
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/594fa8-d315-4a38-a631-dec02488c37c/1/ZSJu5eoEBlkt-XXG9MhPEPFNFcs.mft
File: ZSJu5eoEBlkt-XXG9MhPEPFNFcs.mft (raw, json)
Hash identifier: 3ZgwFZ0lFoQ/0khsorvYzEz0E+SeG/8Kj9UYVCxeIEY=
Subject key identifier: D1:1E:57:C6:AF:5A:7A:45:A1:96:FF:CC:06:52:B6:5B:ED:30:9E:B5
Authority key identifier: 65:22:6E:E5:EA:04:06:59:2D:F9:75:C6:F4:C8:4F:10:F1:4D:15:CB
Certificate issuer: /CN=65226ee5ea0406592df975c6f4c84f10f14d15cb
Certificate serial: 0199FBEB6CD431983E2A7464A1DFCE1FF4C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZSJu5eoEBlkt-XXG9MhPEPFNFcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/594fa8-d315-4a38-a631-dec02488c37c/1/ZSJu5eoEBlkt-XXG9MhPEPFNFcs.mft
Manifest number: 1622
Signing time: Sun 19 Oct 2025 10:02:14 +0000
Manifest this update: Sun 19 Oct 2025 10:02:14 +0000
Manifest next update: Mon 20 Oct 2025 10:02:14 +0000
Files and hashes: 1: ZSJu5eoEBlkt-XXG9MhPEPFNFcs.crl (hash: 65gKEovzRrMXDziP2X6zje77u8BJHVUSKtTa+rfcpRc=)
2: _4Ndkg3UKi9vHxY0SVHFR9i7YHI.roa (hash: gVwQ/KDnz7z975mDXEiOOePjhBe/QBZrgXsjy6HuzNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/594fa8-d315-4a38-a631-dec02488c37c/1/ZSJu5eoEBlkt-XXG9MhPEPFNFcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/594fa8-d315-4a38-a631-dec02488c37c/1/ZSJu5eoEBlkt-XXG9MhPEPFNFcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZSJu5eoEBlkt-XXG9MhPEPFNFcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:6c:d4:31:98:3e:2a:74:64:a1:df:ce:1f:f4:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65226ee5ea0406592df975c6f4c84f10f14d15cb
Validity
Not Before: Oct 19 10:02:14 2025 GMT
Not After : Oct 20 10:02:14 2025 GMT
Subject: CN=d11e57c6af5a7a45a196ffcc0652b65bed309eb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:35:ab:49:95:9e:d7:e2:32:6f:bc:42:2d:60:
44:58:0c:18:1e:43:c6:e2:e5:3d:31:34:13:15:4f:
15:ef:66:57:95:f5:bb:63:ae:23:3f:f3:7a:88:38:
f5:13:7d:92:26:ed:5e:d9:bd:0d:76:4c:45:f8:10:
10:60:5a:9c:98:d7:8a:33:a3:2f:d9:96:e0:e9:8a:
6f:fe:41:ce:9c:37:81:c9:c4:39:35:a6:f7:b3:2f:
4e:33:78:ee:00:ad:a8:70:07:87:fb:48:3b:5e:b8:
8f:25:0a:18:fa:52:90:bc:09:24:0b:67:ee:aa:2b:
ec:85:87:66:90:d9:27:93:4a:3f:83:84:97:07:f9:
42:66:ce:0c:df:56:c5:79:47:d3:46:cc:ed:b9:e7:
ec:f9:26:27:94:d3:5a:3a:f2:e9:5e:f2:57:ea:94:
9b:e3:92:72:f8:f5:1d:3f:29:d2:dd:fb:23:6d:4c:
7a:e1:a8:51:37:8d:69:7f:c0:df:51:1a:e8:07:10:
54:7b:59:06:f5:9f:d9:93:eb:54:b6:37:46:d7:f3:
36:53:5e:73:a4:fa:78:bd:1c:c4:a1:43:ee:3f:11:
9e:b7:81:2d:1b:af:f1:2c:fa:0a:88:b2:87:fd:e8:
90:08:a1:e4:39:50:03:a4:e4:c6:8d:ee:d2:71:8b:
f7:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:1E:57:C6:AF:5A:7A:45:A1:96:FF:CC:06:52:B6:5B:ED:30:9E:B5
X509v3 Authority Key Identifier:
keyid:65:22:6E:E5:EA:04:06:59:2D:F9:75:C6:F4:C8:4F:10:F1:4D:15:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZSJu5eoEBlkt-XXG9MhPEPFNFcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/594fa8-d315-4a38-a631-dec02488c37c/1/ZSJu5eoEBlkt-XXG9MhPEPFNFcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/594fa8-d315-4a38-a631-dec02488c37c/1/ZSJu5eoEBlkt-XXG9MhPEPFNFcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:6e:dc:6c:af:a8:ed:4f:fc:47:5d:54:0e:68:4e:32:a8:4c:
d1:ff:d0:61:b9:df:87:d8:7d:56:bd:f7:63:c6:41:f4:58:d8:
77:c4:15:d9:81:25:97:8d:0d:39:5e:74:a3:1b:f1:8f:56:13:
43:26:07:fa:0a:81:e4:66:d2:52:85:73:66:cc:8b:0f:9b:9b:
cb:e7:f9:3e:5d:3d:99:a2:e9:df:07:b2:c3:64:ef:c6:38:fe:
04:f4:bb:f5:5d:b1:32:b6:69:0d:1e:05:9d:06:9c:00:2a:9b:
00:6d:b9:30:86:4d:4d:a5:e6:1f:68:59:d4:da:61:b0:d0:2d:
e8:42:1c:1b:8e:4b:60:3f:33:88:d6:38:22:05:d0:ec:00:00:
6c:40:cc:5a:02:d0:bc:a5:dc:e4:90:d1:a0:2b:26:61:f4:9b:
8e:b2:61:cf:f3:01:59:07:e8:e2:11:ea:d7:a1:1f:97:c9:9e:
ff:ca:29:57:b0:88:5f:8c:05:f9:fe:c4:17:e1:85:fd:43:12:
52:c9:e2:69:c4:3a:2f:40:a9:7d:c7:6a:02:83:bf:c7:ae:d5:
b4:10:e1:08:5f:b7:9d:f3:6c:ac:d5:69:5d:33:8f:f4:bd:5e:
05:61:d7:3e:a0:87:b1:4f:45:dc:21:ae:2b:8d:42:26:0c:f2:
9a:db:b1:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:18:49 2025 by rpki-client