Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.mft
File: zAGDPH7l80P_CTtsTmFR0ONkV2g.mft (raw, json)
Hash identifier: 8LBY7xbfVvmOfbt7y348FFmFDTOwnugGH1gXVlsHDXM=
Subject key identifier: 18:35:34:A7:FA:AF:E8:1B:EE:69:00:C3:06:53:15:90:56:34:8D:B9
Authority key identifier: CC:01:83:3C:7E:E5:F3:43:FF:09:3B:6C:4E:61:51:D0:E3:64:57:68
Certificate issuer: /CN=cc01833c7ee5f343ff093b6c4e6151d0e3645768
Certificate serial: 0199FCC6C69C2167186197E339820CF65FD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zAGDPH7l80P_CTtsTmFR0ONkV2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.mft
Manifest number: 16EB
Signing time: Sun 19 Oct 2025 14:01:49 +0000
Manifest this update: Sun 19 Oct 2025 14:01:49 +0000
Manifest next update: Mon 20 Oct 2025 14:01:49 +0000
Files and hashes: 1: 8B-49SRrYWj3BFm1FIacELaGu3s.roa (hash: laIZJXxS1vtVLt93zJEWrt+cjjvvJapngvXurJPqS7Y=)
2: a3gHziW8P1fHttGC9Ex68BgcGK4.roa (hash: 5EwUldHPQ4hQYwe5t3ER6qcsrkPeWX9lX5322mclP1s=)
3: zAGDPH7l80P_CTtsTmFR0ONkV2g.crl (hash: AJvDGrj3P3fIICviwb5kYk3Wy0uEvEP2tRd8NcIgv3Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/zAGDPH7l80P_CTtsTmFR0ONkV2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 14:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:c6:9c:21:67:18:61:97:e3:39:82:0c:f6:5f:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc01833c7ee5f343ff093b6c4e6151d0e3645768
Validity
Not Before: Oct 19 14:01:49 2025 GMT
Not After : Oct 20 14:01:49 2025 GMT
Subject: CN=183534a7faafe81bee6900c30653159056348db9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b7:aa:fb:a3:b1:b5:97:c3:57:2f:8e:e4:e7:
6e:c2:e7:a9:bc:28:3b:e7:96:0a:33:cb:16:ff:6b:
04:f3:70:93:f6:27:5b:77:fe:48:d0:d8:3e:71:30:
c3:2b:f0:af:48:81:35:1d:ed:dc:57:76:30:cd:ce:
06:8a:51:fd:55:51:c1:cb:d5:3c:24:71:98:b3:d1:
48:21:4f:9d:80:c5:79:1b:26:28:61:96:3b:b5:31:
a4:48:49:3a:00:0a:f2:bb:70:14:cb:7f:bc:72:53:
42:f1:ba:98:26:6a:35:fb:43:a3:18:dc:b7:27:15:
49:cc:86:8b:d7:5d:52:31:4f:19:c7:e1:da:d1:c6:
90:da:ac:7c:3b:c4:b4:da:7a:8c:a9:70:86:9e:51:
72:ae:64:56:48:56:41:15:56:35:b2:f6:e8:f1:c4:
ff:52:6e:15:5d:62:48:c0:00:19:7d:04:09:1c:e3:
f3:e1:c2:b0:f7:08:45:b0:15:df:bf:a5:39:d2:a1:
19:16:e3:43:7b:ea:14:23:6f:1a:3d:9c:08:c5:dd:
99:b5:ae:85:63:59:a0:b2:d5:29:9d:27:b3:e0:95:
88:e9:18:32:43:be:c8:b9:41:e6:27:b6:fc:17:25:
63:a6:1e:b2:c2:f1:ff:49:5d:d0:1e:3f:4c:55:2e:
c5:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:35:34:A7:FA:AF:E8:1B:EE:69:00:C3:06:53:15:90:56:34:8D:B9
X509v3 Authority Key Identifier:
keyid:CC:01:83:3C:7E:E5:F3:43:FF:09:3B:6C:4E:61:51:D0:E3:64:57:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zAGDPH7l80P_CTtsTmFR0ONkV2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:b4:a9:ea:00:b2:98:0e:eb:14:8f:11:92:8a:f4:83:f5:43:
e9:7c:2e:08:19:39:13:69:67:74:aa:30:0a:33:93:8f:23:74:
28:4b:d4:03:81:b3:69:42:3b:24:f3:e1:46:d0:b0:28:1e:bc:
fc:ea:b5:ba:cd:1b:f7:79:bd:fc:b9:2a:0d:6c:69:6c:d0:fc:
37:1a:56:98:46:88:19:81:7f:88:ed:0f:24:da:28:58:03:da:
0f:28:3e:df:d6:6a:34:5b:5a:4e:05:31:56:7a:78:05:d4:6b:
c3:49:0d:74:73:83:0d:eb:ac:1a:9e:92:9b:a9:74:5b:c3:ef:
8f:18:91:70:af:7f:71:b9:4c:40:1b:d2:c4:44:ad:07:5e:5b:
ef:00:8c:60:5a:24:9d:43:e1:44:75:1e:9a:6c:a8:d3:7a:be:
de:f9:99:11:fc:74:8e:91:f4:7d:e7:a9:9e:29:0a:a4:b5:ba:
5d:28:7c:a6:a2:cb:cc:68:80:57:0e:66:8e:03:71:6d:3f:6d:
da:f3:a8:b8:39:9c:fc:cd:93:06:1a:27:74:a8:7a:ef:78:3e:
48:99:8a:00:56:86:d7:91:3d:a9:84:d0:9b:c1:25:78:9a:52:
71:56:08:e3:87:b1:bc:4f:a3:27:a8:cd:24:67:07:e9:e3:1d:
20:57:ec:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:13:01 2025 by rpki-client