Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/5c6f3f-0bab-4fd0-bf94-7656da6ede09/1/zZeczxCv9fdzaU2fQ-XV20ctZIU.mft
File: zZeczxCv9fdzaU2fQ-XV20ctZIU.mft (raw, json)
Hash identifier: IhTSM/vyRv3twKkjTMWah4aEqNxxukAVKcxHcWDqc94=
Subject key identifier: 8A:48:FB:28:8A:B0:28:01:01:20:66:FD:2E:22:A9:B3:5B:33:11:7D
Authority key identifier: CD:97:9C:CF:10:AF:F5:F7:73:69:4D:9F:43:E5:D5:DB:47:2D:64:85
Certificate issuer: /CN=cd979ccf10aff5f773694d9f43e5d5db472d6485
Certificate serial: 0199FCC6B3996CA55806FBB92A3302452B5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZeczxCv9fdzaU2fQ-XV20ctZIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/5c6f3f-0bab-4fd0-bf94-7656da6ede09/1/zZeczxCv9fdzaU2fQ-XV20ctZIU.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 14:01:44 +0000
Manifest this update: Sun 19 Oct 2025 14:01:44 +0000
Manifest next update: Mon 20 Oct 2025 14:01:44 +0000
Files and hashes: 1: ugeI_SPpOI_az_dGl_P54hP9qpg.roa (hash: HZZ/y/qcvJFbb7qD1Pg6FgrRdOBnE2ywGhjLdlNi6S8=)
2: zZeczxCv9fdzaU2fQ-XV20ctZIU.crl (hash: DzU+/355SjjAliBEKOaiXxPJLR1lPCfeIVZCs0W0/Xg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/5c6f3f-0bab-4fd0-bf94-7656da6ede09/1/zZeczxCv9fdzaU2fQ-XV20ctZIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/5c6f3f-0bab-4fd0-bf94-7656da6ede09/1/zZeczxCv9fdzaU2fQ-XV20ctZIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/zZeczxCv9fdzaU2fQ-XV20ctZIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 14:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:b3:99:6c:a5:58:06:fb:b9:2a:33:02:45:2b:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd979ccf10aff5f773694d9f43e5d5db472d6485
Validity
Not Before: Oct 19 14:01:44 2025 GMT
Not After : Oct 20 14:01:44 2025 GMT
Subject: CN=8a48fb288ab02801012066fd2e22a9b35b33117d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:49:fe:e5:4e:20:3a:56:64:ca:8e:88:d1:f3:
d0:37:12:d3:0a:fc:c5:d6:0e:83:b2:95:b2:fb:03:
7a:38:d8:e9:92:7d:f3:1d:25:6b:dc:d7:d3:9e:51:
ed:42:a3:1f:de:5b:f0:f3:1b:e0:2a:90:84:9a:20:
0c:5e:8f:3a:64:b4:f3:4b:b5:a3:5f:7c:14:3e:0e:
cc:ab:80:ea:2a:d6:13:05:54:70:f1:a3:e6:2f:3d:
3e:ce:fe:6b:47:27:02:62:f1:97:fb:ca:75:a1:97:
37:1b:eb:21:99:7e:a1:56:92:79:34:eb:4f:79:fa:
e5:ba:4c:c3:e5:8a:2a:0d:2f:7f:fe:a6:bb:e1:89:
10:e6:ba:2f:02:24:c1:fd:5f:be:57:27:eb:27:23:
50:14:9a:ac:31:98:0d:63:1d:09:d9:c0:0c:34:ee:
e9:46:6f:01:20:31:8b:68:1f:cd:b2:65:b1:28:14:
15:8a:06:4c:b2:b5:43:b8:75:95:2d:e8:0b:76:a3:
de:07:b0:f2:45:b0:81:d0:e7:a6:05:88:33:9c:97:
0d:15:75:8a:72:4e:fa:6c:80:05:e2:95:ea:91:c2:
29:6d:81:d6:b4:2d:86:af:eb:0d:ec:71:7c:06:1c:
b6:eb:6f:44:ea:28:7b:11:96:9d:0d:91:6d:91:7a:
20:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:48:FB:28:8A:B0:28:01:01:20:66:FD:2E:22:A9:B3:5B:33:11:7D
X509v3 Authority Key Identifier:
keyid:CD:97:9C:CF:10:AF:F5:F7:73:69:4D:9F:43:E5:D5:DB:47:2D:64:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZeczxCv9fdzaU2fQ-XV20ctZIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/5c6f3f-0bab-4fd0-bf94-7656da6ede09/1/zZeczxCv9fdzaU2fQ-XV20ctZIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/5c6f3f-0bab-4fd0-bf94-7656da6ede09/1/zZeczxCv9fdzaU2fQ-XV20ctZIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:48:b4:34:a6:0d:a5:16:3c:59:f1:33:8c:b6:a5:07:2c:bd:
55:8f:87:11:a8:ed:e4:b9:cf:62:f2:0f:b6:d5:36:2e:55:86:
1e:fc:f8:97:08:37:fc:70:9b:59:2b:f1:19:96:c5:6a:29:44:
14:1e:ae:c6:2b:02:d9:70:80:d3:03:ba:86:7b:fc:c5:84:fa:
72:a1:04:3b:71:36:90:fb:77:fe:77:e3:66:6c:ef:dc:99:6d:
d4:78:3a:0a:d1:43:58:61:29:65:53:7c:c6:97:bc:ac:75:ae:
a3:f9:b7:69:4b:0e:51:e7:83:8d:3c:4f:34:f0:46:d0:fc:0e:
96:2d:aa:5d:c2:d7:df:63:41:eb:07:0b:8d:97:9f:1d:44:2d:
b0:6c:2e:19:b4:c4:51:3c:2c:79:fb:75:07:a2:4f:5b:47:8e:
7c:12:cd:b8:cb:a9:0d:e8:69:30:b7:ff:8f:a1:5b:47:af:58:
fe:5f:4d:1f:be:77:01:df:7e:31:11:b1:17:e1:d7:47:de:ea:
91:48:6d:36:bf:7f:0d:9b:32:db:02:7b:ad:6f:3f:80:eb:7f:
d7:f2:90:8f:5d:0d:2e:37:56:9d:2d:60:1c:99:7b:29:f6:dd:
be:a9:f1:15:ca:85:af:44:c3:63:96:9f:70:ff:fa:22:3d:87:
d7:f5:80:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:58:41 2025 by rpki-client