Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/98c860-5298-4846-beaa-356c096bc6f9/1/ZAGt7bycjxxs8jifx_dB7fTxnyw.mft
File: ZAGt7bycjxxs8jifx_dB7fTxnyw.mft (raw, json)
Hash identifier: Q2aiL+1hl6A+SJcYBPJdZUWL3akEiiMhrYS3Uwgd2UA=
Subject key identifier: F0:16:5C:C4:8A:5F:C7:D5:89:3F:9D:9E:8A:F6:AD:4E:4E:77:16:43
Authority key identifier: 64:01:AD:ED:BC:9C:8F:1C:6C:F2:38:9F:C7:F7:41:ED:F4:F1:9F:2C
Certificate issuer: /CN=6401adedbc9c8f1c6cf2389fc7f741edf4f19f2c
Certificate serial: 0199FCFD473B44EE1759DC8A1DC1C5CED1A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZAGt7bycjxxs8jifx_dB7fTxnyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/98c860-5298-4846-beaa-356c096bc6f9/1/ZAGt7bycjxxs8jifx_dB7fTxnyw.mft
Manifest number: 0D3E
Signing time: Sun 19 Oct 2025 15:01:21 +0000
Manifest this update: Sun 19 Oct 2025 15:01:21 +0000
Manifest next update: Mon 20 Oct 2025 15:01:21 +0000
Files and hashes: 1: HlHW7XBX8ZvIde3YcV5P6ReshMk.roa (hash: 6qh5uJT+VrASAo+GezCNr4MsU+LUfxw3LvGNNOPJtbA=)
2: ZAGt7bycjxxs8jifx_dB7fTxnyw.crl (hash: YQBASqcoiv5dY03sGOG6pXmqHOpHR8jCq+hWMatefl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/98c860-5298-4846-beaa-356c096bc6f9/1/ZAGt7bycjxxs8jifx_dB7fTxnyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/98c860-5298-4846-beaa-356c096bc6f9/1/ZAGt7bycjxxs8jifx_dB7fTxnyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZAGt7bycjxxs8jifx_dB7fTxnyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:47:3b:44:ee:17:59:dc:8a:1d:c1:c5:ce:d1:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6401adedbc9c8f1c6cf2389fc7f741edf4f19f2c
Validity
Not Before: Oct 19 15:01:21 2025 GMT
Not After : Oct 20 15:01:21 2025 GMT
Subject: CN=f0165cc48a5fc7d5893f9d9e8af6ad4e4e771643
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:bb:d0:d3:ba:c7:54:88:11:b7:be:d3:8f:f8:
7b:8c:be:9f:44:11:5a:50:d7:71:a2:16:c4:d4:25:
40:17:9e:3e:c8:49:c8:66:3b:e3:1f:4e:cf:c5:7a:
a7:6f:57:3f:f7:d1:dd:a3:13:57:e4:0e:f9:32:8a:
59:7d:70:0b:df:20:5f:8a:13:53:90:d8:f8:96:b4:
16:31:66:71:c0:35:c5:5f:4c:c0:da:ac:2a:de:f4:
4c:af:e2:48:a0:51:cb:7d:5b:16:95:e8:19:21:8e:
de:ee:00:6a:fe:87:49:d9:c2:16:5b:ed:25:36:3d:
ce:f6:62:b0:8d:97:03:51:57:a3:2e:d8:67:17:57:
53:de:ed:b4:31:46:aa:80:ef:47:26:b7:70:2b:38:
c5:ff:7c:ed:d6:44:b0:6a:68:ae:0a:ca:8c:5b:cc:
e3:e0:c8:6b:0f:bd:65:93:6b:1f:2f:6c:16:fe:0d:
67:bf:fe:58:6f:7d:9d:2c:53:ea:6d:37:ea:8e:76:
ee:0b:ea:8c:07:e2:be:f5:08:10:14:d4:08:a6:5c:
6c:03:67:5a:a7:a1:e6:3e:ac:72:7b:60:f2:0c:a5:
5e:86:b5:20:2a:f3:df:8c:f9:84:e4:81:bf:54:ad:
83:14:9f:f2:07:8b:30:7e:40:11:9a:57:ff:07:02:
35:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:16:5C:C4:8A:5F:C7:D5:89:3F:9D:9E:8A:F6:AD:4E:4E:77:16:43
X509v3 Authority Key Identifier:
keyid:64:01:AD:ED:BC:9C:8F:1C:6C:F2:38:9F:C7:F7:41:ED:F4:F1:9F:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZAGt7bycjxxs8jifx_dB7fTxnyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/98c860-5298-4846-beaa-356c096bc6f9/1/ZAGt7bycjxxs8jifx_dB7fTxnyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/98c860-5298-4846-beaa-356c096bc6f9/1/ZAGt7bycjxxs8jifx_dB7fTxnyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:b7:72:a8:f4:5b:f8:30:f5:a6:82:ef:4f:13:77:09:76:f5:
cb:18:1d:ea:39:c2:e5:f8:c1:af:cb:32:22:cd:b8:47:ad:cd:
06:13:55:98:31:d9:74:af:8c:22:cf:c1:b8:c0:1b:91:cb:3c:
e0:f3:69:5d:28:28:ae:af:ca:ff:89:57:4c:02:9c:51:26:02:
b9:2c:7d:f6:c0:bb:87:d2:b7:dc:ed:fd:b0:b9:13:10:a5:d1:
72:e9:5f:d9:b1:8d:3d:f8:b8:35:ad:1d:b4:ff:46:d1:6e:f5:
d8:53:2a:ab:eb:10:27:17:ad:dc:ed:f5:82:35:95:7b:6c:d6:
b5:1c:6f:44:8c:00:4c:4a:62:24:dd:9b:f4:62:7b:9f:fc:2d:
5b:ca:5f:57:60:86:00:9d:c9:43:4f:bb:28:c8:a3:f4:23:23:
db:04:00:7b:b0:99:ec:61:49:7a:d2:18:bb:f5:a8:7c:ab:19:
40:9b:1d:f4:c0:f4:35:9a:b4:0c:3c:40:09:b7:66:43:e9:7c:
86:6a:cc:68:92:04:b2:69:4f:28:42:f5:a7:7c:23:65:d5:9d:
1e:23:7d:4a:5f:ad:51:1a:7a:83:70:34:1f:6f:be:94:df:8d:
6b:e4:ec:23:8d:a6:e7:a3:e2:04:d7:54:b9:90:e7:e3:dd:f3:
4b:12:8b:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:05:55 2025 by rpki-client