Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7a1564-3466-4732-83bd-b90d974e5fb5/1/ZEyh-QUY1CU_MllH1_Mtt4chZHw.mft
File: ZEyh-QUY1CU_MllH1_Mtt4chZHw.mft (raw, json)
Hash identifier: j6JbuImzNNZqMuhaIqU6W0z0wkwUWG5yhWK/trmMnCI=
Subject key identifier: A8:07:A7:8D:A9:67:00:23:75:A6:84:A4:B7:CD:89:BB:2C:C4:D7:35
Authority key identifier: 64:4C:A1:F9:05:18:D4:25:3F:32:59:47:D7:F3:2D:B7:87:21:64:7C
Certificate issuer: /CN=644ca1f90518d4253f325947d7f32db78721647c
Certificate serial: 0199FB45ACC343016BD59FE43D7F69DDD4CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZEyh-QUY1CU_MllH1_Mtt4chZHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1564-3466-4732-83bd-b90d974e5fb5/1/ZEyh-QUY1CU_MllH1_Mtt4chZHw.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 07:01:11 +0000
Manifest this update: Sun 19 Oct 2025 07:01:11 +0000
Manifest next update: Mon 20 Oct 2025 07:01:11 +0000
Files and hashes: 1: LPoSWmH9lMAQGTklM5DJIT-hXL8.roa (hash: TOrMsZzQDuOs5c3iwWnYNm18JhvhdddP0HuUPukBsu0=)
2: OvOurKu8T2ws1g_rbUDf-nmHO_k.roa (hash: il6P6mcaD6j7wpNIC2MuV0ZyXgmG33aNWz7qa9/JNHg=)
3: ZEyh-QUY1CU_MllH1_Mtt4chZHw.crl (hash: 2WAbduspOrCZBr2f9RooJbqK1pOoUgZd1ZXm+0VCZyQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1564-3466-4732-83bd-b90d974e5fb5/1/ZEyh-QUY1CU_MllH1_Mtt4chZHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1564-3466-4732-83bd-b90d974e5fb5/1/ZEyh-QUY1CU_MllH1_Mtt4chZHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZEyh-QUY1CU_MllH1_Mtt4chZHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:ac:c3:43:01:6b:d5:9f:e4:3d:7f:69:dd:d4:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=644ca1f90518d4253f325947d7f32db78721647c
Validity
Not Before: Oct 19 07:01:11 2025 GMT
Not After : Oct 20 07:01:11 2025 GMT
Subject: CN=a807a78da967002375a684a4b7cd89bb2cc4d735
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:cd:54:09:fe:ee:cc:a6:ed:ae:75:ba:d8:d5:
9d:75:9e:27:f0:42:9e:d5:17:6c:54:10:57:e2:6e:
43:3f:a9:c2:ac:a3:3b:c4:49:50:81:89:e3:35:a6:
b4:03:0c:f4:67:74:55:d2:d1:21:6a:7e:c6:99:fa:
9a:ee:0a:03:68:60:b4:dd:04:ee:a5:73:ed:ec:d1:
b4:1f:58:e6:a4:2e:10:10:e1:4c:7b:fd:03:ac:03:
3a:01:b6:ea:08:bd:d1:c5:3a:38:63:68:e9:2c:d1:
54:e1:be:c2:b7:61:41:f6:fd:8e:e4:ee:d0:79:8c:
3e:08:42:e3:96:0f:dd:be:a0:98:03:29:15:7a:f2:
9e:52:d2:b0:5b:27:e6:64:c9:6d:4d:67:be:4a:13:
78:16:ae:f6:cd:a4:1b:ef:d3:24:67:84:0a:cb:b2:
1e:e1:f4:0c:99:56:60:41:52:16:7a:40:70:70:d3:
c9:1c:98:af:33:c8:96:b7:71:91:99:c4:42:85:87:
d9:54:c9:5f:b0:7d:ae:6a:04:06:b4:c8:ba:3c:b1:
21:6e:70:29:09:e6:d5:06:9a:c4:a8:b7:a0:6f:80:
48:3f:58:1f:29:f1:ee:71:63:32:8d:cf:c9:cc:92:
7a:31:0a:06:c2:59:78:4c:70:d8:48:67:51:7c:8f:
0b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:07:A7:8D:A9:67:00:23:75:A6:84:A4:B7:CD:89:BB:2C:C4:D7:35
X509v3 Authority Key Identifier:
keyid:64:4C:A1:F9:05:18:D4:25:3F:32:59:47:D7:F3:2D:B7:87:21:64:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZEyh-QUY1CU_MllH1_Mtt4chZHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1564-3466-4732-83bd-b90d974e5fb5/1/ZEyh-QUY1CU_MllH1_Mtt4chZHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1564-3466-4732-83bd-b90d974e5fb5/1/ZEyh-QUY1CU_MllH1_Mtt4chZHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:08:7d:7e:24:db:62:19:0a:39:d7:3e:94:9d:82:57:d1:86:
3e:09:b8:81:b4:55:ce:c0:56:2e:2f:62:66:25:65:fb:47:17:
44:9c:aa:9d:fc:ab:f0:6b:6b:63:5f:5a:bf:be:4b:fd:ed:78:
75:58:d5:2f:87:33:1f:ab:41:de:00:1c:d0:ae:24:32:94:db:
3c:bb:ab:2c:aa:ac:24:dc:5a:f7:eb:72:c8:45:63:bb:f0:7d:
11:27:df:78:26:5c:7b:3d:99:5b:bb:29:38:d8:83:3b:12:88:
02:d2:ae:82:a1:7b:91:44:55:85:38:7d:69:f6:76:9b:8e:1f:
60:61:03:92:af:ab:b9:b4:f3:12:0c:fc:6b:53:1e:d6:1b:fd:
6c:a7:84:82:4f:9a:6c:1c:37:3f:d1:a6:18:e6:ca:0d:fa:bd:
a4:88:3b:93:40:37:29:c7:fc:bb:ec:ed:aa:d1:a9:b8:d0:86:
e2:19:79:72:3d:9d:eb:97:b6:a0:8f:46:67:a4:b1:59:32:54:
03:07:c1:71:f5:65:38:4f:6b:c4:6c:d0:c0:5c:a7:28:91:89:
14:bb:0c:43:1e:05:86:02:3a:eb:09:51:e8:e4:f4:ea:9c:d2:
2f:22:c6:bd:57:4c:d9:f4:51:f0:af:71:85:c3:9b:6b:a6:60:
f7:2b:d1:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:33:14 2025 by rpki-client