Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/097b01-9470-48eb-850d-afc602714e13/1/zGygXEy2HZ4jKSmNNUwqdpvdBdM.mft
File: zGygXEy2HZ4jKSmNNUwqdpvdBdM.mft (raw, json)
Hash identifier: jHSiVSoiOKSzrUK8JJln+Ui7MwOjBi9bx4pKr9D2wYo=
Subject key identifier: 57:42:FB:03:82:D4:8B:C0:A4:32:9B:54:3C:83:9F:21:10:85:99:B5
Authority key identifier: CC:6C:A0:5C:4C:B6:1D:9E:23:29:29:8D:35:4C:2A:76:9B:DD:05:D3
Certificate issuer: /CN=cc6ca05c4cb61d9e2329298d354c2a769bdd05d3
Certificate serial: 0199FE7DDF16487337EC4CA8B86F86BBF296
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zGygXEy2HZ4jKSmNNUwqdpvdBdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/097b01-9470-48eb-850d-afc602714e13/1/zGygXEy2HZ4jKSmNNUwqdpvdBdM.mft
Manifest number: 16DE
Signing time: Sun 19 Oct 2025 22:01:25 +0000
Manifest this update: Sun 19 Oct 2025 22:01:25 +0000
Manifest next update: Mon 20 Oct 2025 22:01:25 +0000
Files and hashes: 1: 1QFlrvAPCEY9CxtKdM8ySIJ2CQM.roa (hash: qOb1k95cjdyB0rlC/+JRqF7RzF8ycajnDjjrG1VLQhQ=)
2: zGygXEy2HZ4jKSmNNUwqdpvdBdM.crl (hash: S2W/CD0/9DHOT5kr2+q+iNc26cUPeXbiUTRvOdAt3sw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/097b01-9470-48eb-850d-afc602714e13/1/zGygXEy2HZ4jKSmNNUwqdpvdBdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/097b01-9470-48eb-850d-afc602714e13/1/zGygXEy2HZ4jKSmNNUwqdpvdBdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/zGygXEy2HZ4jKSmNNUwqdpvdBdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7d:df:16:48:73:37:ec:4c:a8:b8:6f:86:bb:f2:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc6ca05c4cb61d9e2329298d354c2a769bdd05d3
Validity
Not Before: Oct 19 22:01:25 2025 GMT
Not After : Oct 20 22:01:25 2025 GMT
Subject: CN=5742fb0382d48bc0a4329b543c839f21108599b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:2f:22:93:aa:09:85:8b:c5:f1:c3:71:f4:79:
8b:e7:84:06:f0:9c:0b:95:e1:0c:04:dc:61:30:68:
d8:d0:93:38:a9:bd:ee:94:3f:fe:f0:1c:50:ed:c3:
49:65:fe:7a:bc:5c:9f:f8:7f:66:2d:c3:bc:72:64:
42:80:ff:bf:2a:4b:74:46:e2:27:77:2d:d7:85:86:
1f:b8:af:a3:1a:34:65:c4:18:c5:b8:26:9a:d8:dd:
23:dd:a0:62:46:4e:c2:01:f8:d6:97:a9:84:d6:12:
32:b2:77:7c:cb:c4:c8:0d:76:09:3c:38:5c:c8:f0:
01:4a:eb:bc:7d:80:e3:5d:73:e3:4c:dd:c1:01:2d:
13:c5:2b:57:68:62:8f:c0:09:36:15:e4:df:5f:5a:
6d:cc:a9:e1:60:10:1d:33:48:f1:4f:7c:f5:be:99:
cc:51:57:ee:4d:82:59:97:6c:9a:46:79:8d:a1:f5:
2b:57:9e:06:ec:89:67:9b:2a:12:37:d0:d7:96:b1:
30:32:89:b8:b9:d0:1c:d9:72:0d:a4:a0:d6:be:d7:
ca:01:a6:90:ce:6f:b3:42:7c:e6:ac:13:79:71:e7:
81:b1:b2:df:53:de:71:6a:a8:39:67:b8:4f:8b:ed:
c7:51:6b:db:b6:b7:b8:1b:a8:26:33:a3:2b:fe:ab:
7c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:42:FB:03:82:D4:8B:C0:A4:32:9B:54:3C:83:9F:21:10:85:99:B5
X509v3 Authority Key Identifier:
keyid:CC:6C:A0:5C:4C:B6:1D:9E:23:29:29:8D:35:4C:2A:76:9B:DD:05:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zGygXEy2HZ4jKSmNNUwqdpvdBdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/097b01-9470-48eb-850d-afc602714e13/1/zGygXEy2HZ4jKSmNNUwqdpvdBdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/097b01-9470-48eb-850d-afc602714e13/1/zGygXEy2HZ4jKSmNNUwqdpvdBdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:d4:57:ed:f3:83:a3:fb:27:29:a4:5f:8d:df:23:7f:1b:60:
e5:0e:01:7e:37:19:53:f6:44:02:f5:25:d4:f7:f2:f5:78:70:
fe:f4:8a:38:17:3f:89:a1:c2:7e:18:d8:77:b9:70:a6:8f:4f:
cf:bc:7c:a9:00:98:22:b1:29:36:41:b0:86:e4:47:b3:cf:95:
08:ad:6b:a5:df:06:f2:e7:e5:4d:13:71:65:0e:5c:a9:cd:f3:
67:d4:29:af:a4:45:d9:c9:14:a8:0f:bf:b1:67:bb:d5:c8:9d:
70:36:87:b7:6c:f7:38:4e:3a:22:a6:83:1b:2e:1d:f0:c2:ef:
4d:68:74:15:e8:76:88:1a:d1:47:92:18:92:35:9e:ce:35:8b:
44:53:82:99:49:2e:a8:6c:3b:8a:fa:e5:4b:f0:c2:4b:74:2f:
88:ea:a3:b8:76:db:75:c5:cb:8b:30:50:82:80:a1:c6:c1:d5:
df:cc:31:bc:b2:02:48:d8:3a:90:5e:f5:23:9e:aa:13:11:e1:
ac:8d:27:70:48:43:bd:8b:f5:16:60:fd:67:a1:9f:eb:c5:6c:
21:45:21:16:7a:b4:e3:ce:96:d4:c2:96:21:d4:32:92:4c:cb:
b2:60:a5:b8:1a:2f:1e:9b:84:d0:70:a8:d9:06:b5:3c:ab:19:
dd:ba:09:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:31:20 2025 by rpki-client