
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.mft
File: zlv1IB8YtAK45ii8d_IlL3aecPI.mft (raw, json)
Hash identifier: dPvf8RFeamr98fy6fLnseSiMbWoibpBvVpDdaNBLIrE=
Subject key identifier: 20:A4:3B:6D:84:3F:F1:7C:21:81:6A:7B:21:31:95:BA:17:2F:CD:EB
Authority key identifier: CE:5B:F5:20:1F:18:B4:02:B8:E6:28:BC:77:F2:25:2F:76:9E:70:F2
Certificate issuer: /CN=ce5bf5201f18b402b8e628bc77f2252f769e70f2
Certificate serial: 0199FC58DD54DC4CB0BACD4741D4EA45C116
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zlv1IB8YtAK45ii8d_IlL3aecPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.mft
Manifest number: 0333
Signing time: Sun 19 Oct 2025 12:01:46 +0000
Manifest this update: Sun 19 Oct 2025 12:01:46 +0000
Manifest next update: Mon 20 Oct 2025 12:01:46 +0000
Files and hashes: 1: k3iYLAwyPc2aObu9-B_F44ynmik.roa (hash: LrwFsWIjQZ+W2D90vgDv7dfPfE/Ui+QCFrdt8y4WIOo=)
2: uo2GXB4VHSmg2Ip5LPqoztARweE.roa (hash: B+nheQmzK7tIfpNsYNuajCXoKRHWvlQECSBdwwc2A0o=)
3: zlv1IB8YtAK45ii8d_IlL3aecPI.crl (hash: H+Voo96gQD6+huJkEI8r+GrkRX5FofY5P9ZnLguyi2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zlv1IB8YtAK45ii8d_IlL3aecPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:dd:54:dc:4c:b0:ba:cd:47:41:d4:ea:45:c1:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce5bf5201f18b402b8e628bc77f2252f769e70f2
Validity
Not Before: Oct 19 12:01:46 2025 GMT
Not After : Oct 20 12:01:46 2025 GMT
Subject: CN=20a43b6d843ff17c21816a7b213195ba172fcdeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3d:82:55:4a:de:3d:10:56:37:74:8a:98:78:
ee:8b:82:fe:96:61:a0:7b:91:5b:89:0d:27:e3:a1:
b9:21:67:43:2b:40:41:45:87:a6:f6:54:3a:11:0d:
fb:7d:d1:43:7d:31:c2:79:75:11:35:fb:a1:98:df:
b4:d3:0c:6b:6e:f4:40:6c:80:68:5e:8c:da:26:37:
03:7d:bf:da:b7:6b:b6:2f:2c:01:57:e1:07:6c:25:
6e:20:e3:84:86:bf:8a:d2:fa:46:da:ee:28:24:7c:
e5:77:5c:57:c9:51:3c:13:ab:ff:55:e4:33:8a:c7:
23:81:20:bb:a3:37:de:ad:59:55:f0:01:0e:6a:70:
e3:7e:a0:6f:3c:c5:81:34:90:2c:52:68:a3:1b:47:
a2:82:eb:df:8e:0c:b9:e5:e2:4a:28:88:27:66:40:
9e:5e:bf:43:03:42:1d:ea:e2:03:f5:14:d5:69:d3:
13:c9:e0:7b:18:4b:f7:66:b8:2e:e4:75:22:ab:5b:
ae:8b:59:6c:ba:6f:04:6d:78:30:cf:a2:58:17:b2:
ae:76:4a:8c:a2:f9:14:40:07:28:ff:dd:0a:b6:e0:
c3:22:7f:76:e8:98:31:fa:d5:1b:c4:f4:c8:7b:44:
a4:92:63:15:be:54:89:a6:b3:e0:e1:b3:9a:6d:5b:
ac:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:A4:3B:6D:84:3F:F1:7C:21:81:6A:7B:21:31:95:BA:17:2F:CD:EB
X509v3 Authority Key Identifier:
keyid:CE:5B:F5:20:1F:18:B4:02:B8:E6:28:BC:77:F2:25:2F:76:9E:70:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zlv1IB8YtAK45ii8d_IlL3aecPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:43:a6:05:b1:22:68:44:d5:e5:4d:1c:83:2d:12:c3:e2:4d:
f5:97:28:2f:94:ce:3c:a8:89:fd:88:39:ab:8f:ce:32:d2:f9:
92:fb:f9:85:12:fa:58:b2:80:e4:1d:33:cf:6d:3b:34:6d:51:
98:8d:52:14:67:15:72:b4:49:a3:6a:62:77:5b:0e:07:40:4f:
0f:7f:d0:ca:5e:9f:e3:86:d3:02:a9:f8:c5:39:28:02:4a:95:
df:05:b4:2c:04:c4:6d:27:a3:9d:fb:7b:3a:25:df:3e:d3:2b:
81:d2:4c:03:d5:59:e3:8e:1a:25:ec:8d:7c:d9:a1:08:75:c3:
b1:49:47:40:c7:c4:de:b1:ff:6d:f3:1d:3a:84:2a:ce:72:5d:
43:0d:07:f4:dd:05:d7:d5:58:c2:b3:b6:71:b3:64:5b:e6:49:
a7:c4:50:1e:7f:50:db:6c:b9:2a:25:57:58:78:67:af:bf:7b:
57:a3:10:75:8b:c2:7e:99:c3:6c:cc:c0:52:f3:72:30:8b:52:
9a:8d:b8:e1:72:c5:17:9a:89:49:5d:0f:51:d0:3b:e5:ad:9c:
23:57:9a:08:df:3f:61:8f:0a:ca:3d:c7:64:4e:b8:1c:a9:7d:
38:85:ec:cc:0f:ce:86:23:93:a2:4a:17:5c:7c:ff:c2:c6:46:
01:49:ab:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:18:11 2025 by rpki-client