Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/e66f01-1d9d-4513-956a-f96bfb04e645/1/Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.mft
File: Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.mft (raw, json)
Hash identifier: RdB3MJQymQcN/BI8ayx/wkaB++YMCD4S1RhWuwpM9Ck=
Subject key identifier: 26:3F:E7:A8:97:4C:DF:BD:5F:37:28:EB:62:00:51:C5:76:95:54:2E
Authority key identifier: 65:CD:78:03:F4:1F:E4:99:E8:00:66:4E:0A:AC:AD:EE:19:B6:6D:9D
Certificate issuer: /CN=65cd7803f41fe499e800664e0aacadee19b66d9d
Certificate serial: 0199FBEB746C51F7F5A9D0CD25B727B6109B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/e66f01-1d9d-4513-956a-f96bfb04e645/1/Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 10:02:15 +0000
Manifest this update: Sun 19 Oct 2025 10:02:15 +0000
Manifest next update: Mon 20 Oct 2025 10:02:15 +0000
Files and hashes: 1: OYSQ0B4bWIaFBDGeUbIro8GjNIM.roa (hash: ArDmycoBPumVopAcq7qMWyEpeGKW74OE/HKNZi11EfI=)
2: Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.crl (hash: nTV2jG6rxMoi3Tjz6MwErRIkKM6hmx2IOkAlvJYhH84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/e66f01-1d9d-4513-956a-f96bfb04e645/1/Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/e66f01-1d9d-4513-956a-f96bfb04e645/1/Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:74:6c:51:f7:f5:a9:d0:cd:25:b7:27:b6:10:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65cd7803f41fe499e800664e0aacadee19b66d9d
Validity
Not Before: Oct 19 10:02:15 2025 GMT
Not After : Oct 20 10:02:15 2025 GMT
Subject: CN=263fe7a8974cdfbd5f3728eb620051c57695542e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:e5:5a:5e:20:98:b6:ba:58:66:aa:d4:69:f7:
50:c8:f6:02:ce:4f:fb:f4:0f:7d:ce:bf:07:5a:56:
b1:96:f0:34:bc:07:da:b0:2e:b7:53:40:ac:e2:5a:
b2:5e:69:f1:3d:c1:0c:72:4e:4f:da:db:b7:2b:cf:
98:42:80:a8:de:3b:61:67:48:fa:70:a5:32:8b:e4:
29:73:d6:40:7f:0c:43:dc:0d:a8:f1:1c:14:2a:e2:
75:48:ce:48:4d:9c:52:32:a6:e6:f7:90:e6:c6:db:
54:96:75:8f:67:b7:94:6a:db:b4:05:bc:d7:14:cf:
b5:08:a5:01:7b:31:0d:db:76:fe:6d:0b:f3:37:8b:
e6:4a:2c:c9:85:ee:c5:0c:49:60:45:75:c0:78:fb:
f9:27:18:7f:c7:76:9e:df:45:11:0f:49:13:0e:bb:
0b:c5:cf:e2:17:5d:68:47:fb:eb:d0:b4:a1:11:0d:
59:f5:00:fb:2d:28:d1:1b:19:22:c8:ac:ff:d1:9c:
87:da:03:11:4f:ab:e6:bd:a2:0b:90:40:82:05:6d:
44:d4:b7:4c:09:ca:27:99:19:38:ce:89:9f:66:49:
17:e1:11:c2:00:c1:a0:fb:f8:fb:6e:57:91:46:9b:
c8:3b:43:aa:c2:f9:c1:b3:3f:7d:b4:6a:ee:8f:fa:
a2:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:3F:E7:A8:97:4C:DF:BD:5F:37:28:EB:62:00:51:C5:76:95:54:2E
X509v3 Authority Key Identifier:
keyid:65:CD:78:03:F4:1F:E4:99:E8:00:66:4E:0A:AC:AD:EE:19:B6:6D:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e66f01-1d9d-4513-956a-f96bfb04e645/1/Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e66f01-1d9d-4513-956a-f96bfb04e645/1/Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:a9:ae:34:07:2d:d7:66:e9:a5:76:cb:7d:6a:21:9c:c9:e3:
bb:70:0f:94:1e:87:90:af:b8:0d:3a:ee:ff:45:b3:57:ee:b1:
d3:41:3e:6b:d8:12:ac:94:97:79:2b:51:c4:7d:ec:c1:34:2c:
9a:fe:18:ca:fb:2a:63:d4:45:2a:cd:d5:ad:30:cc:dd:fd:b0:
34:12:cf:1b:bb:ad:79:f2:1c:93:dc:47:d0:63:23:57:f4:3e:
21:89:b0:12:4c:f9:66:27:7b:32:d1:7d:25:77:46:19:97:df:
01:aa:02:b1:9e:29:f9:fb:44:11:80:26:46:4d:af:91:83:af:
d7:4b:ed:e1:28:55:2e:7d:05:13:7e:de:d9:8c:29:0b:62:c1:
d7:e6:4e:d4:59:c1:6f:ee:df:70:99:c6:e6:93:11:5f:f8:6f:
ea:bd:d9:52:bb:32:19:ec:15:f6:eb:e2:6b:b3:ca:59:bb:f2:
ba:14:13:d3:46:06:8d:c9:b0:11:d4:92:a9:0b:3d:f9:77:20:
bf:7a:c5:8a:e9:b9:2e:b5:87:53:63:ce:e5:40:2f:58:03:d9:
00:f0:49:69:08:1a:ca:e3:45:64:22:27:55:ee:e9:28:a0:34:
19:87:28:94:ae:18:2c:a5:0a:37:59:40:8b:9b:d6:b0:b3:df:
2d:d1:8e:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:30 2025 by rpki-client