Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.mft
File: ZuksNB52lEP94dJ1ZgRLS2UVkGA.mft (raw, json)
Hash identifier: aICJB5T3TOE2WMrF8cwNAmmBdjWwOrVZUMi84ok7Tgg=
Subject key identifier: EF:4B:0E:53:75:4C:79:BD:A6:F1:8C:FC:2D:85:07:6B:A3:EC:4D:0C
Authority key identifier: 66:E9:2C:34:1E:76:94:43:FD:E1:D2:75:66:04:4B:4B:65:15:90:60
Certificate issuer: /CN=66e92c341e769443fde1d27566044b4b65159060
Certificate serial: 0199FB0EFC2DF39A6CA035E6F3D7FCC47392
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZuksNB52lEP94dJ1ZgRLS2UVkGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.mft
Manifest number: 16E8
Signing time: Sun 19 Oct 2025 06:01:27 +0000
Manifest this update: Sun 19 Oct 2025 06:01:27 +0000
Manifest next update: Mon 20 Oct 2025 06:01:27 +0000
Files and hashes: 1: 02kstygB_1Q-T4WpJF1fDwmJj7Y.roa (hash: 1yQLO6zXVi4jG2bubLFyNc7MiwNkUFoEG9KeznEMEp4=)
2: 4-SKabrWOl-7KlndWPRuCU9aEhs.roa (hash: lMaT7o02aVJAelpgq3JP3XJEHgIKnGWGn47SBUcvn5g=)
3: 7Sa61R-MOh-0ZN995AyZU8ZyFSg.roa (hash: vYukMa63xBh0wU8yyQa7I0WK1kHPXukHl42Dhw+i7vg=)
4: BFpvKhELM78QLCFM7cjT2Dri-Ks.roa (hash: c09KIIz60Nm+dgzrURYFnp6FyV+tcK5Ue3poQFctk+0=)
5: EOa7r-jJgtdz4RGUmunD8B8QB9E.roa (hash: 4iOebAizMatknAk9CDhaCyLQWxnN0bfea5KmgMRwulk=)
6: K7WRjV9MYHng8NfZhIiH2_A3Swg.roa (hash: 7+t8vrSKIkcQUgESVH88zqe5BbNV7ixlCqPd3RDBnyQ=)
7: ZuksNB52lEP94dJ1ZgRLS2UVkGA.crl (hash: D933ru1gm/WzljCqaWd9V9li58PzSXkbo0JgKn+gvVo=)
8: iJ0N88iATNc7UiUGXoHztFV1r-M.roa (hash: l8fJQFt0ipvnCwRF0O4nNX66/X32E1fs26DRKw04Vb0=)
9: ukKrQsbJYmMnCmIVGPhPmqzzI-Y.roa (hash: YP54ZYRp6pI7NTnVUT51wnLKoj40S7g2X/Zv7SQymBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZuksNB52lEP94dJ1ZgRLS2UVkGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0e:fc:2d:f3:9a:6c:a0:35:e6:f3:d7:fc:c4:73:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66e92c341e769443fde1d27566044b4b65159060
Validity
Not Before: Oct 19 06:01:27 2025 GMT
Not After : Oct 20 06:01:27 2025 GMT
Subject: CN=ef4b0e53754c79bda6f18cfc2d85076ba3ec4d0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b8:07:90:f0:ee:62:fc:db:35:47:e0:39:bd:
18:0c:c6:88:d4:bd:2c:68:d0:67:6f:59:d9:be:b3:
26:ca:e9:76:0c:6f:f1:86:fc:37:39:1c:d1:15:40:
6c:c8:16:21:44:a0:3e:4e:85:dc:70:ee:4d:67:4d:
bc:d4:80:2c:e2:bf:7d:4b:97:66:bf:e5:aa:ae:1c:
6a:b0:34:32:18:21:04:6b:fa:7e:3e:dd:9a:c7:52:
7e:00:04:55:58:a7:6e:ce:f3:89:66:88:9c:12:f7:
cb:3c:c7:0e:ee:5a:57:15:5d:32:ef:89:f8:7d:fe:
f5:16:44:86:60:ab:6a:99:1a:17:51:ae:60:b8:5d:
ec:16:94:f7:f5:46:1d:6d:0d:9a:aa:0c:7a:34:f1:
09:b0:d2:ad:12:d2:6b:24:46:51:e8:6f:ce:c7:a1:
51:91:c3:72:f9:1e:bc:ca:95:2e:de:61:dd:52:56:
e0:67:fb:04:f3:ce:bb:5e:54:9a:a4:02:23:e3:cf:
55:0f:e2:f6:8d:08:65:d7:5d:c5:5a:3e:b7:07:6e:
7e:38:c4:54:9e:36:71:25:73:ce:a2:7c:c5:40:30:
e7:72:5a:cf:ca:af:e0:dd:ea:a4:a4:b5:f6:ba:39:
71:97:9f:ef:71:5e:56:d8:71:a1:17:6e:38:25:30:
61:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:4B:0E:53:75:4C:79:BD:A6:F1:8C:FC:2D:85:07:6B:A3:EC:4D:0C
X509v3 Authority Key Identifier:
keyid:66:E9:2C:34:1E:76:94:43:FD:E1:D2:75:66:04:4B:4B:65:15:90:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZuksNB52lEP94dJ1ZgRLS2UVkGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:7d:ed:91:ce:74:c9:9f:5c:a4:ff:35:d2:c9:87:78:a2:37:
e9:1d:db:3a:cc:a7:99:37:53:d4:57:12:7f:60:c4:1b:b8:c5:
e2:6d:25:6e:89:24:09:d7:97:01:73:a9:2b:21:2b:fd:d3:48:
ea:62:b0:9d:21:91:85:88:e5:b5:ac:8e:c8:7b:bf:0f:8e:47:
b6:49:15:83:e9:98:21:50:0d:20:f3:57:6e:61:37:99:b4:24:
fc:26:9f:50:ac:7b:46:4c:ac:e1:86:4a:62:59:2b:d4:c1:aa:
8e:55:c6:bc:d7:48:aa:d3:d7:8a:a7:d8:f5:14:f0:ec:37:82:
7f:80:32:6f:55:33:ac:69:67:24:4b:84:70:84:52:46:c6:89:
27:39:7c:3f:b3:c7:4a:9b:06:4f:9f:97:b1:57:26:58:c4:c8:
0e:1e:73:77:59:43:ab:7c:a3:37:40:d1:95:2c:02:01:ac:c0:
2d:76:e3:5c:fd:ed:c7:0c:18:ca:1b:e7:09:ae:bc:32:5c:6e:
7e:59:b3:0d:fc:8e:24:3d:65:0c:2b:42:b3:63:1f:35:ae:7c:
a6:0b:d8:c2:a1:ca:5c:09:ef:7c:95:60:b1:9c:e7:81:21:ee:
98:87:49:fb:a4:95:65:60:bf:0b:24:a3:a5:3a:e3:b4:62:f6:
07:79:9a:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:00 2025 by rpki-client