Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/391092-82f3-48bc-b426-fcc6d27f444f/1/ziNcUEAZxQQCHgZi9wEzt-5zMXM.mft
File: ziNcUEAZxQQCHgZi9wEzt-5zMXM.mft (raw, json)
Hash identifier: rlINWR3TKncF79uX5PXQlmzceRXwdig4jzItc/5p8RY=
Subject key identifier: A0:A1:EA:7F:BA:82:F5:29:16:8C:EF:D0:7A:AC:E0:3D:53:88:6B:DB
Authority key identifier: CE:23:5C:50:40:19:C5:04:02:1E:06:62:F7:01:33:B7:EE:73:31:73
Certificate issuer: /CN=ce235c504019c504021e0662f70133b7ee733173
Certificate serial: 0199FBEB2133A968C850EF2289EB9B89E4D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ziNcUEAZxQQCHgZi9wEzt-5zMXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/391092-82f3-48bc-b426-fcc6d27f444f/1/ziNcUEAZxQQCHgZi9wEzt-5zMXM.mft
Manifest number: 13A2
Signing time: Sun 19 Oct 2025 10:01:54 +0000
Manifest this update: Sun 19 Oct 2025 10:01:54 +0000
Manifest next update: Mon 20 Oct 2025 10:01:54 +0000
Files and hashes: 1: dVxPi-2BU6sN_zi1oxxkbrPcccA.roa (hash: LN+UvXmjMQ+4zMKoOoVm0IS9B+l8wMWW/8CPwN/xbVI=)
2: ziNcUEAZxQQCHgZi9wEzt-5zMXM.crl (hash: Gueb8K3wpEHTKPrTEFIXR+oUlokaCa47++k1Qovmv7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/391092-82f3-48bc-b426-fcc6d27f444f/1/ziNcUEAZxQQCHgZi9wEzt-5zMXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/391092-82f3-48bc-b426-fcc6d27f444f/1/ziNcUEAZxQQCHgZi9wEzt-5zMXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ziNcUEAZxQQCHgZi9wEzt-5zMXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:21:33:a9:68:c8:50:ef:22:89:eb:9b:89:e4:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce235c504019c504021e0662f70133b7ee733173
Validity
Not Before: Oct 19 10:01:54 2025 GMT
Not After : Oct 20 10:01:54 2025 GMT
Subject: CN=a0a1ea7fba82f529168cefd07aace03d53886bdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:92:64:01:64:98:fb:aa:aa:67:c8:27:7c:bd:
59:11:d0:9c:82:ea:1b:d6:2e:80:d1:e3:27:29:93:
21:55:9b:b0:97:9b:2e:00:e2:7e:b1:4e:c4:56:6f:
d3:5a:68:e4:08:83:06:fb:c8:2e:31:43:f6:27:08:
38:52:8c:af:cc:cc:50:c0:a1:e7:68:b5:97:6e:3d:
89:b8:5a:b5:d6:60:be:04:da:47:b0:eb:f6:db:fd:
59:86:41:38:30:52:b8:17:37:1b:a6:00:5f:30:a5:
58:19:97:2b:d3:b5:b4:f3:90:5a:7c:08:e8:29:63:
5d:54:a8:ae:db:5b:53:99:f8:2c:7b:0f:6b:fb:dc:
23:54:2c:9e:82:d4:0f:30:00:43:20:7b:0e:dd:a4:
87:29:10:36:2d:9b:b3:07:7e:2e:ef:96:03:31:f3:
c0:20:bb:91:09:99:80:0f:ab:a0:ff:08:48:32:40:
57:3a:04:d1:9e:66:81:7f:1c:7d:7a:50:da:39:aa:
8e:58:df:8f:43:e7:7e:5c:f3:b2:3e:73:cb:1c:e5:
47:ad:32:f4:13:27:e5:a4:66:69:e6:4f:f7:e8:21:
46:fd:63:6e:ed:ee:68:52:12:d4:ac:50:75:73:36:
d8:8d:36:d6:19:3d:3f:fb:ee:84:60:f3:3a:f5:b3:
bf:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:A1:EA:7F:BA:82:F5:29:16:8C:EF:D0:7A:AC:E0:3D:53:88:6B:DB
X509v3 Authority Key Identifier:
keyid:CE:23:5C:50:40:19:C5:04:02:1E:06:62:F7:01:33:B7:EE:73:31:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ziNcUEAZxQQCHgZi9wEzt-5zMXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/391092-82f3-48bc-b426-fcc6d27f444f/1/ziNcUEAZxQQCHgZi9wEzt-5zMXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/391092-82f3-48bc-b426-fcc6d27f444f/1/ziNcUEAZxQQCHgZi9wEzt-5zMXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:0b:bb:70:a1:3a:3b:02:21:45:05:65:a4:17:b1:5f:76:28:
d6:34:81:05:30:65:33:b7:6c:34:29:60:e7:a9:61:e7:83:38:
a1:86:e6:16:a0:c0:66:aa:fc:cc:ca:d1:f8:12:29:67:e8:9d:
c1:73:a9:f4:0a:22:92:3a:07:87:9a:51:ac:2f:c2:e9:a5:04:
0e:15:ed:76:d9:cd:7c:a9:1a:da:3b:e4:13:fe:5d:f6:72:db:
84:2c:f3:a8:6a:ba:17:4a:1f:98:82:03:20:0b:b3:95:e8:dd:
71:6c:70:e8:b6:2b:59:02:79:a7:17:34:02:02:d2:39:1d:7b:
d3:f6:34:a1:6f:54:7a:71:44:6c:8a:63:5e:ae:fa:3c:a8:19:
bb:2f:5f:77:5e:d4:bf:14:a2:08:53:08:07:d6:06:d0:dd:42:
8e:9d:8a:d6:0d:7b:32:38:88:1d:a3:0b:7a:32:d8:dc:41:17:
5d:5c:1c:43:9d:08:6c:6f:5d:d9:8d:8b:21:ec:f2:51:31:16:
20:75:a1:e4:0c:07:cd:37:15:6b:e2:26:d8:9d:55:16:86:f4:
c6:d7:b3:e9:ac:28:51:23:ae:de:1a:31:c2:b9:13:4a:86:45:
92:d0:0c:d3:d3:6b:b1:f4:81:b8:18:30:ed:a3:03:f4:84:09:
4e:ac:b4:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:43:14 2025 by rpki-client