Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/3c2efb-2292-4c6a-914b-55eb820fd596/1/Zp9ci5tjrl4oeG66EKH2Vypg4_w.mft
File: Zp9ci5tjrl4oeG66EKH2Vypg4_w.mft (raw, json)
Hash identifier: s34k5U/GQ6XcXG0GXUE6+rwUjiK7fBL/xodq8fOe+Cs=
Subject key identifier: 37:B7:96:8B:DB:60:E4:0F:36:C0:2E:C8:97:63:D4:63:3E:2E:39:6C
Authority key identifier: 66:9F:5C:8B:9B:63:AE:5E:28:78:6E:BA:10:A1:F6:57:2A:60:E3:FC
Certificate issuer: /CN=669f5c8b9b63ae5e28786eba10a1f6572a60e3fc
Certificate serial: 0199FC58AE4376784AEF17F572C57C244A3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zp9ci5tjrl4oeG66EKH2Vypg4_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/3c2efb-2292-4c6a-914b-55eb820fd596/1/Zp9ci5tjrl4oeG66EKH2Vypg4_w.mft
Manifest number: 16B6
Signing time: Sun 19 Oct 2025 12:01:34 +0000
Manifest this update: Sun 19 Oct 2025 12:01:34 +0000
Manifest next update: Mon 20 Oct 2025 12:01:34 +0000
Files and hashes: 1: 4cueVYGn7FG0ZEgg6Tbl8VUqwQ0.roa (hash: nftpb28hHTEVRFrgXZ0NAPskqh1IzDTL1Eib3OJFbuI=)
2: Zp9ci5tjrl4oeG66EKH2Vypg4_w.crl (hash: 03Qwy5SDgFScVtZxPBoYGqJRzBV4iOwCUX0jJg5ulP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/3c2efb-2292-4c6a-914b-55eb820fd596/1/Zp9ci5tjrl4oeG66EKH2Vypg4_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/3c2efb-2292-4c6a-914b-55eb820fd596/1/Zp9ci5tjrl4oeG66EKH2Vypg4_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zp9ci5tjrl4oeG66EKH2Vypg4_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:ae:43:76:78:4a:ef:17:f5:72:c5:7c:24:4a:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=669f5c8b9b63ae5e28786eba10a1f6572a60e3fc
Validity
Not Before: Oct 19 12:01:34 2025 GMT
Not After : Oct 20 12:01:34 2025 GMT
Subject: CN=37b7968bdb60e40f36c02ec89763d4633e2e396c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:fc:39:e5:c0:69:f7:6c:b9:16:f1:66:39:0b:
a3:a8:50:7a:af:b7:f5:b5:e9:16:2f:b0:41:cb:09:
e3:eb:bf:26:8e:ef:16:c3:fc:fd:a4:9c:45:de:7e:
23:74:88:45:d4:1c:64:d1:5c:30:cd:9d:a2:db:87:
d5:1b:4f:0b:5c:bb:be:aa:ec:52:aa:8b:d7:30:5f:
df:80:1c:e4:7a:b4:00:04:41:d0:d9:34:a7:e1:62:
22:62:dc:f6:8c:eb:9b:d1:58:f3:63:a1:1d:10:9f:
63:36:df:8c:21:09:62:4a:3f:7e:4b:e3:07:2c:db:
42:16:39:86:32:a8:70:f9:05:d5:0c:e1:9f:e8:38:
10:61:f3:c5:95:c6:d9:13:0b:8b:11:b6:5b:f4:c2:
ae:7a:a9:54:bd:22:66:b9:2d:3d:8c:d9:ca:d1:82:
be:6a:5f:f2:eb:73:97:db:ba:cb:95:26:90:8d:be:
66:cd:20:d2:cc:51:91:ac:56:88:ea:6e:14:ba:f0:
6f:0b:e0:c5:74:a3:b6:d0:39:3a:fd:82:48:e9:27:
39:42:15:06:68:18:36:d8:e1:e8:ef:cf:58:9d:9d:
0b:af:82:32:7b:7a:bf:f3:2d:75:d5:9a:40:90:53:
7a:99:e9:4f:19:fb:43:d9:aa:65:25:0c:58:47:f4:
bf:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:B7:96:8B:DB:60:E4:0F:36:C0:2E:C8:97:63:D4:63:3E:2E:39:6C
X509v3 Authority Key Identifier:
keyid:66:9F:5C:8B:9B:63:AE:5E:28:78:6E:BA:10:A1:F6:57:2A:60:E3:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zp9ci5tjrl4oeG66EKH2Vypg4_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/3c2efb-2292-4c6a-914b-55eb820fd596/1/Zp9ci5tjrl4oeG66EKH2Vypg4_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/3c2efb-2292-4c6a-914b-55eb820fd596/1/Zp9ci5tjrl4oeG66EKH2Vypg4_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:f6:99:bf:48:14:2e:d5:35:28:66:44:87:ba:f9:7e:ca:0b:
ae:51:ca:a6:9b:db:15:56:e4:f6:f4:b3:ae:b7:2d:97:40:33:
b1:de:c2:13:8a:0e:61:3b:88:02:fa:9f:68:a2:b7:8e:cd:ee:
99:e0:f2:b5:71:e0:de:6a:a0:bb:63:71:f3:87:fe:d6:e4:42:
7b:75:91:c1:24:b3:7a:f3:df:2d:46:0a:cc:f5:8a:ac:7b:3e:
7b:21:82:64:80:7a:27:59:48:4f:fb:60:84:d1:2c:07:b9:a0:
de:5c:e8:aa:97:93:62:44:cb:4f:0a:e9:8f:e7:38:68:83:e2:
14:36:8c:cf:0d:fd:26:91:ef:97:50:e1:0b:97:a8:16:40:a9:
b0:2d:dc:9d:96:35:db:bd:97:b6:fd:e7:6d:90:b5:98:5d:ca:
f2:85:10:d4:fb:2c:65:98:71:eb:57:9d:a7:27:5c:ac:9e:58:
f8:72:3d:e8:a4:1d:b4:dc:a6:cd:22:0a:65:23:a5:4a:a3:bd:
2c:9b:85:db:bc:98:b6:41:c9:ad:c6:e7:3e:10:a0:5a:68:fc:
f2:42:6f:ce:79:8c:b4:3e:3e:c6:6c:be:65:a3:d4:cf:3d:4f:
3f:c8:7b:c2:23:5d:39:43:bf:d7:19:9a:7e:f6:91:43:ee:06:
24:cf:a5:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:44:53 2025 by rpki-client