0f:af:0b:2d:ca:f3:bf:
f2:ee:ca:ef:44:5c:82:3c:8c:4b:c8:66:c3:df:f7:
07:dd:27:52:99:11:a7:62:e9:57:02:41:b7:9a:eb:
c1:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:A9:25:FA:23:B3:B1:08:F4:D2:0E:EA:50:7D:FB:0B:87:FD:BC:CE
X509v3 Authority Key Identifier:
keyid:CD:91:9E:B5:C2:10:83:60:15:5D:E7:FB:4F:21:6A:05:5A:E3:1F:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZGetcIQg2AVXef7TyFqBVrjHwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/zZGetcIQg2AVXef7TyFqBVrjHwk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/zZGetcIQg2AVXef7TyFqBVrjHwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:40:e9:0b:42:89:2f:3a:e6:4c:0c:63:e8:b2:71:fc:f6:30:
09:cb:bb:1b:6c:0e:22:ad:bf:75:5c:93:88:0a:c7:ad:59:0b:
ba:da:10:ec:01:89:1a:75:e3:95:e2:6c:61:95:63:4f:de:ba:
f8:e3:8e:a2:13:1a:da:66:d2:78:9f:71:5c:df:60:76:10:da:
08:63:6b:3d:6f:14:3b:de:ce:24:a5:aa:a2:45:ed:b5:35:18:
a8:8c:15:0a:df:40:d5:4a:c1:74:7f:80:67:9f:85:37:ad:1e:
0c:99:83:76:42:5a:cb:6a:18:bd:33:c3:d0:0c:7d:a2:2f:1a:
16:c2:56:7a:2a:23:1c:61:11:f0:cd:9e:57:15:e1:5e:26:cd:
f0:3e:f6:03:24:57:3a:f2:1e:8a:19:79:95:df:05:ca:0e:3a:
72:12:6a:db:24:18:a7:f8:86:5c:ee:e5:3b:a2:80:59:2d:66:
99:13:ab:dd:b6:09:cb:5e:b6:58:cf:91:87:2d:73:b5:bd:aa:
c5:1d:c1:e3:89:c0:fd:15:c3:0a:7f:e3:b5:27:f0:6d:5e:2e:
9a:f6:48:f5:41:44:72:08:fc:7d:91:7c:30:4d:3d:b1:c3:39:
1c:80:3f:b4:fe:1f:b7:30:56:fb:85:f7:05:50:18:99:81:24:
57:8b:89:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:29:58 2025 by rpki-client