Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/215f47-1ce0-4ee5-aa4a-1272d2ab43d8/1/zHi_zrQbr-_AL3lS4aokgOmG8Dc.mft
File: zHi_zrQbr-_AL3lS4aokgOmG8Dc.mft (raw, json)
Hash identifier: kQe2Tyow0hAK/dDE20mSd+G7UaZF/Xwns9EH2uCAh98=
Subject key identifier: 7E:0F:E6:16:95:89:73:66:4E:E7:AB:8D:B1:E0:70:B0:51:5C:12:12
Authority key identifier: CC:78:BF:CE:B4:1B:AF:EF:C0:2F:79:52:E1:AA:24:80:E9:86:F0:37
Certificate issuer: /CN=cc78bfceb41bafefc02f7952e1aa2480e986f037
Certificate serial: 0199FCC679D7DFDB8D6145CDDB427C4F40F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zHi_zrQbr-_AL3lS4aokgOmG8Dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/215f47-1ce0-4ee5-aa4a-1272d2ab43d8/1/zHi_zrQbr-_AL3lS4aokgOmG8Dc.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 14:01:29 +0000
Manifest this update: Sun 19 Oct 2025 14:01:29 +0000
Manifest next update: Mon 20 Oct 2025 14:01:29 +0000
Files and hashes: 1: EsoIIrFbYFhVDfj6th4jhjn8bMs.roa (hash: QXxOo7J9CTQ0vAhyPXgGF7t6YymxNb/k2gt5l3VWLEM=)
2: zHi_zrQbr-_AL3lS4aokgOmG8Dc.crl (hash: msnzc6O82rvT3l+FcRd87WzxdqQPuUiZd/4W+rHdZXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/215f47-1ce0-4ee5-aa4a-1272d2ab43d8/1/zHi_zrQbr-_AL3lS4aokgOmG8Dc.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/215f47-1ce0-4ee5-aa4a-1272d2ab43d8/1/zHi_zrQbr-_AL3lS4aokgOmG8Dc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zHi_zrQbr-_AL3lS4aokgOmG8Dc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:79:d7:df:db:8d:61:45:cd:db:42:7c:4f:40:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc78bfceb41bafefc02f7952e1aa2480e986f037
Validity
Not Before: Oct 19 14:01:29 2025 GMT
Not After : Oct 20 14:01:29 2025 GMT
Subject: CN=7e0fe616958973664ee7ab8db1e070b0515c1212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:b1:70:0d:bc:d3:29:16:61:39:b3:68:da:80:
41:dd:f1:9c:31:5a:fd:7b:12:2c:12:72:42:d4:58:
64:a3:e7:17:8b:0d:38:28:93:a2:eb:e8:4a:7c:4c:
0f:c0:09:91:78:01:fd:e2:15:e9:b6:26:fc:50:6b:
9f:0f:3e:01:dd:e3:9c:80:e6:8a:94:3e:7a:29:bb:
a4:ba:89:76:75:41:dd:be:19:02:fd:e5:34:43:3a:
a2:fa:a5:63:b4:6b:22:f8:fc:ed:2d:33:82:0a:9a:
79:30:f8:55:20:aa:28:a7:6c:39:dc:4e:d3:b7:23:
1b:46:cc:b2:5c:3a:24:f3:95:e8:9c:26:45:5d:87:
fa:ea:8f:9a:89:d7:dd:4f:2a:95:36:cc:f9:17:36:
e0:8c:1b:85:32:12:80:23:60:3f:d9:3d:37:27:18:
af:2b:92:da:4c:19:86:08:3c:98:a1:3d:80:79:8d:
35:5b:a3:0f:56:9a:c9:91:c1:3a:9a:0b:3b:b4:64:
c8:63:c9:74:bf:69:db:f0:e9:c7:55:14:e1:ed:20:
3b:96:03:7b:2a:9a:e1:89:f9:32:3a:56:ea:07:6f:
a7:d0:c0:c3:0c:e3:e9:6e:6c:1b:dc:a4:26:3f:aa:
5b:10:a9:f2:f6:be:9d:f6:cc:03:67:e3:fc:d6:5f:
f8:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:0F:E6:16:95:89:73:66:4E:E7:AB:8D:B1:E0:70:B0:51:5C:12:12
X509v3 Authority Key Identifier:
keyid:CC:78:BF:CE:B4:1B:AF:EF:C0:2F:79:52:E1:AA:24:80:E9:86:F0:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zHi_zrQbr-_AL3lS4aokgOmG8Dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/215f47-1ce0-4ee5-aa4a-1272d2ab43d8/1/zHi_zrQbr-_AL3lS4aokgOmG8Dc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/215f47-1ce0-4ee5-aa4a-1272d2ab43d8/1/zHi_zrQbr-_AL3lS4aokgOmG8Dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:84:56:a5:48:f1:23:3c:5d:92:a0:3b:77:dc:5e:16:1a:c5:
52:9c:5a:00:8d:9f:5a:75:2e:0c:08:84:b2:5f:ce:f3:df:5a:
76:1c:5f:c5:2f:63:0d:84:ad:41:39:85:79:01:0c:83:43:5f:
4d:fa:4d:d1:cf:6c:64:fb:f4:dd:70:d0:b0:04:0c:3d:c1:97:
f7:30:29:b9:b1:fd:f6:f6:17:4e:f8:96:e6:54:64:d9:7a:f4:
ab:a3:5d:e2:7a:a5:ee:62:48:9b:f8:e2:66:35:7b:27:5f:55:
da:be:82:03:ff:01:58:35:2a:82:59:c8:b8:3f:4f:22:5c:ec:
be:ea:75:e4:2b:d9:52:a3:6d:b8:4a:81:23:1f:bb:de:a7:b4:
75:18:dd:e5:80:ab:ac:3a:b4:16:c8:37:69:d8:bd:cd:fd:07:
57:17:02:c6:46:2c:1a:c4:82:a5:b6:d8:bb:29:2d:40:7e:43:
ba:a0:84:d3:b6:cf:d7:bd:90:9c:f2:a0:31:14:8f:e2:7f:b0:
41:2a:4a:e0:9a:38:f6:40:a5:df:00:97:17:96:05:da:19:59:
06:11:70:87:00:d5:11:3c:4a:e8:b6:2b:33:f2:b8:74:8c:c8:
4a:e0:a5:3b:82:e3:dd:ea:c6:65:c5:b4:e9:47:83:1c:b1:71:
35:c1:6e:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:39:49 2025 by rpki-client