Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/6155d5-31ba-4239-a753-f287b7b6d7b2/1/ZUq8jkXeIx-4KbyiK7Lwsx4fevU.mft
File: ZUq8jkXeIx-4KbyiK7Lwsx4fevU.mft (raw, json)
Hash identifier: uVaSxMtl7pGBKx1Ukdbhyg4PJFh2d/Ptpsh7sIShquw=
Subject key identifier: 35:21:E9:C8:6F:4F:46:73:69:78:5B:FA:04:05:C4:E5:B9:9F:AC:C4
Authority key identifier: 65:4A:BC:8E:45:DE:23:1F:B8:29:BC:A2:2B:B2:F0:B3:1E:1F:7A:F5
Certificate issuer: /CN=654abc8e45de231fb829bca22bb2f0b31e1f7af5
Certificate serial: 0199FC21C1711290E130BA00EB815F6AE38A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZUq8jkXeIx-4KbyiK7Lwsx4fevU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/6155d5-31ba-4239-a753-f287b7b6d7b2/1/ZUq8jkXeIx-4KbyiK7Lwsx4fevU.mft
Manifest number: 0368
Signing time: Sun 19 Oct 2025 11:01:34 +0000
Manifest this update: Sun 19 Oct 2025 11:01:34 +0000
Manifest next update: Mon 20 Oct 2025 11:01:34 +0000
Files and hashes: 1: PCsNRmePbsa0e_oFwYPynvY9VHo.roa (hash: RquScR+SoymapgsuHQnGU+jgf18EzJeo/wdLZPwz40M=)
2: ZUq8jkXeIx-4KbyiK7Lwsx4fevU.crl (hash: oEd2q/TDAqSeGDp5SqYH0Wmq1Ov0ZezL7LAyQhhYG/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/6155d5-31ba-4239-a753-f287b7b6d7b2/1/ZUq8jkXeIx-4KbyiK7Lwsx4fevU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/6155d5-31ba-4239-a753-f287b7b6d7b2/1/ZUq8jkXeIx-4KbyiK7Lwsx4fevU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZUq8jkXeIx-4KbyiK7Lwsx4fevU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:c1:71:12:90:e1:30:ba:00:eb:81:5f:6a:e3:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=654abc8e45de231fb829bca22bb2f0b31e1f7af5
Validity
Not Before: Oct 19 11:01:34 2025 GMT
Not After : Oct 20 11:01:34 2025 GMT
Subject: CN=3521e9c86f4f467369785bfa0405c4e5b99facc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c0:8e:25:8c:a9:3f:bf:ff:2e:9e:97:95:9d:
6d:2e:ed:7e:4b:f9:dc:2a:85:3a:db:c9:c1:82:a9:
0e:14:6d:9e:3b:d0:1e:e1:b4:ac:d7:f3:c8:f9:2a:
ea:5e:8d:50:64:b3:45:f5:ce:70:00:92:3a:36:10:
f3:e9:97:90:59:34:ab:a4:54:59:56:2c:60:f2:f2:
ee:3c:fc:6d:87:2b:cf:25:ca:0a:dd:09:3f:71:31:
b8:c8:02:71:4f:10:57:14:b5:32:32:9b:5b:d9:c7:
2e:32:e4:a6:c2:bc:76:ce:59:75:85:6e:5d:5e:0a:
06:25:8f:8b:27:f5:7f:ce:19:80:b4:3b:06:39:8a:
2c:29:9c:c3:2a:e4:3b:2e:cb:b5:e1:a0:da:46:3c:
29:8a:f7:b1:d4:a8:c6:ee:b4:68:ef:22:3f:df:72:
f5:4c:fa:e8:e2:cf:b3:63:25:0e:ec:e5:53:c3:49:
03:05:bb:25:41:ec:19:d3:25:02:b1:fb:70:70:6e:
7d:6f:29:87:ff:7d:2d:d4:cb:38:bf:36:5e:a4:4c:
9e:50:60:fd:26:3c:58:90:fd:da:66:d2:c1:c2:3d:
83:e0:00:60:38:d7:1c:86:df:dd:74:bb:d4:f4:92:
c2:55:51:d7:af:01:0d:3a:f2:5a:01:12:6d:2e:e5:
30:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:21:E9:C8:6F:4F:46:73:69:78:5B:FA:04:05:C4:E5:B9:9F:AC:C4
X509v3 Authority Key Identifier:
keyid:65:4A:BC:8E:45:DE:23:1F:B8:29:BC:A2:2B:B2:F0:B3:1E:1F:7A:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZUq8jkXeIx-4KbyiK7Lwsx4fevU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/6155d5-31ba-4239-a753-f287b7b6d7b2/1/ZUq8jkXeIx-4KbyiK7Lwsx4fevU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/6155d5-31ba-4239-a753-f287b7b6d7b2/1/ZUq8jkXeIx-4KbyiK7Lwsx4fevU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:70:f0:48:f8:c2:78:a6:57:79:43:e3:93:73:b6:68:6e:34:
e7:13:e6:4c:91:c1:b6:63:11:ad:eb:1e:7a:58:83:ef:91:a6:
45:9a:b7:3e:26:39:d6:ef:61:ed:04:a8:a5:6e:69:eb:26:e4:
20:4d:64:21:23:a5:8d:e0:41:ac:6c:57:f9:2f:ca:4e:a7:81:
13:eb:7d:c7:be:f0:0f:75:cf:3d:66:7d:6c:c2:46:46:2d:a0:
6d:8e:73:cd:00:70:28:be:a1:b3:e6:9e:8c:a0:bc:61:ba:ca:
66:b5:2c:0e:f5:21:8c:d1:c1:09:0b:36:62:3e:2c:89:70:66:
86:c0:8a:a5:be:e2:c7:16:9a:f8:30:9d:88:a3:ab:6b:03:d3:
76:50:a7:bb:94:a3:05:23:86:c8:fd:8d:e2:80:3f:70:66:37:
35:9b:c1:9e:a4:b5:c1:0c:0a:1f:f2:1c:52:a0:55:22:ca:27:
88:4d:58:74:80:a5:4d:ae:39:6f:be:64:66:cd:c6:e3:7b:2e:
ca:3f:6a:1c:83:7b:cb:37:e1:e9:40:55:f3:7d:2f:ae:9f:5a:
61:57:2a:ca:11:c1:12:d0:cf:d5:ff:16:60:a5:ee:d6:72:aa:
c8:15:5e:b2:96:5b:f8:04:05:2e:94:fe:70:95:d8:af:33:7e:
19:4a:9a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:23:31 2025 by rpki-client