Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/22b802-ecc1-41af-89ee-fc95468cb6aa/1/zeTEZdLfNFjAJhD4eCDJvC6zMlM.mft
File: zeTEZdLfNFjAJhD4eCDJvC6zMlM.mft (raw, json)
Hash identifier: n4vlSmlGABe5Cp/xJlamCq5WSbZkoLhdFOkFitUkntw=
Subject key identifier: FE:E5:29:3A:AA:2F:99:05:19:71:F6:E7:23:3E:6E:18:69:1F:E1:FF
Authority key identifier: CD:E4:C4:65:D2:DF:34:58:C0:26:10:F8:78:20:C9:BC:2E:B3:32:53
Certificate issuer: /CN=cde4c465d2df3458c02610f87820c9bc2eb33253
Certificate serial: 0199FB7CC45AD6281F43BB10F9BD39A58F1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zeTEZdLfNFjAJhD4eCDJvC6zMlM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/22b802-ecc1-41af-89ee-fc95468cb6aa/1/zeTEZdLfNFjAJhD4eCDJvC6zMlM.mft
Manifest number: 021D
Signing time: Sun 19 Oct 2025 08:01:21 +0000
Manifest this update: Sun 19 Oct 2025 08:01:21 +0000
Manifest next update: Mon 20 Oct 2025 08:01:21 +0000
Files and hashes: 1: BE_olsmmnp-joM_N2rLYKLd8dek.roa (hash: ZleCTANKAgfaV22x6J6w6CdrHsjvtau2exHtj44bgPs=)
2: zeTEZdLfNFjAJhD4eCDJvC6zMlM.crl (hash: wZKxE8GHYBd0Wdm8pFdCqfYZBbR4kszQbMb2sTPoujo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/22b802-ecc1-41af-89ee-fc95468cb6aa/1/zeTEZdLfNFjAJhD4eCDJvC6zMlM.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/22b802-ecc1-41af-89ee-fc95468cb6aa/1/zeTEZdLfNFjAJhD4eCDJvC6zMlM.mft
rsync://rpki.ripe.net/repository/DEFAULT/zeTEZdLfNFjAJhD4eCDJvC6zMlM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:c4:5a:d6:28:1f:43:bb:10:f9:bd:39:a5:8f:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cde4c465d2df3458c02610f87820c9bc2eb33253
Validity
Not Before: Oct 19 08:01:21 2025 GMT
Not After : Oct 20 08:01:21 2025 GMT
Subject: CN=fee5293aaa2f99051971f6e7233e6e18691fe1ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:54:7d:b7:f4:02:f1:20:29:72:d6:36:72:ef:
72:16:fe:98:c0:41:4b:f3:4c:88:30:b8:b6:14:8e:
bc:44:a3:04:6d:9a:fc:7e:f1:2c:1e:17:1f:ab:1f:
00:59:bb:67:49:83:fb:62:e7:97:bf:bf:bd:8b:49:
4a:72:9e:51:36:24:52:38:df:dd:d5:c1:a7:ae:79:
36:aa:f9:c3:c6:2f:8c:c3:09:24:74:88:ba:67:30:
7d:c8:ce:d2:fc:61:ab:d2:a9:15:c9:cc:8b:6e:08:
1a:76:2c:d6:14:1a:36:f0:c6:4a:8f:bd:ec:ef:75:
16:67:04:a0:6b:b0:af:d1:6d:b3:cb:c0:58:7d:cd:
3e:ee:e4:11:a3:03:70:d3:8f:e8:4f:93:2d:dd:ff:
92:a8:8c:77:47:78:3f:49:1c:5f:bf:ab:36:06:85:
50:a1:5c:33:8c:8f:45:24:5f:51:4f:bb:f0:00:b2:
74:a8:07:ff:b9:48:fe:73:3d:4a:7b:4a:db:b1:16:
c1:5e:a8:dc:17:99:ef:d4:5a:f0:65:44:3d:a5:8a:
05:40:db:77:74:8a:4d:87:b5:66:13:19:aa:44:9e:
bc:17:70:31:2d:d6:0d:ed:58:55:4f:e4:af:73:58:
0d:ce:25:ff:18:84:df:c2:01:ae:73:4e:e6:12:29:
e3:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:E5:29:3A:AA:2F:99:05:19:71:F6:E7:23:3E:6E:18:69:1F:E1:FF
X509v3 Authority Key Identifier:
keyid:CD:E4:C4:65:D2:DF:34:58:C0:26:10:F8:78:20:C9:BC:2E:B3:32:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zeTEZdLfNFjAJhD4eCDJvC6zMlM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/22b802-ecc1-41af-89ee-fc95468cb6aa/1/zeTEZdLfNFjAJhD4eCDJvC6zMlM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/22b802-ecc1-41af-89ee-fc95468cb6aa/1/zeTEZdLfNFjAJhD4eCDJvC6zMlM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:22:93:2a:ea:67:45:ef:bc:85:1a:59:80:71:a8:cc:4a:67:
22:b0:92:1b:c0:24:67:3c:ab:b8:59:03:53:50:0b:71:2d:62:
e8:9a:2d:c0:18:13:65:3f:0f:e3:24:ec:d9:0c:c0:52:3c:91:
d0:7e:63:fb:e5:84:90:da:fa:5f:45:1d:bd:8f:f5:67:fb:09:
be:40:9a:0f:c6:52:19:c9:10:6f:d0:0f:28:f4:21:ac:71:bd:
a1:1a:3f:37:e5:8b:f9:93:46:eb:a9:10:f7:31:6a:f7:34:b9:
c1:4c:64:89:4b:4d:75:d4:79:8f:51:1e:88:7c:e4:fc:1c:22:
2a:b0:37:14:b4:bb:0f:08:4a:b4:f6:02:bb:95:d9:a9:17:c9:
be:80:56:e8:a7:06:5f:a1:83:b1:d2:4e:ce:68:08:37:5d:ae:
8e:91:60:0c:b1:5e:a7:39:9c:19:f1:67:d6:8a:1f:fc:7c:43:
e1:fa:fd:0e:f7:c1:83:1a:84:fb:f6:51:23:9b:74:cb:62:41:
39:88:16:48:6d:5d:97:98:9f:f7:26:bc:8d:56:d0:09:d2:62:
1f:8d:92:14:3d:54:34:2f:d0:a1:b1:0c:57:23:86:98:3f:f7:
2c:44:e1:71:27:a3:c5:2c:88:89:6c:c0:fb:a4:17:00:30:6f:
6e:d6:b5:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:02:01 2025 by rpki-client