Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/zo6b4kjHQbpqJqyM_iwrt8LXo7E.mft
File: zo6b4kjHQbpqJqyM_iwrt8LXo7E.mft (raw, json)
Hash identifier: 3GuOxsNhWCObk73PdjtiQMM/NzpPsfNeerymTgBi7Jk=
Subject key identifier: 3F:83:35:C2:18:3D:24:FE:40:91:A7:4D:05:7E:F3:2B:EE:69:B3:26
Authority key identifier: CE:8E:9B:E2:48:C7:41:BA:6A:26:AC:8C:FE:2C:2B:B7:C2:D7:A3:B1
Certificate issuer: /CN=ce8e9be248c741ba6a26ac8cfe2c2bb7c2d7a3b1
Certificate serial: 0199FDD9E58B22203B66E9E4E3EA0F41DE81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zo6b4kjHQbpqJqyM_iwrt8LXo7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/zo6b4kjHQbpqJqyM_iwrt8LXo7E.mft
Manifest number: 1036
Signing time: Sun 19 Oct 2025 19:02:19 +0000
Manifest this update: Sun 19 Oct 2025 19:02:19 +0000
Manifest next update: Mon 20 Oct 2025 19:02:19 +0000
Files and hashes: 1: 393YoA_-TG1rJW7pJiXVZZOcLRE.roa (hash: /h7+NJqveZtwZnIhU53gy4Hhcp46zP11eq1lYDwDpdg=)
2: zo6b4kjHQbpqJqyM_iwrt8LXo7E.crl (hash: jJwoGZK0bSMDV6DqDYVMUwdb7bRQ+VYMz3rRJbP0fgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/zo6b4kjHQbpqJqyM_iwrt8LXo7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/zo6b4kjHQbpqJqyM_iwrt8LXo7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/zo6b4kjHQbpqJqyM_iwrt8LXo7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:e5:8b:22:20:3b:66:e9:e4:e3:ea:0f:41:de:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce8e9be248c741ba6a26ac8cfe2c2bb7c2d7a3b1
Validity
Not Before: Oct 19 19:02:19 2025 GMT
Not After : Oct 20 19:02:19 2025 GMT
Subject: CN=3f8335c2183d24fe4091a74d057ef32bee69b326
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:22:d1:32:e1:2f:fc:4c:be:d1:6e:e1:d9:cd:
ae:06:94:ad:de:f0:95:f5:91:a0:4a:57:f4:c7:89:
a6:cf:db:09:0f:f5:f3:c7:69:94:aa:65:e1:41:10:
53:13:b6:d7:0b:41:c1:79:6b:c5:98:70:8d:c8:fc:
9e:7a:62:d6:e0:e7:42:91:cb:ef:be:8a:74:8a:0d:
54:6b:1e:f3:ab:76:59:77:97:3c:a2:20:58:9c:b9:
29:61:f6:05:21:8d:6d:d4:5c:fd:ea:70:64:d6:8c:
78:d1:54:6b:e5:37:8c:9e:f1:0b:ba:54:7a:9a:5e:
0d:27:1c:2c:72:d1:3b:fd:6e:b0:ed:ca:81:08:c6:
2a:87:38:56:bd:f1:42:65:47:e8:9c:32:04:51:fc:
10:fd:57:4a:c6:c2:9f:ee:a4:c1:a2:47:2d:f8:e8:
02:18:25:bd:72:4c:98:6e:41:f2:b8:ed:09:16:fe:
62:47:21:0b:6c:61:60:47:8b:5f:61:f4:c0:a9:84:
e2:3a:c6:45:eb:35:5b:f7:84:c0:9f:58:b2:38:1f:
a3:35:58:55:dd:82:4c:2a:70:d3:6e:f5:96:00:1a:
cf:2e:3b:a3:3d:b1:33:5b:c8:b8:7b:4e:b7:42:5f:
05:71:82:90:f9:5d:bc:9d:ae:f3:5c:30:67:5b:d0:
89:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:83:35:C2:18:3D:24:FE:40:91:A7:4D:05:7E:F3:2B:EE:69:B3:26
X509v3 Authority Key Identifier:
keyid:CE:8E:9B:E2:48:C7:41:BA:6A:26:AC:8C:FE:2C:2B:B7:C2:D7:A3:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zo6b4kjHQbpqJqyM_iwrt8LXo7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/zo6b4kjHQbpqJqyM_iwrt8LXo7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/zo6b4kjHQbpqJqyM_iwrt8LXo7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:d3:78:0f:3c:f5:c3:bf:c4:a6:66:99:96:d4:1c:0a:2c:e3:
44:c6:12:9e:57:96:20:75:a4:91:ac:8e:75:a4:cb:47:48:46:
01:71:95:a0:4e:51:d3:d9:e8:13:51:bb:9f:93:d7:4b:ea:df:
ee:18:bd:0f:45:8a:c2:a3:9e:d7:8a:38:ef:2d:cb:a8:38:6d:
ec:a8:c7:0b:01:02:c7:40:fc:7b:00:43:41:2f:30:56:84:cd:
13:56:0c:8f:5d:70:4b:5c:f4:96:e9:26:a9:58:ec:a1:86:84:
11:2d:b7:89:d3:0d:1f:f6:e6:ea:5b:54:1a:fb:b2:49:bf:e1:
4a:42:61:63:09:4b:c3:9f:46:28:3b:4f:33:67:e0:a7:35:f4:
4d:8d:40:cb:0c:50:9e:56:6c:20:33:06:f7:97:87:d0:26:5f:
4f:8b:fa:2d:00:64:c8:58:2e:5b:4b:a5:03:90:34:43:f2:c6:
94:ae:d5:96:8c:09:bb:59:87:fa:83:f9:a8:49:8a:13:b1:d7:
96:24:e0:51:d0:96:79:f5:d5:80:04:30:1d:09:45:23:dd:0c:
fd:f1:b2:eb:ee:fe:a5:ca:5b:60:17:b8:4b:db:ec:c4:ce:21:
b2:88:37:73:b5:ee:3f:ff:0e:04:77:6e:43:81:9c:55:fe:01:
34:5e:e2:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:37:34 2025 by rpki-client