Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/44d603-fbf5-459b-a0ba-d2763c007752/1/ZgPtTHhFQlARbxBetpYdwp4dvGw.mft
File: ZgPtTHhFQlARbxBetpYdwp4dvGw.mft (raw, json)
Hash identifier: bwfzXyfLvpNjtluI9m7O9Hqyfbf2rB4euSw/sL+TaP0=
Subject key identifier: 59:48:8E:E6:17:9B:9A:1D:F5:01:71:8A:51:9D:78:BD:17:A9:69:F1
Authority key identifier: 66:03:ED:4C:78:45:42:50:11:6F:10:5E:B6:96:1D:C2:9E:1D:BC:6C
Certificate issuer: /CN=6603ed4c78454250116f105eb6961dc29e1dbc6c
Certificate serial: 0199FBEAFF179AA69842A206C6EEE5F9CFFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZgPtTHhFQlARbxBetpYdwp4dvGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/44d603-fbf5-459b-a0ba-d2763c007752/1/ZgPtTHhFQlARbxBetpYdwp4dvGw.mft
Manifest number: 13C8
Signing time: Sun 19 Oct 2025 10:01:45 +0000
Manifest this update: Sun 19 Oct 2025 10:01:45 +0000
Manifest next update: Mon 20 Oct 2025 10:01:45 +0000
Files and hashes: 1: ZgPtTHhFQlARbxBetpYdwp4dvGw.crl (hash: pbGO9NLHmyJGqsYkCGgky5oijvbj3as56HgAd8pYqs4=)
2: pFNbbolKWdf6lVoEITxkPbtrK0c.roa (hash: dWVbBEqjRH9tmJFYTVH116/QjtCieVc2dcQg6GxblXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/44d603-fbf5-459b-a0ba-d2763c007752/1/ZgPtTHhFQlARbxBetpYdwp4dvGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/44d603-fbf5-459b-a0ba-d2763c007752/1/ZgPtTHhFQlARbxBetpYdwp4dvGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZgPtTHhFQlARbxBetpYdwp4dvGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:ff:17:9a:a6:98:42:a2:06:c6:ee:e5:f9:cf:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6603ed4c78454250116f105eb6961dc29e1dbc6c
Validity
Not Before: Oct 19 10:01:45 2025 GMT
Not After : Oct 20 10:01:45 2025 GMT
Subject: CN=59488ee6179b9a1df501718a519d78bd17a969f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8a:41:da:fe:a6:25:c4:df:93:74:6f:09:65:
9f:09:db:23:aa:6d:a5:8a:65:30:b5:30:17:b2:d4:
0b:18:74:76:ac:83:f1:8b:15:de:19:27:75:94:04:
a3:cb:a4:5a:21:c6:be:23:07:9f:2f:be:7d:d4:e9:
57:05:f2:9b:d3:4d:87:b1:be:42:a1:13:9b:46:d2:
d1:d2:c4:7c:88:ad:ad:16:cb:a1:da:9c:80:15:64:
71:66:ab:6f:6d:b2:4f:0d:97:8b:02:7b:53:fb:26:
55:de:cc:1c:91:ab:1c:9b:22:a0:5e:61:47:0d:a6:
e1:51:ed:b6:19:2b:dd:59:d9:3e:0a:e7:84:a8:8b:
df:74:a9:cd:bb:24:09:0e:c3:e7:af:83:d2:37:73:
8b:8e:71:c5:07:0d:a9:44:6f:5e:5d:00:e7:a1:fd:
1e:26:27:8b:71:7a:12:8d:e7:b6:85:83:b8:55:41:
a7:d2:79:d5:22:f9:bf:18:d5:9b:dd:08:9e:23:b3:
a9:87:06:e2:88:8d:ab:80:1b:1d:70:12:ee:d6:d8:
54:46:ba:29:b1:7d:34:8c:c5:06:9a:8d:0c:aa:5a:
d1:8e:a0:28:e6:ed:50:3a:a5:14:23:6d:44:39:ed:
1b:05:25:16:83:c8:c8:62:62:f3:31:07:fb:ab:ef:
26:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:48:8E:E6:17:9B:9A:1D:F5:01:71:8A:51:9D:78:BD:17:A9:69:F1
X509v3 Authority Key Identifier:
keyid:66:03:ED:4C:78:45:42:50:11:6F:10:5E:B6:96:1D:C2:9E:1D:BC:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZgPtTHhFQlARbxBetpYdwp4dvGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/44d603-fbf5-459b-a0ba-d2763c007752/1/ZgPtTHhFQlARbxBetpYdwp4dvGw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/44d603-fbf5-459b-a0ba-d2763c007752/1/ZgPtTHhFQlARbxBetpYdwp4dvGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:99:49:6b:00:30:c3:e1:95:17:16:67:e7:a8:b9:fb:07:94:
e0:d8:67:91:81:ad:4f:c2:ab:21:3e:c7:f7:80:95:fc:11:35:
3f:dc:40:4d:e3:38:82:c3:76:d6:6d:29:49:84:41:80:77:fc:
31:83:92:b8:27:90:98:b6:47:ab:44:29:42:25:07:fe:45:fd:
17:72:f0:d9:bd:97:84:20:7e:da:af:37:10:8d:3d:bf:6f:7f:
56:40:b3:99:79:ac:20:b7:01:7e:f4:57:75:62:8f:9c:4d:f1:
d7:0a:e9:71:01:a4:02:e3:48:0b:11:af:0e:25:7c:35:e9:49:
63:f3:7d:16:28:d6:1f:45:0b:24:3e:b8:a7:fb:71:5d:b3:7f:
ec:3e:13:ae:83:ef:1b:fb:f6:ec:e5:8b:29:b2:88:2f:9e:53:
0d:a7:1d:8d:77:32:32:48:d2:db:2f:8d:1b:e8:06:4b:2e:aa:
ac:3d:72:36:ce:da:12:51:e6:7a:d8:d5:3f:07:86:8d:64:8d:
7a:d7:d2:bb:92:53:63:06:fb:50:fc:88:cc:83:6c:24:09:3e:
a8:b7:8b:b7:dc:4a:cb:57:9e:19:f7:70:36:82:86:ae:7b:48:
0d:cf:0e:16:97:b0:51:23:1e:96:84:df:e8:a1:90:00:8f:7e:
53:ea:2a:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:39:45 2025 by rpki-client