Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/eab77d-831a-43bc-8cbe-288766061d98/1/zNeUfsgxNu-URjFiNWhqkQJWLEQ.mft
File: zNeUfsgxNu-URjFiNWhqkQJWLEQ.mft (raw, json)
Hash identifier: T33tbShQvTRPOa0NcBoOWTv0rnggT9hRK7YArZt6Ta8=
Subject key identifier: 73:1D:62:F5:A3:9B:5B:B8:EE:64:0C:BA:67:73:7A:99:AE:33:F9:75
Authority key identifier: CC:D7:94:7E:C8:31:36:EF:94:46:31:62:35:68:6A:91:02:56:2C:44
Certificate issuer: /CN=ccd7947ec83136ef9446316235686a9102562c44
Certificate serial: 0199FE4719622ABA44D403C9C89AB0A1EE14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNeUfsgxNu-URjFiNWhqkQJWLEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/eab77d-831a-43bc-8cbe-288766061d98/1/zNeUfsgxNu-URjFiNWhqkQJWLEQ.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 21:01:36 +0000
Manifest this update: Sun 19 Oct 2025 21:01:36 +0000
Manifest next update: Mon 20 Oct 2025 21:01:36 +0000
Files and hashes: 1: bAP-TBQ5pEJ6ltrNXIaTzwmPogo.roa (hash: nUUK6FuI8w+YNPfI7VAOpoMsSE7nA2QmJZlOaRIBwQw=)
2: zNeUfsgxNu-URjFiNWhqkQJWLEQ.crl (hash: fz2N+xT+IeTZG6Pr4Ic7ieSPov/k9LVxgC+PBzW1weg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/eab77d-831a-43bc-8cbe-288766061d98/1/zNeUfsgxNu-URjFiNWhqkQJWLEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/eab77d-831a-43bc-8cbe-288766061d98/1/zNeUfsgxNu-URjFiNWhqkQJWLEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/zNeUfsgxNu-URjFiNWhqkQJWLEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:47:19:62:2a:ba:44:d4:03:c9:c8:9a:b0:a1:ee:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd7947ec83136ef9446316235686a9102562c44
Validity
Not Before: Oct 19 21:01:36 2025 GMT
Not After : Oct 20 21:01:36 2025 GMT
Subject: CN=731d62f5a39b5bb8ee640cba67737a99ae33f975
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d1:69:c3:da:67:1b:35:44:0f:29:ec:8b:dd:
27:21:3c:d3:1f:4a:09:42:8f:63:36:e3:1d:94:a6:
8f:b2:4a:8c:ea:5f:8d:c2:e2:61:05:d4:61:a2:00:
c8:eb:4e:1c:f1:27:c4:30:26:e1:a1:cc:b0:5f:41:
3d:6a:21:19:94:23:8f:6e:b3:b4:bf:1d:d0:00:ea:
9c:bb:76:c9:1a:fd:4b:af:68:85:e4:7b:df:43:63:
ef:a8:8a:ec:80:ed:55:78:5e:ed:b4:c6:49:89:4b:
07:d7:4d:ee:c8:6e:ba:ee:a3:54:88:00:e3:25:1f:
e4:45:19:2f:dc:67:8d:7c:a3:48:d4:33:58:aa:f1:
02:dc:39:c3:98:e7:4c:27:56:bc:1c:3f:17:2d:c8:
5f:d9:f1:65:c6:53:1a:75:92:29:73:8a:90:00:42:
c6:81:94:ba:34:ca:e0:ef:ab:ec:07:93:d1:51:d0:
76:f8:43:86:75:be:83:7c:2e:3a:68:60:b9:ed:84:
48:56:24:c4:89:47:e0:32:62:13:13:a5:59:c2:57:
2a:99:79:0c:01:a4:78:68:8d:a4:16:f0:aa:41:9e:
67:1f:f8:fc:27:01:31:22:a0:8d:67:9c:5e:26:9b:
05:e1:f9:94:d1:bf:51:56:89:e1:a6:35:62:3b:ae:
7b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:1D:62:F5:A3:9B:5B:B8:EE:64:0C:BA:67:73:7A:99:AE:33:F9:75
X509v3 Authority Key Identifier:
keyid:CC:D7:94:7E:C8:31:36:EF:94:46:31:62:35:68:6A:91:02:56:2C:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNeUfsgxNu-URjFiNWhqkQJWLEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/eab77d-831a-43bc-8cbe-288766061d98/1/zNeUfsgxNu-URjFiNWhqkQJWLEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/eab77d-831a-43bc-8cbe-288766061d98/1/zNeUfsgxNu-URjFiNWhqkQJWLEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:7f:50:d8:9e:f8:91:04:23:bd:d4:b1:77:13:a4:08:6c:ee:
15:84:66:7e:18:81:fa:df:ae:9c:78:c9:02:c7:0e:39:35:3b:
88:ee:ac:6e:b0:a3:0c:3b:2f:89:76:b8:78:28:9e:80:ee:2c:
4c:66:67:5c:80:97:16:08:af:83:1c:8b:4e:65:f6:94:ff:f8:
3a:22:52:c3:9a:55:91:ed:f7:4e:0d:86:5a:ee:93:fe:76:e2:
ba:65:48:98:c4:3c:51:9c:b8:2b:8f:49:9b:df:b0:ed:a5:b9:
85:92:b8:5b:c0:b3:dc:ed:24:62:ee:f8:9b:f7:22:20:c9:07:
1c:f6:ae:06:60:5c:ba:61:60:68:d3:0e:9d:29:d9:0b:aa:94:
c0:b6:b9:c6:b2:24:41:1c:bb:76:d2:b9:f4:46:a1:40:7c:64:
d4:73:90:3a:5e:01:52:16:c6:20:ed:d9:58:b8:9a:4b:45:62:
47:98:a7:0f:90:c5:e4:23:4a:d6:28:73:8a:4d:94:80:bb:07:
26:00:33:d4:aa:b3:f7:84:b0:9d:f0:db:ef:60:13:03:d0:5c:
75:a2:32:ac:a8:c7:1d:b1:39:d3:d6:64:b1:0b:4f:a8:c3:0a:
7a:14:96:ae:31:2d:4d:1d:9d:45:2b:e0:c0:6e:3b:9c:a7:2b:
07:2c:90:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:56:45 2025 by rpki-client