Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/d38360-4d1f-422e-90ae-08b9e1101aa7/1/zLDKIpEnbX0qL4pwUPS6gn_pEKE.mft
File: zLDKIpEnbX0qL4pwUPS6gn_pEKE.mft (raw, json)
Hash identifier: 30lM+8DJxikxRMgX84X7alxMdrcno9iLdM3tWSfOALE=
Subject key identifier: F3:FA:4B:7F:87:7F:B6:F0:6D:73:A0:00:ED:60:AB:9D:31:4A:2A:AB
Authority key identifier: CC:B0:CA:22:91:27:6D:7D:2A:2F:8A:70:50:F4:BA:82:7F:E9:10:A1
Certificate issuer: /CN=ccb0ca2291276d7d2a2f8a7050f4ba827fe910a1
Certificate serial: 0199FC589ACE43E3CFE80A780B616B5ECEC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zLDKIpEnbX0qL4pwUPS6gn_pEKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/d38360-4d1f-422e-90ae-08b9e1101aa7/1/zLDKIpEnbX0qL4pwUPS6gn_pEKE.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 12:01:29 +0000
Manifest this update: Sun 19 Oct 2025 12:01:29 +0000
Manifest next update: Mon 20 Oct 2025 12:01:29 +0000
Files and hashes: 1: 3TjgfHBQ3TSR3m9y0lvASlg8xJE.roa (hash: xhRBJVrNxo2QfSSHQs80HTy1SPE+Tw63EIyLJNfW+98=)
2: O9iKTZs-NSCx-2a4wz3hixLMrQo.roa (hash: 9kWdgObviNsf7fH09ytaVex94ijVjQzdPVkcYWojJN8=)
3: zLDKIpEnbX0qL4pwUPS6gn_pEKE.crl (hash: QPm2XhiX6V0ecYhHfNeHOnOscfaetZhwDHsbXkEpD3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/d38360-4d1f-422e-90ae-08b9e1101aa7/1/zLDKIpEnbX0qL4pwUPS6gn_pEKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/d38360-4d1f-422e-90ae-08b9e1101aa7/1/zLDKIpEnbX0qL4pwUPS6gn_pEKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zLDKIpEnbX0qL4pwUPS6gn_pEKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:9a:ce:43:e3:cf:e8:0a:78:0b:61:6b:5e:ce:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccb0ca2291276d7d2a2f8a7050f4ba827fe910a1
Validity
Not Before: Oct 19 12:01:29 2025 GMT
Not After : Oct 20 12:01:29 2025 GMT
Subject: CN=f3fa4b7f877fb6f06d73a000ed60ab9d314a2aab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fa:f1:88:1a:f0:c1:7b:f5:c0:d0:e8:c2:1f:
22:ab:ef:1e:e1:9b:fc:09:93:ec:75:57:ed:88:09:
dc:6a:b9:1b:ab:94:05:c7:1c:a7:90:87:24:ba:71:
51:b5:b8:6a:ed:a6:9d:03:c3:e7:30:d5:eb:73:56:
73:e9:ce:79:2f:52:7c:e3:02:79:d4:a9:b1:91:b9:
9b:24:26:44:86:ba:60:9a:c6:53:c8:69:5d:8b:40:
dc:c4:6b:0b:bf:b7:a1:16:cc:b7:bc:ab:de:46:8b:
60:3a:e1:35:9f:71:4a:12:25:df:da:09:0b:af:2d:
a9:81:00:fd:84:10:0c:0b:c5:94:f9:55:9d:35:f5:
69:93:62:08:86:fc:a7:95:8a:78:76:77:b8:f7:51:
e1:43:b4:da:8c:d2:c7:36:eb:d7:53:16:5e:53:7f:
fe:dc:f9:a7:63:bc:21:a7:62:1f:20:5c:01:c0:57:
9b:fa:77:af:f8:8e:b8:7d:f6:b8:0e:bf:d3:ba:d2:
c5:94:90:36:4f:97:6a:e4:ad:06:37:a5:1c:3e:54:
ac:47:9b:e5:4a:da:63:9d:26:53:43:ed:88:92:ce:
bc:f1:fd:10:6e:14:f9:1e:94:94:71:ec:4b:6f:b2:
30:25:b9:fb:c4:59:af:09:07:11:1c:21:8d:71:3c:
3d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:FA:4B:7F:87:7F:B6:F0:6D:73:A0:00:ED:60:AB:9D:31:4A:2A:AB
X509v3 Authority Key Identifier:
keyid:CC:B0:CA:22:91:27:6D:7D:2A:2F:8A:70:50:F4:BA:82:7F:E9:10:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zLDKIpEnbX0qL4pwUPS6gn_pEKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d38360-4d1f-422e-90ae-08b9e1101aa7/1/zLDKIpEnbX0qL4pwUPS6gn_pEKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d38360-4d1f-422e-90ae-08b9e1101aa7/1/zLDKIpEnbX0qL4pwUPS6gn_pEKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:6d:bf:4e:e0:7c:82:9a:96:f6:e8:3a:0c:07:01:7e:5e:e1:
85:5c:cf:5c:57:ee:74:ee:69:3e:4e:ed:ef:05:a9:17:28:31:
44:5a:9c:29:c0:e0:cb:f3:32:74:34:85:57:34:4c:29:d9:06:
4c:b3:13:e9:51:55:d0:f3:47:59:65:24:a6:e3:52:12:f9:c0:
15:b9:94:23:2c:87:ba:29:97:0d:10:4f:9a:eb:51:8e:62:37:
61:8f:39:a7:b4:ca:c7:2d:be:58:59:e7:91:22:e2:6b:e7:48:
c8:2f:db:fc:2c:b6:ef:22:58:8b:53:da:d6:2c:d3:be:b4:8a:
e0:b8:4a:72:25:61:3a:e5:74:95:81:e0:28:66:34:6c:90:8a:
c7:37:6d:06:15:88:51:fc:66:b3:a4:b9:f4:d4:e1:55:53:77:
47:e2:66:f9:a7:28:5b:60:32:7c:5f:82:80:14:9e:33:28:36:
42:56:d2:d8:53:a1:cf:07:00:ed:f1:cc:77:da:80:1e:ea:30:
bf:ee:37:18:10:a4:93:47:39:79:c5:33:08:4e:e8:58:19:18:
3d:57:70:85:a7:cb:a0:80:17:96:d2:01:19:9a:49:6a:47:f8:
ec:71:4b:5a:3b:d1:5b:30:4b:a9:6d:62:bd:ad:8d:1e:fe:b5:
7c:a1:9c:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:48:38 2025 by rpki-client