Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/890a41-be76-434d-87cf-ccc82f2d57e0/1/ZE1zGWVIkkSnvSj4k9Czdpr9mW8.mft
File: ZE1zGWVIkkSnvSj4k9Czdpr9mW8.mft (raw, json)
Hash identifier: mw5FoSkrMfb9n9k0kXsaXN8BZMFIF0iVjVjkgdcCwGc=
Subject key identifier: 75:3A:9F:47:CC:95:9B:19:E2:9B:45:E8:7F:A8:C3:B3:4E:F8:70:7D
Authority key identifier: 64:4D:73:19:65:48:92:44:A7:BD:28:F8:93:D0:B3:76:9A:FD:99:6F
Certificate issuer: /CN=644d731965489244a7bd28f893d0b3769afd996f
Certificate serial: 0199FAA17A5E93306C66CB695EBC5F7CD681
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZE1zGWVIkkSnvSj4k9Czdpr9mW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/890a41-be76-434d-87cf-ccc82f2d57e0/1/ZE1zGWVIkkSnvSj4k9Czdpr9mW8.mft
Manifest number: 94
Signing time: Sun 19 Oct 2025 04:01:50 +0000
Manifest this update: Sun 19 Oct 2025 04:01:50 +0000
Manifest next update: Mon 20 Oct 2025 04:01:50 +0000
Files and hashes: 1: 8R7YPkWH5ZAK01MGxs__0nrLrxg.roa (hash: rfeUdR+ncjatxCkAhvMnsRCgT5rqCaWEYWpsxW3Cs7Q=)
2: ZE1zGWVIkkSnvSj4k9Czdpr9mW8.crl (hash: 6ZeV08GK+XAmdcjf4TiTu1sZGqn+91Mv+ccKIFkC7D4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/890a41-be76-434d-87cf-ccc82f2d57e0/1/ZE1zGWVIkkSnvSj4k9Czdpr9mW8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/890a41-be76-434d-87cf-ccc82f2d57e0/1/ZE1zGWVIkkSnvSj4k9Czdpr9mW8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZE1zGWVIkkSnvSj4k9Czdpr9mW8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 04:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:a1:7a:5e:93:30:6c:66:cb:69:5e:bc:5f:7c:d6:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=644d731965489244a7bd28f893d0b3769afd996f
Validity
Not Before: Oct 19 04:01:50 2025 GMT
Not After : Oct 20 04:01:50 2025 GMT
Subject: CN=753a9f47cc959b19e29b45e87fa8c3b34ef8707d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:2a:b1:ce:9b:02:89:23:c8:fa:9d:6a:4c:7e:
76:b8:7b:95:b9:58:37:bb:81:b1:13:e3:c7:91:99:
a3:18:dc:4f:63:cf:df:b2:2c:13:ec:6c:3c:7c:da:
9f:7d:5c:e5:55:a5:d0:11:d8:a6:fd:d0:f0:39:b0:
e9:64:83:e8:20:81:bb:5c:45:04:ff:f9:7e:ce:23:
f2:73:d6:7d:3a:df:43:50:f4:ef:a4:e1:9c:31:a1:
da:60:87:23:f5:74:0e:1c:b2:79:06:bc:b9:8e:8e:
af:7c:73:b9:1a:92:81:c8:b5:fb:a0:f2:94:1e:df:
f8:8f:7c:84:c0:ae:ad:8a:c4:d3:c2:9d:61:ed:7e:
50:7f:17:d2:90:3f:94:d8:52:02:37:98:1d:fc:f9:
6c:32:33:56:7c:40:9d:50:4a:84:d1:48:ee:21:51:
b1:20:16:46:e5:d7:ac:51:ec:11:ed:38:b6:ce:ba:
06:16:03:3d:e1:ec:e4:fc:69:e1:ba:e9:8c:29:3d:
d2:21:db:8e:40:ca:49:6c:00:3a:60:a3:ba:c4:84:
c5:6f:ee:d0:06:cc:2a:15:56:a6:9d:de:48:6f:28:
0b:3a:95:65:81:ba:7e:00:a4:51:6e:11:49:50:59:
f2:03:c3:f8:d5:8e:76:e6:14:c2:ac:be:2a:a0:a7:
37:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:3A:9F:47:CC:95:9B:19:E2:9B:45:E8:7F:A8:C3:B3:4E:F8:70:7D
X509v3 Authority Key Identifier:
keyid:64:4D:73:19:65:48:92:44:A7:BD:28:F8:93:D0:B3:76:9A:FD:99:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZE1zGWVIkkSnvSj4k9Czdpr9mW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/890a41-be76-434d-87cf-ccc82f2d57e0/1/ZE1zGWVIkkSnvSj4k9Czdpr9mW8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/890a41-be76-434d-87cf-ccc82f2d57e0/1/ZE1zGWVIkkSnvSj4k9Czdpr9mW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:08:5f:85:93:eb:a0:6f:4e:0b:d2:39:3a:12:c4:3e:6e:16:
1b:65:d5:e4:c7:f4:4f:3f:92:90:df:7d:69:03:c7:86:0b:90:
90:e2:34:bc:5e:d7:d3:00:51:33:91:07:d5:53:dc:59:ef:41:
73:bd:34:7f:b3:b7:ff:dd:e8:96:7c:42:eb:cc:90:38:f5:57:
38:a1:91:e1:44:4e:54:c2:8d:0e:02:a6:e7:09:b5:4e:f5:a7:
27:6d:1d:be:9a:4c:0c:7d:10:d5:28:25:4a:eb:cf:10:b1:07:
1a:32:4a:46:9e:fd:a5:2c:cb:38:0c:66:be:5b:a1:a5:13:04:
20:9f:df:ec:fa:83:f3:16:62:f2:a6:c6:42:6b:f4:89:86:88:
83:a5:db:e0:74:e4:dc:42:6f:0e:ce:3e:e1:1e:38:a6:28:7e:
ef:8e:7f:fd:e7:b6:c8:9e:b6:30:60:dd:2a:44:b4:31:59:e3:
f2:7d:40:fb:d4:18:7f:7d:05:ad:f4:c1:83:05:2d:7c:ff:19:
3d:3d:06:bb:9f:61:f3:38:49:d1:f2:9b:af:6d:45:fe:80:a4:
6b:dd:17:85:15:3b:f1:bf:3f:fc:82:90:3d:1b:3a:76:21:a0:
1e:8d:9f:ad:4e:cf:9a:81:49:95:f3:f8:47:41:a4:c2:c2:7e:
2a:77:a3:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:23 2025 by rpki-client