Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.mft
File: ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.mft (raw, json)
Hash identifier: nyHrr6Fvg42QxyInYzOT3awaW4ujRNoBdFUhSzBY//M=
Subject key identifier: A4:1F:AC:B6:84:E6:D6:91:F7:DF:59:F9:1E:57:A3:FE:BE:79:47:5A
Authority key identifier: 64:2C:7A:4E:9F:02:B2:F4:E6:64:D7:D0:D7:2A:52:E5:12:61:DE:54
Certificate issuer: /CN=642c7a4e9f02b2f4e664d7d0d72a52e51261de54
Certificate serial: 0199FD6B5628FB5AF0DACF23364BFB6053E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.mft
Manifest number: 0A26
Signing time: Sun 19 Oct 2025 17:01:33 +0000
Manifest this update: Sun 19 Oct 2025 17:01:33 +0000
Manifest next update: Mon 20 Oct 2025 17:01:33 +0000
Files and hashes: 1: ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.crl (hash: h3U5Tb6QyzsUaMAxU4P5+PdLE8cw88p0PFtvt3efOuc=)
2: up0oav0rMtPMOzsYSRDujbJ3KTk.roa (hash: Rkvar+Ei1oJWKXR7rGewiiIwzRWDihGhTVyjbmAYcXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:56:28:fb:5a:f0:da:cf:23:36:4b:fb:60:53:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=642c7a4e9f02b2f4e664d7d0d72a52e51261de54
Validity
Not Before: Oct 19 17:01:33 2025 GMT
Not After : Oct 20 17:01:33 2025 GMT
Subject: CN=a41facb684e6d691f7df59f91e57a3febe79475a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:cf:33:b3:ce:59:10:74:1f:a2:e9:ac:d8:b8:
22:34:e8:8c:34:55:22:4c:37:df:9e:fc:31:f7:37:
47:d8:7b:b7:d6:e6:5f:75:ba:03:ca:5c:8e:73:ac:
08:e5:b9:34:de:91:19:37:c9:a9:cf:d6:83:ee:35:
2f:f2:86:f7:d0:bf:61:6b:24:f6:45:17:45:05:5d:
d0:b7:9d:80:84:2c:ff:44:f1:c1:64:57:5d:a0:d3:
ca:80:00:5d:97:49:39:e2:2b:de:f0:b2:0f:33:4c:
2c:e4:b2:7d:26:c4:66:4e:70:7f:27:76:72:15:ed:
b7:3a:96:42:b8:11:59:85:e7:67:5c:fe:70:c0:46:
21:80:16:48:b2:f9:79:14:94:d9:ac:1f:d6:78:2f:
ad:d4:44:68:c2:d0:21:a9:3d:28:b7:01:2e:c6:f9:
56:9b:da:4e:65:7e:d4:75:de:1e:ff:7c:83:94:0f:
17:ec:cd:21:1e:a5:49:ce:06:9b:5f:12:22:d7:41:
58:9d:2a:7a:0b:3b:36:d4:08:e0:bb:21:71:4a:f3:
5b:57:06:69:c2:ae:03:09:3f:02:03:77:a2:f3:9a:
4e:c9:bb:ba:e9:b2:a3:fd:7f:b2:d0:54:d5:e4:ff:
71:1c:4b:8f:30:97:17:a6:5d:9a:fe:2e:4e:92:b7:
5a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:1F:AC:B6:84:E6:D6:91:F7:DF:59:F9:1E:57:A3:FE:BE:79:47:5A
X509v3 Authority Key Identifier:
keyid:64:2C:7A:4E:9F:02:B2:F4:E6:64:D7:D0:D7:2A:52:E5:12:61:DE:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:0d:50:05:ab:4d:f3:03:11:91:df:71:be:08:fd:e0:a5:fb:
2d:b8:30:15:70:34:10:a7:af:8d:7b:77:25:9c:8d:c9:56:a9:
24:31:66:f1:f2:7c:b6:55:fd:67:c3:8d:03:d3:67:08:8e:4a:
37:02:0b:de:cb:57:53:79:c7:8b:3f:ba:17:22:fd:1d:17:7a:
08:69:58:e1:43:6a:46:1b:bd:e0:fa:7f:1d:77:9f:4d:cc:75:
33:bb:dc:44:38:5e:97:86:f9:70:09:de:9e:d9:bc:35:83:fe:
1a:c4:79:37:f7:6e:c5:44:b1:56:11:e8:82:70:e3:42:03:66:
0d:9f:9f:c9:f6:d6:36:d1:cb:74:51:ee:29:d1:d9:d7:0c:78:
c8:25:e0:1c:00:6e:b2:40:e5:3a:78:7b:7a:07:97:36:0b:16:
e6:2f:91:21:42:8a:ac:90:06:c4:02:37:6f:a0:5e:8a:58:82:
da:72:4c:f7:30:2a:5a:c9:e6:fb:a8:25:37:19:f9:41:42:e9:
3b:4f:bb:aa:15:5e:26:30:26:4c:ee:17:f4:11:14:24:d4:33:
27:71:89:22:08:c1:32:f7:f9:0a:75:b3:a4:de:0f:cb:69:7f:
52:c3:51:bb:4a:8f:cc:20:c2:7b:19:d5:00:5c:46:7d:4f:22:
e8:78:91:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:12:49 2025 by rpki-client