Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/925ea2-fff8-4095-9d96-01cd47b6ca0d/1/ZJek5qz7ctUdKe5hpig29mBgl6Y.mft
File: ZJek5qz7ctUdKe5hpig29mBgl6Y.mft (raw, json)
Hash identifier: 0POe+b8DyrYxiQtPls3uB4GgYvrSytzFsAv2+s3sD9c=
Subject key identifier: 11:E4:FB:2B:08:80:E6:6E:43:8B:C2:86:61:57:89:87:3A:82:58:BF
Authority key identifier: 64:97:A4:E6:AC:FB:72:D5:1D:29:EE:61:A6:28:36:F6:60:60:97:A6
Certificate issuer: /CN=6497a4e6acfb72d51d29ee61a62836f6606097a6
Certificate serial: 0199FC21C7B4442C8C2A95A74CE145E6CA8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZJek5qz7ctUdKe5hpig29mBgl6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/925ea2-fff8-4095-9d96-01cd47b6ca0d/1/ZJek5qz7ctUdKe5hpig29mBgl6Y.mft
Manifest number: 055D
Signing time: Sun 19 Oct 2025 11:01:36 +0000
Manifest this update: Sun 19 Oct 2025 11:01:36 +0000
Manifest next update: Mon 20 Oct 2025 11:01:36 +0000
Files and hashes: 1: ZJek5qz7ctUdKe5hpig29mBgl6Y.crl (hash: UkiDFjug5NV8832dj2PaG2hkxqZtp1OLtwlj8wKjTmg=)
2: p-RJNh9JzuTGAbonv6SiHIGo-Zs.roa (hash: CnUaaNmND1hlUYpUdj93kk7BQgZTe17usUCZnw2w4sE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/925ea2-fff8-4095-9d96-01cd47b6ca0d/1/ZJek5qz7ctUdKe5hpig29mBgl6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/925ea2-fff8-4095-9d96-01cd47b6ca0d/1/ZJek5qz7ctUdKe5hpig29mBgl6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZJek5qz7ctUdKe5hpig29mBgl6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:c7:b4:44:2c:8c:2a:95:a7:4c:e1:45:e6:ca:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6497a4e6acfb72d51d29ee61a62836f6606097a6
Validity
Not Before: Oct 19 11:01:36 2025 GMT
Not After : Oct 20 11:01:36 2025 GMT
Subject: CN=11e4fb2b0880e66e438bc286615789873a8258bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d3:45:92:45:bb:25:cc:e0:55:c7:3e:f0:8a:
b3:61:36:f7:78:73:d2:65:77:81:29:8a:f9:d0:98:
80:a4:4f:9d:16:56:f8:96:cf:af:08:ab:bd:b9:3a:
91:62:29:14:94:69:f0:fc:af:2a:ec:c9:7c:5f:21:
8e:bd:1f:b8:3b:5c:65:dd:24:c4:a1:d8:e9:4e:c7:
c9:15:23:07:90:87:e0:a5:9e:2f:a4:51:f7:87:90:
03:ea:36:1e:02:a4:53:d0:6c:f6:9f:81:ff:e9:23:
10:a6:ef:88:42:8e:4a:ae:14:55:50:09:f8:c9:60:
54:1c:43:45:27:65:c1:73:10:a1:c2:44:34:a7:f7:
2d:0c:7d:5b:7e:09:67:50:ac:04:23:0d:2c:66:a2:
21:74:fb:ef:03:ef:47:e7:b4:9d:8b:aa:cb:f5:e9:
0c:1d:56:b7:e0:a1:2c:b9:01:06:3f:56:68:ba:86:
bd:0c:08:bf:52:26:ee:f1:60:d4:e7:33:d4:df:d9:
9e:9c:89:fa:1f:23:a3:d2:5e:2a:1c:a4:f8:c5:ba:
c6:f3:3b:d2:39:e1:87:76:8a:f9:6a:63:5a:b9:2c:
eb:ab:e3:fd:2c:d0:c3:a0:96:04:ec:23:82:d5:ba:
6e:fe:5b:d6:4e:3c:93:8c:8c:61:a7:a7:53:3d:73:
d4:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:E4:FB:2B:08:80:E6:6E:43:8B:C2:86:61:57:89:87:3A:82:58:BF
X509v3 Authority Key Identifier:
keyid:64:97:A4:E6:AC:FB:72:D5:1D:29:EE:61:A6:28:36:F6:60:60:97:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZJek5qz7ctUdKe5hpig29mBgl6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/925ea2-fff8-4095-9d96-01cd47b6ca0d/1/ZJek5qz7ctUdKe5hpig29mBgl6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/925ea2-fff8-4095-9d96-01cd47b6ca0d/1/ZJek5qz7ctUdKe5hpig29mBgl6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:c0:40:c8:2a:0f:b2:5e:ff:49:e6:33:ea:6b:19:ab:46:40:
40:09:9f:c3:53:e4:09:02:90:7c:e2:62:df:f1:0a:16:f7:3f:
68:67:0f:ab:12:68:b1:c2:8a:cc:1c:12:4a:36:09:e4:99:8d:
31:42:8c:3a:47:9c:b5:81:c4:02:f1:1f:8a:28:03:0a:3f:b7:
d4:7e:bf:f4:e2:90:b5:06:02:dc:30:8c:63:ae:91:26:52:8c:
77:86:2d:33:d4:2e:ea:43:01:ce:1b:8f:29:0b:ac:e2:ec:1a:
73:a2:13:be:18:34:e0:b0:0b:f4:2e:a4:7f:9b:d8:cb:20:f2:
3a:fa:c2:5a:46:a7:93:45:7c:cd:83:38:5d:9b:09:bf:91:86:
c8:b3:a8:41:1d:10:aa:12:6f:06:dd:3a:bf:08:19:c5:c7:ce:
76:31:09:26:9b:ba:ee:08:d1:bf:98:8f:14:c3:cc:22:6f:99:
a7:1f:6b:d9:87:d8:6e:b5:72:31:55:e6:8b:82:b5:8d:31:c9:
7c:81:d5:69:2c:44:e3:57:46:4c:11:d5:9b:11:0a:f5:46:a2:
03:58:65:f1:33:31:ec:15:82:29:60:57:ed:b1:07:76:43:5d:
f9:0b:91:e4:89:17:fb:ec:6c:d2:34:85:f9:4a:f9:de:ae:f7:
bb:e1:13:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:59:02 2025 by rpki-client