Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/736db2-0c64-45ed-833a-a94dd8ccaf9f/1/ZNq6FdHTZstTCVQS0GSQ4jSY4XA.mft
File: ZNq6FdHTZstTCVQS0GSQ4jSY4XA.mft (raw, json)
Hash identifier: Z6suXC0NqK3ePF5ciuOEuqHg2LNIzNazL2Pxm23di08=
Subject key identifier: AE:9A:E5:46:5D:8A:4F:05:B9:E5:61:80:18:AA:A1:E1:F4:5A:1E:2A
Authority key identifier: 64:DA:BA:15:D1:D3:66:CB:53:09:54:12:D0:64:90:E2:34:98:E1:70
Certificate issuer: /CN=64daba15d1d366cb53095412d06490e23498e170
Certificate serial: 0199FBEBD0BDE746EE5495DCB25E76593A31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZNq6FdHTZstTCVQS0GSQ4jSY4XA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/736db2-0c64-45ed-833a-a94dd8ccaf9f/1/ZNq6FdHTZstTCVQS0GSQ4jSY4XA.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 10:02:39 +0000
Manifest this update: Sun 19 Oct 2025 10:02:39 +0000
Manifest next update: Mon 20 Oct 2025 10:02:39 +0000
Files and hashes: 1: 7vdGx51ck_YIgYpkt1SPNVfsVKE.roa (hash: Nw+uAqY1I65YKmQSbXqROB23bDhd2atga2x/5hREPHM=)
2: ZNq6FdHTZstTCVQS0GSQ4jSY4XA.crl (hash: Zim8SVD7iAs9fsj92KtJ6MqeMZAoctcMKzMrH36s1mE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/736db2-0c64-45ed-833a-a94dd8ccaf9f/1/ZNq6FdHTZstTCVQS0GSQ4jSY4XA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/736db2-0c64-45ed-833a-a94dd8ccaf9f/1/ZNq6FdHTZstTCVQS0GSQ4jSY4XA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZNq6FdHTZstTCVQS0GSQ4jSY4XA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:d0:bd:e7:46:ee:54:95:dc:b2:5e:76:59:3a:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64daba15d1d366cb53095412d06490e23498e170
Validity
Not Before: Oct 19 10:02:39 2025 GMT
Not After : Oct 20 10:02:39 2025 GMT
Subject: CN=ae9ae5465d8a4f05b9e5618018aaa1e1f45a1e2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:35:b1:a2:13:ca:02:e0:2d:5e:29:9b:21:82:
91:00:28:d6:74:dc:ca:3a:b7:b7:27:5f:5b:b5:5b:
1e:d0:bf:07:bc:f0:7c:ca:ee:91:47:92:7d:be:84:
b8:ae:53:1a:41:ab:1c:91:4b:28:54:5e:31:cb:25:
1d:f8:3a:a5:46:d7:ff:43:a1:4b:c9:de:2a:53:83:
82:0d:59:57:20:b6:b1:f6:35:cf:46:b8:ad:de:d0:
eb:ae:e8:6b:33:3b:1b:54:37:1d:e1:3f:2c:06:3c:
ba:49:e8:34:43:66:f7:e9:2e:75:ef:6f:1d:46:88:
ab:80:20:ed:81:83:e0:3f:40:92:01:e5:a6:22:fe:
ae:86:19:38:88:d8:da:7f:90:36:17:bc:19:8c:fb:
c3:05:ea:74:b1:ff:6a:9e:6a:75:38:4d:a5:e2:2b:
bf:28:c4:b0:fb:59:da:52:2b:6b:da:11:5d:75:c2:
e7:2e:06:5c:85:98:48:41:6c:e1:43:05:6f:33:31:
a0:b4:2b:79:6f:f3:3f:a1:4b:dc:22:b4:be:0f:52:
28:ee:f6:fe:35:c3:b3:30:c2:af:1a:e6:12:e9:5d:
7c:29:61:29:ca:17:27:c1:16:ff:ec:bf:d1:31:58:
e0:51:cd:b6:a3:20:fc:2e:54:38:45:95:77:5c:6f:
28:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:9A:E5:46:5D:8A:4F:05:B9:E5:61:80:18:AA:A1:E1:F4:5A:1E:2A
X509v3 Authority Key Identifier:
keyid:64:DA:BA:15:D1:D3:66:CB:53:09:54:12:D0:64:90:E2:34:98:E1:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNq6FdHTZstTCVQS0GSQ4jSY4XA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/736db2-0c64-45ed-833a-a94dd8ccaf9f/1/ZNq6FdHTZstTCVQS0GSQ4jSY4XA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/736db2-0c64-45ed-833a-a94dd8ccaf9f/1/ZNq6FdHTZstTCVQS0GSQ4jSY4XA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:7f:ec:41:69:44:59:12:f6:82:67:4c:14:ac:2c:d5:e6:62:
3e:2c:86:61:21:36:e1:66:61:26:9c:ab:8e:2b:6c:a0:04:43:
fd:f5:3c:62:4c:06:64:59:5c:86:4c:f2:c2:09:fa:52:13:f1:
d1:1b:3d:24:dd:c3:1e:a9:25:65:c3:5e:6a:9b:23:36:47:a6:
cc:d6:c0:43:87:53:7b:a4:66:14:97:85:08:86:7a:b4:3e:67:
8e:fd:71:95:32:3a:86:2d:39:23:59:9e:7c:9e:7b:f3:dd:df:
e7:12:4f:a5:3d:6e:8d:51:e8:f3:fd:db:e0:26:77:d6:4d:37:
bf:62:09:7b:63:e5:93:d6:b8:51:79:a5:be:4a:cc:1b:f8:f0:
a8:bc:7a:10:7a:f4:fe:25:f8:38:1c:13:26:1c:78:ea:0d:6d:
a8:94:9a:a6:95:2e:db:f2:fe:ff:c2:c9:19:2d:6c:b1:61:93:
dc:51:6d:59:95:9a:5d:12:f2:7b:94:4e:91:6f:5b:ca:7a:c7:
0f:f1:2f:79:78:1e:6b:76:ff:fb:7a:e4:e7:88:f3:18:d0:cd:
2f:40:c0:d1:74:c0:fd:07:66:fb:6b:f0:c4:e4:4a:85:0d:06:
5d:4b:4a:19:28:3b:fd:50:e2:9b:38:c3:8c:0c:91:61:53:b5:
3c:e4:08:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 19:54:13 2025 by rpki-client