Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.mft
File: zfaOwSf7MsZ5IYr8duG26qWVIbs.mft (raw, json)
Hash identifier: QKyNuOjND3ef093GL8fBuC3PL4MI41yVFo4yFMppQlc=
Subject key identifier: 08:35:65:69:4B:27:A1:C2:2A:50:4E:A7:64:97:E1:C0:3D:01:FE:F7
Authority key identifier: CD:F6:8E:C1:27:FB:32:C6:79:21:8A:FC:76:E1:B6:EA:A5:95:21:BB
Certificate issuer: /CN=cdf68ec127fb32c679218afc76e1b6eaa59521bb
Certificate serial: 0199FBEB74E38D57906CBDC41C91AA9A582F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zfaOwSf7MsZ5IYr8duG26qWVIbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 10:02:16 +0000
Manifest this update: Sun 19 Oct 2025 10:02:16 +0000
Manifest next update: Mon 20 Oct 2025 10:02:16 +0000
Files and hashes: 1: J0wD1VHXSK8IW6oG7-DG_smgYpA.roa (hash: CViIeXhdVqcAItp5448I2Btx/FMsFejPzyYEyeUsBBw=)
2: zfaOwSf7MsZ5IYr8duG26qWVIbs.crl (hash: BER4MzHNIXg+sYK8IBW0wl/TMpqk1yOdg20vUbtZ5ww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/zfaOwSf7MsZ5IYr8duG26qWVIbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:74:e3:8d:57:90:6c:bd:c4:1c:91:aa:9a:58:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdf68ec127fb32c679218afc76e1b6eaa59521bb
Validity
Not Before: Oct 19 10:02:16 2025 GMT
Not After : Oct 20 10:02:16 2025 GMT
Subject: CN=083565694b27a1c22a504ea76497e1c03d01fef7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4d:36:7e:f9:3c:9a:78:f8:0e:69:01:2c:d0:
73:92:c3:93:2c:5e:87:ac:c1:5f:82:73:71:64:84:
9f:15:86:7d:34:3d:48:60:aa:da:7b:41:23:06:95:
45:81:37:6c:99:b7:61:90:eb:d3:92:1c:40:9c:39:
d4:1e:7c:a5:b2:b1:c3:e0:ea:8f:3f:3b:e8:af:3c:
a8:b0:68:71:31:1e:e2:db:dd:91:a1:51:e2:02:86:
1e:97:98:6d:8e:5b:95:51:5a:78:ac:c0:cd:6c:18:
77:98:6f:77:4d:a4:bf:44:cd:fc:23:4a:8e:05:88:
80:da:2a:90:71:39:22:46:97:8c:80:ac:fb:6c:2d:
48:67:9c:fb:26:89:3d:f4:15:7f:83:f0:14:b5:93:
b9:28:bc:08:4c:68:88:77:49:10:aa:1b:68:9e:48:
91:09:f4:05:6b:0b:7c:c8:1b:9b:d0:10:c3:fc:7e:
57:cf:4b:ee:0f:21:b8:7c:15:2d:ac:3f:40:a3:cb:
4f:70:22:07:42:09:4e:3a:3c:15:4e:3c:45:04:75:
b1:2a:95:bf:30:d6:92:48:d1:28:0f:d3:2e:e1:1a:
7c:5f:3e:1f:37:2c:2e:f4:00:13:c6:06:0c:ed:ba:
b7:b0:b5:61:50:11:e0:47:51:8f:fa:b2:22:2b:0b:
c6:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:35:65:69:4B:27:A1:C2:2A:50:4E:A7:64:97:E1:C0:3D:01:FE:F7
X509v3 Authority Key Identifier:
keyid:CD:F6:8E:C1:27:FB:32:C6:79:21:8A:FC:76:E1:B6:EA:A5:95:21:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zfaOwSf7MsZ5IYr8duG26qWVIbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:87:d1:42:d4:2f:99:07:28:47:6d:1b:cf:e4:38:46:c4:c5:
77:09:ad:31:51:a8:7d:42:f5:1d:18:5f:b9:15:76:8e:57:6b:
88:a8:55:12:24:6a:a1:6e:ac:6f:c5:75:47:ae:71:09:b6:70:
2b:97:bb:99:01:f2:86:13:f5:3d:2b:3a:41:35:cc:9f:ec:db:
6c:c2:9f:4d:bc:ad:71:36:f3:3a:53:c1:99:7a:dc:31:55:e3:
2f:59:a9:5a:cc:dc:ac:36:d8:62:43:a6:8c:b4:b5:fa:ba:ea:
bc:13:f1:74:51:3b:85:8a:73:14:20:a2:7c:0b:15:c7:70:1b:
78:78:b1:e2:16:1e:9e:31:1d:7c:bf:60:d6:c7:c5:71:b6:bc:
07:53:93:3c:ff:9f:a3:4c:f4:54:1d:ce:61:52:b9:3b:bb:14:
eb:06:0d:57:07:81:03:63:67:58:bd:7e:12:06:d4:5f:6c:32:
27:18:a3:b0:c7:23:f3:1e:19:19:05:c5:c9:81:f1:40:6d:61:
e9:af:32:a7:59:a4:67:bc:ff:25:1d:74:e0:b2:de:cb:fb:07:
d9:85:d4:32:6e:e6:70:a9:ee:a6:da:13:ed:b3:0c:de:99:f4:
2d:33:c7:a8:be:e5:15:70:72:8c:c5:a0:be:d5:00:a4:8a:86:
76:0f:2d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:49:18 2025 by rpki-client