Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.mft
File: ZboV1Huk9EgnZEctjZcUah67v4Y.mft (raw, json)
Hash identifier: hmgfTFtyqxGG65jbTQ/vjKdb4f3cba/UngaZchPkrf8=
Subject key identifier: D7:EF:41:DF:E8:73:A5:94:68:40:F3:00:17:90:12:B8:8B:E8:D0:8B
Authority key identifier: 65:BA:15:D4:7B:A4:F4:48:27:64:47:2D:8D:97:14:6A:1E:BB:BF:86
Certificate issuer: /CN=65ba15d47ba4f4482764472d8d97146a1ebbbf86
Certificate serial: 0199FBEAE23EBAB805483BAEA03563B139C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZboV1Huk9EgnZEctjZcUah67v4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.mft
Manifest number: 16E9
Signing time: Sun 19 Oct 2025 10:01:38 +0000
Manifest this update: Sun 19 Oct 2025 10:01:38 +0000
Manifest next update: Mon 20 Oct 2025 10:01:38 +0000
Files and hashes: 1: 4rAAYUq5t1ihC75pRZ-8BYtmpQo.roa (hash: 188bZwTUrt3prH8kliJVWf+ZzLbMtaC8U5VcRX/YSdk=)
2: 6To_-SlMxz3YG0ptLY8TCmc3uqU.roa (hash: uJB/UZHKN4C9IojJMtedYn8sR+djAWZ0k/CyzWBoJ6E=)
3: ZboV1Huk9EgnZEctjZcUah67v4Y.crl (hash: ycaCGissfsYT+P37fZxw7AzjX6HDh5Wvy0gtPkiltmg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZboV1Huk9EgnZEctjZcUah67v4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:e2:3e:ba:b8:05:48:3b:ae:a0:35:63:b1:39:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65ba15d47ba4f4482764472d8d97146a1ebbbf86
Validity
Not Before: Oct 19 10:01:38 2025 GMT
Not After : Oct 20 10:01:38 2025 GMT
Subject: CN=d7ef41dfe873a5946840f300179012b88be8d08b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:69:46:96:aa:d5:f7:ca:ce:63:83:51:6f:54:
f3:20:1c:61:35:d9:a0:10:3d:b1:fa:fc:ce:a6:6f:
0b:a4:de:c3:59:9d:29:90:ff:fa:97:29:59:77:1f:
73:26:5b:ba:00:43:bf:72:5a:f7:71:cb:1b:51:9e:
41:1e:64:ff:95:bb:28:04:c6:1f:df:b8:41:32:f4:
73:af:84:81:04:80:32:a5:c6:6a:c7:fd:0c:74:63:
b7:27:b6:a5:6d:14:8a:af:68:bd:78:c9:9a:a6:10:
4d:19:95:c6:35:b4:b1:a1:77:ab:c4:17:d7:b6:82:
e5:4c:cd:50:ff:31:c0:69:58:69:8a:87:b1:f9:16:
fc:58:3c:65:6d:82:ce:df:c1:c0:ce:3c:2a:7f:79:
16:ab:90:2f:0e:88:53:2c:73:a4:46:ca:85:6c:c7:
d4:1f:49:e7:20:85:dd:1d:d8:10:90:ba:e8:a8:2e:
65:be:72:28:3e:56:f0:00:75:21:8b:09:d7:56:72:
64:23:79:7d:3e:b6:ed:83:ee:5b:11:20:a3:ff:eb:
4d:1c:4e:33:dd:34:d4:90:b4:54:b7:c8:04:cf:61:
aa:8c:e2:4c:e5:9a:1e:fe:7d:91:c7:90:bd:fc:39:
38:e2:fa:5a:dd:90:d2:5c:c2:64:a3:04:48:7a:58:
5f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:EF:41:DF:E8:73:A5:94:68:40:F3:00:17:90:12:B8:8B:E8:D0:8B
X509v3 Authority Key Identifier:
keyid:65:BA:15:D4:7B:A4:F4:48:27:64:47:2D:8D:97:14:6A:1E:BB:BF:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZboV1Huk9EgnZEctjZcUah67v4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:ff:39:3d:3b:d7:1b:bb:30:66:55:4d:60:e2:b8:f2:f4:d7:
31:2f:0b:29:f5:26:ad:de:3a:db:c7:34:e8:17:31:1b:d5:48:
ee:40:00:0f:ec:ff:7b:23:86:a3:10:e1:20:86:cf:d8:bf:40:
54:c9:8c:ef:30:a9:57:f8:2a:24:86:b2:43:a4:c6:65:f2:4c:
63:07:f7:c0:f7:59:05:0e:f8:9b:7d:fa:59:26:f8:88:dc:cd:
99:c7:97:61:43:5d:80:9f:c2:bd:ef:ac:d9:78:cb:a1:98:2e:
0a:ce:02:14:21:a6:89:f9:cb:1b:3a:fa:8b:e1:8a:b6:4f:02:
b4:2c:cc:46:ef:98:f2:67:56:dc:61:e8:cd:88:21:84:5a:2f:
bd:6c:b4:0e:93:9b:e7:23:6b:d7:65:0f:8b:d2:32:44:8c:51:
12:29:fa:02:8b:7b:b9:b0:8c:ca:af:9a:9d:a1:ae:a7:a3:33:
9f:c1:3b:05:ca:2e:db:9d:aa:ca:25:29:65:7a:7d:f6:cd:22:
4e:8f:cd:74:6a:a2:1c:4b:82:85:5d:43:77:89:e6:40:8e:b9:
3a:25:d3:7c:b2:76:62:f4:17:43:93:72:ef:e9:42:4c:f3:6e:
4b:6c:6f:28:15:74:e1:84:6d:d1:81:02:d6:3e:38:08:19:69:
ac:60:7b:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:06:12 2025 by rpki-client