Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/6e3fba-4d3a-43cb-babf-5f2882de3ec7/1/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.mft
File: ZOkGJwIa3PpWJDQtPl-LSANaz7Q.mft (raw, json)
Hash identifier: eYXZoL99Dp/tuwfI1xYIsT+xqwmknZkr/PRxj5/474s=
Subject key identifier: FD:BA:81:68:84:F8:9D:C2:AF:D1:65:36:7A:9D:43:29:A4:13:13:48
Authority key identifier: 64:E9:06:27:02:1A:DC:FA:56:24:34:2D:3E:5F:8B:48:03:5A:CF:B4
Certificate issuer: /CN=64e90627021adcfa5624342d3e5f8b48035acfb4
Certificate serial: 0199FBEAE24C0840AE8765A5621F81C47878
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/6e3fba-4d3a-43cb-babf-5f2882de3ec7/1/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 10:01:38 +0000
Manifest this update: Sun 19 Oct 2025 10:01:38 +0000
Manifest next update: Mon 20 Oct 2025 10:01:38 +0000
Files and hashes: 1: ZOkGJwIa3PpWJDQtPl-LSANaz7Q.crl (hash: EdhqaBWsXKrJW27WCfYrUDIv/j6uPXXX4ArDnQC8n2k=)
2: qoiJ2dkjuPKR2DINrHtiZnfckMQ.roa (hash: LgXeymWOOJplKwnla/9DQkVIgYhvAdLAg89NuJpLJ/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/6e3fba-4d3a-43cb-babf-5f2882de3ec7/1/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/6e3fba-4d3a-43cb-babf-5f2882de3ec7/1/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:e2:4c:08:40:ae:87:65:a5:62:1f:81:c4:78:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64e90627021adcfa5624342d3e5f8b48035acfb4
Validity
Not Before: Oct 19 10:01:38 2025 GMT
Not After : Oct 20 10:01:38 2025 GMT
Subject: CN=fdba816884f89dc2afd165367a9d4329a4131348
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3e:93:d7:d0:d4:89:91:ab:4a:82:05:e4:19:
0a:5f:d7:11:c7:39:4e:8f:2c:d1:d0:44:e8:09:d1:
c8:c4:76:cf:f9:a7:6c:34:7f:9e:59:ce:b5:fa:9a:
0f:81:08:13:23:83:15:d8:ca:9b:bc:8f:a1:88:e0:
da:3f:e3:2b:17:a5:37:c4:cd:45:ab:db:a7:a5:b3:
ab:44:f9:19:6d:a2:42:ba:47:68:d6:af:22:0a:44:
fe:20:33:f2:29:5a:a4:bb:75:d0:f0:eb:7c:0e:af:
c0:0a:1a:35:d9:7d:43:45:7d:4f:4b:a4:55:e7:cf:
16:cf:d4:b5:cc:ff:a8:34:a6:56:c7:ce:73:10:88:
83:de:87:59:82:bb:e5:dc:36:3d:56:7a:dd:6b:b7:
98:8f:55:64:e3:cf:f0:d1:40:f2:e0:47:bd:6b:e9:
f2:dd:44:f8:85:7c:a3:f8:8a:0d:de:68:b0:80:16:
2c:1c:92:45:f8:cc:78:96:65:89:ab:18:9f:a8:f3:
56:0c:04:7b:21:a2:d1:68:5e:07:f4:0e:bd:45:c9:
37:a4:41:93:a2:44:37:6a:d1:37:14:16:fb:72:1f:
5b:cb:e2:eb:c2:63:74:12:7b:6a:12:63:63:aa:c6:
00:be:f3:89:d5:5f:f1:86:89:6d:0d:ba:18:7b:bc:
7e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:BA:81:68:84:F8:9D:C2:AF:D1:65:36:7A:9D:43:29:A4:13:13:48
X509v3 Authority Key Identifier:
keyid:64:E9:06:27:02:1A:DC:FA:56:24:34:2D:3E:5F:8B:48:03:5A:CF:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6e3fba-4d3a-43cb-babf-5f2882de3ec7/1/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6e3fba-4d3a-43cb-babf-5f2882de3ec7/1/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:14:6f:78:06:5e:12:c5:f7:28:64:88:68:68:f0:33:75:35:
0a:2c:c4:33:a2:15:1c:6d:d7:3f:12:77:77:7d:c6:55:c5:d3:
31:0c:46:b4:1c:cf:a5:21:31:cd:88:c9:d6:d6:9a:d6:5e:f8:
9a:62:c6:6d:a0:f5:8b:4e:1b:16:a8:60:cd:33:8c:b3:37:95:
8f:d5:c0:5b:32:af:87:6a:76:cd:91:d0:47:5e:8d:8a:fb:99:
e6:1d:65:38:81:88:97:f9:4b:3c:e9:b7:23:bc:ba:1b:11:19:
44:61:06:cc:0c:d6:b8:ef:ad:f6:f2:21:8e:ad:51:f2:cd:ed:
5f:ac:b8:70:4b:09:b9:66:ba:cb:d0:a7:44:c6:23:ce:79:7c:
92:1c:5e:78:3c:b2:02:07:82:6b:c8:c6:46:c9:38:ef:21:0f:
ee:87:f4:a1:59:1d:4b:e4:57:33:ff:f7:81:90:33:0b:99:a9:
82:68:9f:e9:a2:c9:40:2a:15:13:1f:46:66:b8:b4:b8:88:f7:
67:0d:c3:fe:32:dc:be:18:e0:fd:df:eb:c7:4d:3c:af:96:c1:
f7:6a:4c:2b:d1:35:6a:c6:40:88:44:4d:65:45:50:58:d5:f2:
12:ad:12:ef:88:ec:2b:da:ac:ef:1d:92:a2:63:a1:22:75:bc:
e9:2a:59:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:33:20 2025 by rpki-client