Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/a52b04-efb0-415b-9b1a-409ea1208926/1/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.mft
File: Zc-Zli-Yn3tzPaeqcOr55BBSrhk.mft (raw, json)
Hash identifier: Sr13FdKgKW9idh1AXj1I/7sv3OQ+OoFOzDqlDIUtSrk=
Subject key identifier: 56:6B:27:80:2D:E2:B0:83:A5:1D:34:64:E9:0F:56:AD:7C:2B:F1:45
Authority key identifier: 65:CF:99:96:2F:98:9F:7B:73:3D:A7:AA:70:EA:F9:E4:10:52:AE:19
Certificate issuer: /CN=65cf99962f989f7b733da7aa70eaf9e41052ae19
Certificate serial: 0199FBEAAA967FFCD2F0C3AAC551520E2428
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/a52b04-efb0-415b-9b1a-409ea1208926/1/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 10:01:24 +0000
Manifest this update: Sun 19 Oct 2025 10:01:24 +0000
Manifest next update: Mon 20 Oct 2025 10:01:24 +0000
Files and hashes: 1: Zc-Zli-Yn3tzPaeqcOr55BBSrhk.crl (hash: TUVbRKSAPtkkWNgKxiAXurg3GXjTvy84HEO6TnGv790=)
2: auDMGKuBUFekwr1pbKCTw36W0Cg.roa (hash: Ih8H6tUaVW1XZmrRDrxRFmcbfxbignoEn1fpBpsApWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/a52b04-efb0-415b-9b1a-409ea1208926/1/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/a52b04-efb0-415b-9b1a-409ea1208926/1/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:aa:96:7f:fc:d2:f0:c3:aa:c5:51:52:0e:24:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65cf99962f989f7b733da7aa70eaf9e41052ae19
Validity
Not Before: Oct 19 10:01:24 2025 GMT
Not After : Oct 20 10:01:24 2025 GMT
Subject: CN=566b27802de2b083a51d3464e90f56ad7c2bf145
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4d:75:19:ee:f7:ea:37:76:4c:ae:e4:4d:64:
5b:d1:de:61:b6:45:06:eb:72:e4:98:38:a5:25:fd:
8b:af:7c:f3:22:0e:23:16:68:b2:c5:7d:5b:05:fc:
0e:78:dd:90:6c:50:b8:81:96:ce:8b:1c:ba:6c:66:
13:30:4a:0d:a0:99:fd:fb:77:4d:60:99:4e:03:5a:
47:b1:ab:4b:49:96:09:08:15:48:8e:f0:b3:b7:0a:
20:b7:25:8c:9a:50:ea:35:03:ce:68:ea:49:d1:4d:
72:8a:9b:ab:a8:02:26:37:00:ad:98:fd:71:3c:3d:
d6:48:db:a8:b3:c4:21:23:f9:fb:9c:6b:9c:24:a1:
88:71:94:ce:b2:e6:43:82:ab:30:a6:7e:b3:3c:cd:
10:98:f5:4b:46:f2:de:6b:fc:af:90:03:f3:4b:d3:
aa:da:f6:9a:b1:d7:38:4f:0b:c0:fd:03:2d:d8:87:
98:af:f7:63:92:db:9d:72:e0:66:c3:ca:94:8d:59:
bc:dd:1d:68:6e:45:37:cc:e7:f0:4c:4f:2d:12:43:
a2:94:3c:fe:62:42:96:db:7a:e7:b6:cc:1c:ba:84:
29:79:eb:fa:72:bb:9c:54:e2:43:d5:58:f1:64:9e:
c1:58:94:e8:59:49:29:08:a3:a1:a7:e7:a7:58:35:
b6:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:6B:27:80:2D:E2:B0:83:A5:1D:34:64:E9:0F:56:AD:7C:2B:F1:45
X509v3 Authority Key Identifier:
keyid:65:CF:99:96:2F:98:9F:7B:73:3D:A7:AA:70:EA:F9:E4:10:52:AE:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a52b04-efb0-415b-9b1a-409ea1208926/1/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a52b04-efb0-415b-9b1a-409ea1208926/1/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:85:6d:43:b0:4b:a3:64:13:16:2b:70:66:68:ed:ac:c7:20:
cb:db:1d:52:fb:03:3f:a7:2d:04:92:27:69:35:5b:33:a8:c9:
33:04:f6:ff:88:aa:d8:d0:55:bf:dd:d8:77:dd:5b:25:3f:df:
06:18:f7:62:79:22:20:01:bd:3e:3d:f4:66:2f:02:c3:e8:69:
60:ef:4f:11:89:df:5f:95:a8:3f:fe:90:bc:7c:79:2d:be:33:
06:34:8c:74:a5:8b:b6:21:08:ea:fa:e1:57:38:b4:0c:83:02:
b4:a7:34:4f:5c:75:ae:a6:8d:bc:fe:67:e4:50:93:05:6c:fa:
0e:27:70:84:45:e5:fb:fe:05:c4:f7:cd:62:6d:19:53:dc:67:
78:ff:bc:db:33:9f:f0:e0:7f:7b:a8:e6:28:a3:ae:d3:07:39:
a6:5c:17:61:16:d2:33:71:7c:f4:ff:4c:a8:83:0f:ef:0b:e8:
34:87:d7:03:c8:e4:00:9f:0c:40:7c:43:90:4d:4b:d5:19:e6:
34:d8:d0:9e:fe:44:ff:b7:ff:1a:1d:90:e1:5a:3e:aa:66:87:
ce:4f:aa:88:93:2b:f9:c7:ac:82:96:cc:73:f7:50:bd:83:ea:
c3:83:f4:21:31:84:c8:a9:9c:8e:b8:cf:eb:f2:bd:a1:b7:00:
71:54:9c:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:37:46 2025 by rpki-client