Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/a36365-8552-4a97-8bfa-ccaf44d41648/1/ZlBwd85_MPwGht0JNKiZl98x6Ew.mft
File: ZlBwd85_MPwGht0JNKiZl98x6Ew.mft (raw, json)
Hash identifier: oLXtGqZNoM6muL+A26PRSo2dfV4XjmeJxisydJKfP8A=
Subject key identifier: D3:7D:99:A4:0E:E8:99:57:B7:3F:65:29:C4:F1:A4:76:BE:37:BD:7A
Authority key identifier: 66:50:70:77:CE:7F:30:FC:06:86:DD:09:34:A8:99:97:DF:31:E8:4C
Certificate issuer: /CN=66507077ce7f30fc0686dd0934a89997df31e84c
Certificate serial: 0199FBEA94768ED31A0ED56A78A3930C28BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZlBwd85_MPwGht0JNKiZl98x6Ew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/a36365-8552-4a97-8bfa-ccaf44d41648/1/ZlBwd85_MPwGht0JNKiZl98x6Ew.mft
Manifest number: 0264
Signing time: Sun 19 Oct 2025 10:01:18 +0000
Manifest this update: Sun 19 Oct 2025 10:01:18 +0000
Manifest next update: Mon 20 Oct 2025 10:01:18 +0000
Files and hashes: 1: CMAN4bcbFlE2ovL3BXKdvH4eTII.roa (hash: ZzFaJfQBLQmJT0k4QbFN8QUiuOCXpP8XehevhIAFTKY=)
2: ZlBwd85_MPwGht0JNKiZl98x6Ew.crl (hash: 8fP0dOxdemeMN30l3OOdRvvdDpZTghIBU9GhPE3B4iI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/a36365-8552-4a97-8bfa-ccaf44d41648/1/ZlBwd85_MPwGht0JNKiZl98x6Ew.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/a36365-8552-4a97-8bfa-ccaf44d41648/1/ZlBwd85_MPwGht0JNKiZl98x6Ew.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZlBwd85_MPwGht0JNKiZl98x6Ew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:94:76:8e:d3:1a:0e:d5:6a:78:a3:93:0c:28:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66507077ce7f30fc0686dd0934a89997df31e84c
Validity
Not Before: Oct 19 10:01:18 2025 GMT
Not After : Oct 20 10:01:18 2025 GMT
Subject: CN=d37d99a40ee89957b73f6529c4f1a476be37bd7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1e:ed:ce:0f:ca:e5:30:cb:40:f6:10:de:e8:
85:a7:06:6f:4b:41:ee:7d:31:4a:29:30:ea:27:2d:
db:04:8c:83:25:d8:e0:ac:2c:f7:45:82:aa:9c:e8:
c5:11:ee:24:79:d1:de:a5:7b:94:40:01:93:58:2c:
9d:55:90:37:89:7b:5b:66:72:e9:4d:11:56:7b:63:
63:d9:76:0e:ff:bc:92:1a:21:7f:64:43:18:fc:fe:
12:71:f7:9f:d5:50:02:b3:6b:83:e9:52:fa:45:97:
c4:6c:66:ad:9d:ea:5d:37:ae:b4:a6:eb:70:ce:b3:
3e:95:f1:cc:52:0e:ae:c7:90:12:1d:f4:e7:98:a1:
12:28:68:b6:c2:e9:56:d1:0f:c0:2e:8c:c1:08:16:
1a:f8:92:d6:12:57:79:ef:31:e1:98:e8:a7:40:16:
2b:63:c3:6a:a1:5d:fb:e5:5d:87:b1:ec:6a:48:57:
1b:21:ec:f4:dc:c9:39:b4:2e:42:8a:6d:14:04:03:
63:bc:d0:e5:43:59:98:88:f4:a3:11:e9:6e:34:d6:
5d:b9:33:0c:cb:79:d2:dc:17:43:c9:84:bb:ef:6b:
3e:56:7c:88:0d:6e:0c:93:06:3e:d6:7d:4f:73:38:
a9:da:cb:5f:05:6f:89:9f:fa:61:a4:ff:42:46:e7:
3a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:7D:99:A4:0E:E8:99:57:B7:3F:65:29:C4:F1:A4:76:BE:37:BD:7A
X509v3 Authority Key Identifier:
keyid:66:50:70:77:CE:7F:30:FC:06:86:DD:09:34:A8:99:97:DF:31:E8:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZlBwd85_MPwGht0JNKiZl98x6Ew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a36365-8552-4a97-8bfa-ccaf44d41648/1/ZlBwd85_MPwGht0JNKiZl98x6Ew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a36365-8552-4a97-8bfa-ccaf44d41648/1/ZlBwd85_MPwGht0JNKiZl98x6Ew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:76:29:72:b6:f6:3a:2f:be:19:15:2f:21:b3:6f:82:81:e0:
0b:d8:7c:6b:48:f5:52:b4:34:32:30:9f:64:a6:89:08:ed:fb:
6e:53:e0:e5:e8:64:91:a3:6d:51:49:ae:de:40:c9:11:42:4c:
a7:6a:26:75:c4:b5:6e:da:57:8f:96:61:62:6c:0c:5f:d9:ae:
02:31:19:0a:2f:0d:80:68:83:fb:72:18:b4:25:d6:8d:07:74:
21:30:d0:bb:c9:ca:f2:bb:bb:60:17:c3:c7:c9:03:a2:12:25:
ab:25:f1:5a:28:7c:b4:e1:8c:39:33:3d:46:8c:8b:4e:5f:30:
d3:f1:22:c5:44:33:c8:cf:56:36:38:65:f0:6b:ee:68:4f:8e:
59:c0:74:db:a3:af:d0:3e:94:7f:82:61:a4:42:d7:cd:cc:01:
df:35:ce:d2:38:70:ed:f9:d1:65:c4:c0:70:f1:b3:f2:53:85:
a3:7a:70:b6:40:0a:1d:a0:60:53:d6:c0:2c:ca:92:ad:6a:c0:
de:a0:4b:65:a6:13:6c:7a:a8:e3:ee:8e:65:49:37:44:52:f9:
2e:dc:40:6a:ce:e5:e4:07:15:ce:7d:07:1e:da:6c:5f:c7:eb:
53:aa:a7:85:92:b0:68:dd:c2:bd:c8:02:09:b1:d6:b1:22:57:
2f:af:33:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:06:02 2025 by rpki-client