Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/1d19ad-73f6-450b-b97c-2be25f9d5ed2/1/zSaUgromG4gAVgjsULe5CdPz_U4.mft
File: zSaUgromG4gAVgjsULe5CdPz_U4.mft (raw, json)
Hash identifier: 6tKHuLWVxD+lkKLPWkOt1UDJXdaR/8wY9rCIz2PzLBQ=
Subject key identifier: 6E:79:46:B3:DD:2D:E7:9C:2A:90:90:E3:7B:55:8D:7F:FC:CC:39:AB
Authority key identifier: CD:26:94:82:BA:26:1B:88:00:56:08:EC:50:B7:B9:09:D3:F3:FD:4E
Certificate issuer: /CN=cd269482ba261b88005608ec50b7b909d3f3fd4e
Certificate serial: 0199FD341BB3103B45CA8AAE245CAF92C9F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zSaUgromG4gAVgjsULe5CdPz_U4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/1d19ad-73f6-450b-b97c-2be25f9d5ed2/1/zSaUgromG4gAVgjsULe5CdPz_U4.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 16:01:14 +0000
Manifest this update: Sun 19 Oct 2025 16:01:14 +0000
Manifest next update: Mon 20 Oct 2025 16:01:14 +0000
Files and hashes: 1: 4bVZoUiCbJaTBG7aA0p9xBgeM94.roa (hash: MzCfFVB6xbhIQC2ta/MEsIETvDrpIdsUhLGtVjRSeig=)
2: zSaUgromG4gAVgjsULe5CdPz_U4.crl (hash: xU9oAxJDqZ4urSR4dL3ChxzCymkH+iu2uhPRwo76n2c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/1d19ad-73f6-450b-b97c-2be25f9d5ed2/1/zSaUgromG4gAVgjsULe5CdPz_U4.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/1d19ad-73f6-450b-b97c-2be25f9d5ed2/1/zSaUgromG4gAVgjsULe5CdPz_U4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zSaUgromG4gAVgjsULe5CdPz_U4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:1b:b3:10:3b:45:ca:8a:ae:24:5c:af:92:c9:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd269482ba261b88005608ec50b7b909d3f3fd4e
Validity
Not Before: Oct 19 16:01:14 2025 GMT
Not After : Oct 20 16:01:14 2025 GMT
Subject: CN=6e7946b3dd2de79c2a9090e37b558d7ffccc39ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:71:a5:70:6c:dd:6f:96:17:61:47:fe:91:c9:
9d:ef:52:4f:5e:8c:a2:fd:41:bf:73:d8:fd:cb:7e:
9b:60:9b:aa:a9:3a:fa:d2:41:7f:cb:3b:14:37:34:
5f:83:3a:e0:c0:2f:bf:6a:fc:0e:1b:ba:1a:18:bd:
a9:e4:fb:85:eb:14:a8:20:0f:bb:7f:65:17:e1:4a:
6c:b5:1c:00:98:50:c6:8d:f2:b4:12:22:cd:0b:38:
2e:94:25:aa:7d:b3:03:5a:bb:24:56:c1:e0:5e:4b:
e6:93:07:7a:ae:37:19:5f:56:55:06:5f:e1:bb:45:
f1:39:1c:a7:32:47:2c:d8:a6:09:e4:ab:fd:fb:2d:
f5:83:ef:c5:39:39:00:03:be:10:a2:8a:0e:97:2c:
8c:0a:a9:7d:8e:97:a3:01:36:49:b0:5f:b3:f7:e5:
af:57:10:83:21:0b:4c:1a:c4:31:1c:82:b3:24:e2:
cf:cf:27:e9:1c:da:81:cf:b7:54:b3:0e:4c:62:d6:
5e:63:bf:57:f8:18:74:c8:12:9a:87:fc:48:61:27:
8f:6c:e6:c1:67:c0:9b:5b:0d:0c:44:2f:50:ab:e9:
99:47:14:97:8e:76:02:92:fc:64:18:d3:c1:69:16:
2d:7f:c0:ab:e5:fb:87:81:f0:e4:4e:62:14:9c:21:
7f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:79:46:B3:DD:2D:E7:9C:2A:90:90:E3:7B:55:8D:7F:FC:CC:39:AB
X509v3 Authority Key Identifier:
keyid:CD:26:94:82:BA:26:1B:88:00:56:08:EC:50:B7:B9:09:D3:F3:FD:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zSaUgromG4gAVgjsULe5CdPz_U4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1d19ad-73f6-450b-b97c-2be25f9d5ed2/1/zSaUgromG4gAVgjsULe5CdPz_U4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1d19ad-73f6-450b-b97c-2be25f9d5ed2/1/zSaUgromG4gAVgjsULe5CdPz_U4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:8f:53:6e:25:90:09:00:d2:83:55:84:4f:c5:35:c4:f1:a0:
37:15:90:51:93:52:30:5d:84:c2:2d:40:44:8c:66:a8:eb:a8:
02:26:99:dc:4d:46:a3:db:7c:e9:0f:68:4f:55:bb:07:36:67:
1b:a0:54:e0:6d:2b:f0:65:53:60:f8:53:eb:87:52:5c:8a:72:
50:de:47:75:8a:96:aa:c2:cf:19:6d:ae:62:56:1f:15:7c:1b:
4f:21:80:b2:18:e6:a0:d8:b5:cc:af:fc:09:ae:c4:d1:e1:21:
e0:8f:30:31:a4:b6:1f:a2:9f:77:28:a6:dc:d5:18:11:d7:09:
72:58:73:4e:7c:0f:43:26:c3:d1:fa:d9:1a:63:4a:7b:b6:a6:
4c:da:3d:07:03:f1:1e:d5:0e:bf:fc:29:54:22:cd:ec:0b:5f:
d8:9d:99:8d:a1:4f:57:0d:ee:7f:f5:de:38:9a:53:98:b6:cd:
22:7e:5a:fe:77:a7:bd:07:32:f4:89:7f:07:24:81:8a:89:95:
94:1c:47:20:69:70:0e:d6:97:01:af:24:38:fe:40:69:8d:9b:
74:d8:1a:63:7e:cd:4d:e5:a1:86:11:bb:e7:b8:d2:5b:a7:43:
02:ec:1e:81:e2:7e:23:8e:3f:a1:99:94:b6:88:3c:3d:86:c1:
f9:61:33:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:14:12 2025 by rpki-client