Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/6c3125-fff1-4da0-8a32-7664e8a21fc7/1/ZJauOK7ay77u4eCTlW2zKHrntT0.mft
File: ZJauOK7ay77u4eCTlW2zKHrntT0.mft (raw, json)
Hash identifier: RAuCLQCkdRC1XyZmya9TUaNmK6XrMFgD6Qwm79kRUJo=
Subject key identifier: AF:94:D6:67:2E:33:36:F5:1B:B3:BC:BC:3E:2C:B0:63:E3:45:25:BB
Authority key identifier: 64:96:AE:38:AE:DA:CB:BE:EE:E1:E0:93:95:6D:B3:28:7A:E7:B5:3D
Certificate issuer: /CN=6496ae38aedacbbeeee1e093956db3287ae7b53d
Certificate serial: 0199FC58C2DB82622A44BD011F0FC6749D1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZJauOK7ay77u4eCTlW2zKHrntT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/6c3125-fff1-4da0-8a32-7664e8a21fc7/1/ZJauOK7ay77u4eCTlW2zKHrntT0.mft
Manifest number: 1524
Signing time: Sun 19 Oct 2025 12:01:39 +0000
Manifest this update: Sun 19 Oct 2025 12:01:39 +0000
Manifest next update: Mon 20 Oct 2025 12:01:39 +0000
Files and hashes: 1: OsY0TtzQwg_k6WVAlCJ4j1X5_HQ.roa (hash: xdb+Fodrj/gwgOeHGwol/lGn/WJOAqWqApZA+WvwzsI=)
2: ZJauOK7ay77u4eCTlW2zKHrntT0.crl (hash: mFr3BH/TPAGgHtsZfZZaOoUnN9ZQtlO+ZQfY3Nl66hM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/6c3125-fff1-4da0-8a32-7664e8a21fc7/1/ZJauOK7ay77u4eCTlW2zKHrntT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/6c3125-fff1-4da0-8a32-7664e8a21fc7/1/ZJauOK7ay77u4eCTlW2zKHrntT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZJauOK7ay77u4eCTlW2zKHrntT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:c2:db:82:62:2a:44:bd:01:1f:0f:c6:74:9d:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6496ae38aedacbbeeee1e093956db3287ae7b53d
Validity
Not Before: Oct 19 12:01:39 2025 GMT
Not After : Oct 20 12:01:39 2025 GMT
Subject: CN=af94d6672e3336f51bb3bcbc3e2cb063e34525bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b3:ab:fd:17:72:0a:76:76:16:c9:3a:d5:be:
e3:5e:49:f3:13:9a:34:c2:0c:f4:52:c1:fc:9e:cd:
f5:25:6f:18:eb:dc:8b:60:5a:1b:ff:ff:44:d9:74:
ce:af:63:c4:5a:46:08:06:38:cc:af:06:45:da:5e:
1d:ae:45:21:1f:68:e0:e9:31:f7:c3:e7:43:cc:21:
b3:a0:7b:31:67:d4:1f:82:de:81:c3:46:ab:e1:42:
9f:76:14:60:9a:20:80:a6:a2:c3:32:fe:2e:c8:8c:
fa:1b:2c:b3:63:df:6f:8c:16:9f:e7:86:87:67:e4:
b6:8e:ef:4b:63:9d:49:23:69:84:ad:c7:cf:f1:da:
36:ef:a3:25:1a:11:c1:94:65:11:cb:9e:6a:2a:5f:
bb:66:3e:5d:a2:ac:c8:71:3b:91:b9:82:46:73:01:
5c:f8:c2:88:20:e9:6b:05:a2:cb:69:a7:4a:14:ff:
dd:97:d8:65:cd:0f:66:db:bc:75:c0:cb:22:28:c0:
8e:9f:ce:af:d4:d7:e9:1c:63:06:aa:b9:4a:bf:c5:
42:1b:81:2a:60:a4:d4:d4:9b:64:03:11:36:65:74:
5d:d8:f3:36:5f:1d:1b:39:67:0f:9d:b1:34:f0:60:
3c:26:b1:1f:fc:cb:17:09:8c:11:62:b3:aa:97:e0:
8f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:94:D6:67:2E:33:36:F5:1B:B3:BC:BC:3E:2C:B0:63:E3:45:25:BB
X509v3 Authority Key Identifier:
keyid:64:96:AE:38:AE:DA:CB:BE:EE:E1:E0:93:95:6D:B3:28:7A:E7:B5:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZJauOK7ay77u4eCTlW2zKHrntT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/6c3125-fff1-4da0-8a32-7664e8a21fc7/1/ZJauOK7ay77u4eCTlW2zKHrntT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/6c3125-fff1-4da0-8a32-7664e8a21fc7/1/ZJauOK7ay77u4eCTlW2zKHrntT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:de:22:28:d1:2a:fe:c5:6f:fa:5a:ca:c1:cb:cb:60:e9:24:
bd:82:2b:2d:ec:c7:d4:df:71:3d:ac:b7:c5:8e:cd:37:3c:10:
5d:6a:58:d8:f5:00:cd:23:fa:ce:7f:56:48:54:ed:02:41:e3:
86:e8:58:38:9f:80:e2:6c:1c:91:dd:ff:74:bc:01:be:e1:dc:
2a:72:ae:20:03:69:8d:89:1e:04:9a:b0:c4:9c:7d:03:a6:bf:
68:32:c3:e9:24:f4:e7:1e:1e:74:ed:20:69:e6:01:41:d6:9b:
27:12:bf:1e:f6:8e:d0:5f:ca:16:4f:ce:c6:f1:ee:74:1b:1c:
5a:a1:1a:a7:92:ca:d9:96:7d:6e:e9:ff:26:ff:3d:9c:1b:62:
ed:56:8d:50:3f:74:3a:7f:87:38:50:b4:f5:47:44:2e:14:8d:
ae:9b:a0:a0:ee:5b:17:a0:70:b0:b0:83:bb:3e:ca:1f:be:6b:
95:36:02:0b:40:02:c7:12:b6:d9:f5:11:16:31:aa:2b:46:36:
33:08:83:ca:3b:a4:aa:a1:7b:e1:85:d9:e8:35:72:6a:9a:b1:
e1:11:81:6b:7e:6c:3d:57:0a:f2:48:a4:9e:0c:cc:a9:8f:e0:
11:91:ac:92:35:0a:0b:fe:eb:9b:f9:e4:7f:16:6e:2b:3b:82:
51:61:6e:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:59:30 2025 by rpki-client