Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/d1418c-7cd8-4af9-8166-577c03910701/1/ZfASDuO28PjbUtDbgcAeREfY5Lo.mft
File: ZfASDuO28PjbUtDbgcAeREfY5Lo.mft (raw, json)
Hash identifier: 0LUCVJql6tx1NaP8Ewzqt7r4YZ1IGOC+tTVNgLHbL4g=
Subject key identifier: 5F:64:D6:6C:AD:EE:B1:A6:3A:F0:60:0C:13:F3:9A:A6:62:85:34:4D
Authority key identifier: 65:F0:12:0E:E3:B6:F0:F8:DB:52:D0:DB:81:C0:1E:44:47:D8:E4:BA
Certificate issuer: /CN=65f0120ee3b6f0f8db52d0db81c01e4447d8e4ba
Certificate serial: 0199FFFE5AE1B34D88F1ADA24D45D818F965
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZfASDuO28PjbUtDbgcAeREfY5Lo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/d1418c-7cd8-4af9-8166-577c03910701/1/ZfASDuO28PjbUtDbgcAeREfY5Lo.mft
Manifest number: 16E4
Signing time: Mon 20 Oct 2025 05:01:23 +0000
Manifest this update: Mon 20 Oct 2025 05:01:23 +0000
Manifest next update: Tue 21 Oct 2025 05:01:23 +0000
Files and hashes: 1: ZfASDuO28PjbUtDbgcAeREfY5Lo.crl (hash: Q+Nm+y5kw84dpllpI+AhW8jM8NAufKUp7HheF5lfIDs=)
2: cO1AasGYHXhPsHKm3hi1TX9-Qos.roa (hash: CIc/4zinLVuL7fIWbIBFTK/p1pSlSm0f2NwdbryHRXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/d1418c-7cd8-4af9-8166-577c03910701/1/ZfASDuO28PjbUtDbgcAeREfY5Lo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/d1418c-7cd8-4af9-8166-577c03910701/1/ZfASDuO28PjbUtDbgcAeREfY5Lo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZfASDuO28PjbUtDbgcAeREfY5Lo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:fe:5a:e1:b3:4d:88:f1:ad:a2:4d:45:d8:18:f9:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65f0120ee3b6f0f8db52d0db81c01e4447d8e4ba
Validity
Not Before: Oct 20 05:01:23 2025 GMT
Not After : Oct 21 05:01:23 2025 GMT
Subject: CN=5f64d66cadeeb1a63af0600c13f39aa66285344d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bb:70:f8:1b:5c:8e:d2:14:b7:6d:24:a1:7d:
33:4f:98:90:77:6b:ad:68:c9:17:9b:7a:65:f0:5a:
75:4e:27:fc:9d:f2:38:4c:b4:25:fb:e8:6d:dd:15:
75:00:6a:64:31:2f:d1:b8:39:ec:e9:f2:35:08:70:
25:43:65:15:d6:cd:d2:aa:fb:d6:bf:aa:33:93:fe:
ab:3f:07:55:6b:22:c3:9d:ef:5d:94:07:12:7a:bf:
c1:b9:75:57:d4:52:0f:b9:c8:97:1a:67:1a:7a:c0:
fa:bb:75:e5:2b:a6:25:f7:b9:d6:e1:1b:d3:6a:45:
15:24:9d:ad:71:94:83:78:36:5a:0f:c0:29:75:a5:
03:19:6a:59:18:81:80:00:c3:ee:f1:62:d8:36:5b:
e1:c4:76:6f:75:46:93:4e:21:bd:55:c2:9a:ed:bf:
b8:75:5c:7a:dc:b0:68:8d:75:8e:9f:16:35:78:43:
63:1d:1f:34:ff:3f:26:ba:78:98:00:b9:8f:b6:0b:
3c:7c:a2:ef:e4:81:79:8d:57:d7:24:77:c9:1a:13:
5b:29:5d:59:a0:77:7c:51:83:69:64:98:94:b1:e8:
4a:2e:f1:7c:5c:29:ab:a3:f2:8c:ff:c4:28:99:98:
7d:9f:72:f2:6d:a2:26:39:05:0d:98:c0:f2:57:cd:
cd:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:64:D6:6C:AD:EE:B1:A6:3A:F0:60:0C:13:F3:9A:A6:62:85:34:4D
X509v3 Authority Key Identifier:
keyid:65:F0:12:0E:E3:B6:F0:F8:DB:52:D0:DB:81:C0:1E:44:47:D8:E4:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZfASDuO28PjbUtDbgcAeREfY5Lo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/d1418c-7cd8-4af9-8166-577c03910701/1/ZfASDuO28PjbUtDbgcAeREfY5Lo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/d1418c-7cd8-4af9-8166-577c03910701/1/ZfASDuO28PjbUtDbgcAeREfY5Lo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:c4:86:8f:57:61:6c:6d:dc:0d:21:1e:40:b2:5e:8b:1e:1f:
98:a5:34:a4:6c:90:31:17:01:4f:81:a5:58:b1:2c:7a:79:17:
e4:e3:08:63:84:8d:11:e0:ae:be:3d:79:8a:28:d6:85:ac:a9:
c6:d3:bf:7b:42:c0:eb:04:f9:eb:ea:df:60:4f:71:eb:1d:01:
10:16:a3:5f:82:11:3c:86:8a:e5:42:90:0c:f7:79:57:f8:1b:
f3:6d:59:5c:0c:de:d2:67:2b:ac:7a:8e:08:6c:62:23:99:51:
ac:58:b7:e8:5d:0c:3b:b1:87:d9:02:64:c0:9d:d7:9d:82:e4:
fc:25:2a:20:53:4b:6a:a9:96:ad:0c:9a:84:20:9a:a5:66:55:
3d:0d:75:05:03:75:48:70:d3:0c:17:a0:27:c3:26:ec:d4:97:
32:d3:d8:5e:42:3b:87:a5:43:ae:63:bd:29:bc:34:f6:c1:19:
f3:de:0a:cd:12:e7:06:c9:4d:51:52:46:de:d0:1e:4f:87:dc:
fd:c9:88:7f:cd:07:64:2d:05:95:fd:bb:8d:79:e2:64:fe:d9:
f3:2f:04:70:a8:15:ad:6b:01:77:dc:df:c9:4f:7e:9e:61:50:
42:47:63:34:85:1b:06:98:3c:a5:51:04:ad:01:e5:55:a5:5c:
ae:79:9d:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:19:51 2025 by rpki-client