Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8b5f1e-4190-48b6-bdc5-7d05f9888e98/1/ZhPZyFZESnCW46hQjK4wf968DNQ.mft
File: ZhPZyFZESnCW46hQjK4wf968DNQ.mft (raw, json)
Hash identifier: UVuVj8/wpWkNyvjHMkXVjucWJDGBMF1aU2l9C45kQVc=
Subject key identifier: FB:D5:CD:4F:95:F2:59:8A:30:61:82:60:CF:18:CD:E2:81:CD:C8:48
Authority key identifier: 66:13:D9:C8:56:44:4A:70:96:E3:A8:50:8C:AE:30:7F:DE:BC:0C:D4
Certificate issuer: /CN=6613d9c856444a7096e3a8508cae307fdebc0cd4
Certificate serial: 0199FBEB447B630277A72384806CD1F36ACD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZhPZyFZESnCW46hQjK4wf968DNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8b5f1e-4190-48b6-bdc5-7d05f9888e98/1/ZhPZyFZESnCW46hQjK4wf968DNQ.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 10:02:03 +0000
Manifest this update: Sun 19 Oct 2025 10:02:03 +0000
Manifest next update: Mon 20 Oct 2025 10:02:03 +0000
Files and hashes: 1: 4D_rZ45BYofG_PKX7NdD5oQoUdM.roa (hash: 8wujCBX6hI1Ut+YVGttUi2MlgiyCoDf/nLWfLC5wQhA=)
2: ZhPZyFZESnCW46hQjK4wf968DNQ.crl (hash: XG+1ZAtWy4BRitjwNozd9GBn267SYPmMDvXy1Ze9FRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8b5f1e-4190-48b6-bdc5-7d05f9888e98/1/ZhPZyFZESnCW46hQjK4wf968DNQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8b5f1e-4190-48b6-bdc5-7d05f9888e98/1/ZhPZyFZESnCW46hQjK4wf968DNQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZhPZyFZESnCW46hQjK4wf968DNQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:44:7b:63:02:77:a7:23:84:80:6c:d1:f3:6a:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6613d9c856444a7096e3a8508cae307fdebc0cd4
Validity
Not Before: Oct 19 10:02:03 2025 GMT
Not After : Oct 20 10:02:03 2025 GMT
Subject: CN=fbd5cd4f95f2598a30618260cf18cde281cdc848
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:4f:4d:83:92:b4:be:7c:89:d8:0e:17:fc:b9:
e6:b4:2d:90:2f:65:1a:33:d6:65:96:dd:b1:b6:c2:
c1:1b:0e:da:16:c4:91:51:98:17:5e:6b:1f:7b:8a:
cf:df:91:06:b1:08:7e:a0:4a:8f:d9:85:d3:fc:6b:
46:5c:6e:77:86:41:bd:05:6b:d8:e6:5c:33:ba:19:
1f:40:b3:be:18:48:67:52:9e:60:1d:ce:d2:36:0a:
05:cb:34:1c:b1:2f:65:4f:42:63:b6:10:c8:6c:bc:
62:a4:6a:e3:a1:e3:b3:65:05:e2:68:52:08:83:0e:
0c:4b:58:61:c5:8f:00:9f:4a:18:bd:d0:b7:e6:90:
9a:9e:32:cc:8d:ff:fd:ee:05:63:2d:a2:28:61:a3:
22:14:c3:38:ba:48:12:8a:4a:8c:ef:4f:36:9d:bd:
23:5a:6a:f5:30:4c:02:25:f8:02:8b:9a:74:06:2d:
ef:ed:36:70:b2:9c:92:92:dc:b3:56:a5:cd:b4:ba:
27:03:ca:21:40:3d:0b:f7:a4:b8:e8:50:65:fd:e8:
f9:9d:ea:08:81:13:b8:83:e2:a9:58:a9:6c:4a:19:
6e:b8:4a:30:44:44:a2:d4:ae:28:a6:21:70:f5:52:
21:63:af:97:b8:0c:01:61:8d:d0:25:47:53:c5:76:
33:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:D5:CD:4F:95:F2:59:8A:30:61:82:60:CF:18:CD:E2:81:CD:C8:48
X509v3 Authority Key Identifier:
keyid:66:13:D9:C8:56:44:4A:70:96:E3:A8:50:8C:AE:30:7F:DE:BC:0C:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZhPZyFZESnCW46hQjK4wf968DNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8b5f1e-4190-48b6-bdc5-7d05f9888e98/1/ZhPZyFZESnCW46hQjK4wf968DNQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8b5f1e-4190-48b6-bdc5-7d05f9888e98/1/ZhPZyFZESnCW46hQjK4wf968DNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:62:06:51:e0:53:67:11:a7:90:b5:42:1f:71:7e:bf:0d:84:
e5:55:3a:c1:9e:98:a0:2e:69:7e:8e:fb:50:c6:a6:35:50:a7:
f6:74:78:2d:b2:11:16:dc:3f:5e:de:53:97:7f:6c:37:18:02:
84:b0:bc:0b:ad:dc:6b:40:a7:37:c0:df:7a:b6:dc:c8:02:ae:
fc:32:2d:79:20:3f:56:0b:55:6b:a9:06:19:e7:cc:3a:ce:ed:
0f:23:e3:3c:c3:0a:47:46:e5:79:49:40:a0:92:d4:0d:33:72:
69:ba:9d:85:ca:91:52:e6:8b:58:cf:ab:af:ab:ae:e0:0a:93:
b0:f9:e1:a7:9c:83:a7:ee:42:55:d0:d7:19:15:c8:d7:3d:c6:
f0:51:8a:b3:e4:88:ae:85:14:c1:7f:15:40:08:a7:c0:08:aa:
77:59:8c:90:82:dc:9e:67:9d:e0:03:34:da:fd:38:2e:16:24:
ea:bc:5a:d1:0e:ba:4b:03:35:aa:4b:7a:89:39:cc:52:f1:17:
71:5e:68:8f:d5:03:3e:58:9b:3a:e5:ad:02:eb:ee:6c:e5:68:
57:1d:3d:8c:32:cd:71:c5:e2:dc:b7:f1:0d:d4:fe:d2:80:24:
7b:ff:0e:57:d7:8e:bd:90:49:d5:bc:1d:8d:76:22:a2:fc:cb:
22:f3:95:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:08:03 2025 by rpki-client