Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/164d8d-41ac-4522-bb25-898634942285/1/ZatIWvkj0bRsWjIfx6P4VsBPtvw.mft
File: ZatIWvkj0bRsWjIfx6P4VsBPtvw.mft (raw, json)
Hash identifier: 0atBIz4H9cfysqsAcD3ZBKGLH8LAVMJtDAeeHHrUk2I=
Subject key identifier: DB:4A:BF:DD:22:09:97:8A:BF:1C:E7:90:EE:70:23:6E:EC:C4:2A:95
Authority key identifier: 65:AB:48:5A:F9:23:D1:B4:6C:5A:32:1F:C7:A3:F8:56:C0:4F:B6:FC
Certificate issuer: /CN=65ab485af923d1b46c5a321fc7a3f856c04fb6fc
Certificate serial: 0199FCC612DA2A0FA89A2D1769DBF9FB8154
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZatIWvkj0bRsWjIfx6P4VsBPtvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/164d8d-41ac-4522-bb25-898634942285/1/ZatIWvkj0bRsWjIfx6P4VsBPtvw.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 14:01:03 +0000
Manifest this update: Sun 19 Oct 2025 14:01:03 +0000
Manifest next update: Mon 20 Oct 2025 14:01:03 +0000
Files and hashes: 1: KWbEbWMWx8GsR8Asb1Hi7iVj3A8.roa (hash: w7QiyqZy99cacAStF09i7GMZP3QKH24tEZwntPEoeMs=)
2: ZatIWvkj0bRsWjIfx6P4VsBPtvw.crl (hash: +XM6QcI4N2fj9tS/izzyog9cSCzNF/HWFE0AoQfG7S8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/164d8d-41ac-4522-bb25-898634942285/1/ZatIWvkj0bRsWjIfx6P4VsBPtvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/164d8d-41ac-4522-bb25-898634942285/1/ZatIWvkj0bRsWjIfx6P4VsBPtvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZatIWvkj0bRsWjIfx6P4VsBPtvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:12:da:2a:0f:a8:9a:2d:17:69:db:f9:fb:81:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65ab485af923d1b46c5a321fc7a3f856c04fb6fc
Validity
Not Before: Oct 19 14:01:03 2025 GMT
Not After : Oct 20 14:01:03 2025 GMT
Subject: CN=db4abfdd2209978abf1ce790ee70236eecc42a95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:2a:5b:c4:c9:0f:73:da:25:ca:c8:21:a5:f5:
f2:24:ca:e5:02:c7:87:aa:b3:22:5d:00:32:ea:94:
41:fa:d9:af:f3:c2:36:ba:16:ad:d3:06:83:66:56:
4b:dc:bd:7e:c5:e3:b0:1a:7d:08:b6:48:c8:a1:e0:
60:25:51:9d:8e:b9:3b:3d:cf:43:a8:ee:0c:8f:bc:
37:92:ff:eb:dc:08:29:3e:ec:24:47:62:61:af:14:
42:67:bb:1e:cc:20:62:42:07:eb:b0:9e:ce:14:e6:
17:27:0a:97:fa:93:3d:d9:51:4b:95:9a:12:98:9c:
fc:a1:37:e7:fe:c6:7b:57:83:d4:56:55:72:1a:14:
04:bc:36:23:ea:b3:9c:24:32:a6:c8:f3:b6:1b:81:
fd:0f:92:bb:9e:8a:86:60:e1:b4:1c:ed:e5:bf:f5:
b7:f0:8f:a8:72:fc:58:a4:ee:31:fb:7a:2b:ff:33:
17:02:99:df:b8:a1:a6:ee:a3:17:d7:bd:ed:63:02:
af:97:c7:89:51:e8:97:a2:0d:e7:d2:d1:53:52:88:
39:35:38:48:37:43:b6:60:df:14:c7:5c:06:b1:54:
1a:49:3b:5e:02:13:31:3a:b3:26:68:b9:84:fa:cc:
9d:53:cd:d3:30:c9:d2:f1:a7:87:c6:81:3a:0f:ad:
54:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:4A:BF:DD:22:09:97:8A:BF:1C:E7:90:EE:70:23:6E:EC:C4:2A:95
X509v3 Authority Key Identifier:
keyid:65:AB:48:5A:F9:23:D1:B4:6C:5A:32:1F:C7:A3:F8:56:C0:4F:B6:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZatIWvkj0bRsWjIfx6P4VsBPtvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/164d8d-41ac-4522-bb25-898634942285/1/ZatIWvkj0bRsWjIfx6P4VsBPtvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/164d8d-41ac-4522-bb25-898634942285/1/ZatIWvkj0bRsWjIfx6P4VsBPtvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:85:50:fe:ca:1f:fb:ba:70:ea:82:63:96:68:0b:2e:fd:de:
c4:e4:93:26:75:15:60:4a:39:02:c0:6c:aa:9c:21:b2:0f:74:
e1:e1:a2:f9:a7:59:9d:c6:4e:73:a0:a0:0d:68:12:5a:60:f0:
31:f7:85:33:da:31:66:df:32:89:aa:71:67:68:82:34:39:ba:
0b:62:25:06:30:c4:12:76:33:f3:30:7f:75:b9:6e:96:ad:7d:
cd:31:16:ef:0e:c6:da:df:d9:81:24:6a:fc:aa:01:8f:8f:a9:
72:59:d2:c2:d6:f2:b9:ac:48:6a:f5:d3:21:31:ae:dd:17:52:
60:58:59:73:19:49:01:c5:b9:66:d7:4d:4a:4b:f9:1b:ab:a1:
37:f2:97:c5:81:46:0a:f8:0a:b7:cd:f8:f1:0d:1b:98:06:9f:
2e:59:8d:00:e5:2d:00:8a:43:bd:34:f5:fb:a7:78:35:6f:c5:
a5:4e:5d:c3:94:b1:fb:29:19:c5:20:cc:b0:3b:92:b8:06:4a:
1c:b4:3a:64:1a:b1:e7:f6:c4:55:fa:e1:92:50:a6:32:f5:be:
ea:4b:16:f5:95:5d:64:b6:3f:69:3f:7c:90:bc:e0:24:4f:83:
54:8b:b9:87:38:bc:84:9d:61:fd:b7:35:26:a4:62:70:c5:5b:
aa:d2:fc:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:42:10 2025 by rpki-client