Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/28bde3-a4ca-488d-8061-d38d843bfa1d/1/ZExQ0drfi4SxdP2wWHr7X0Lfil8.mft
File: ZExQ0drfi4SxdP2wWHr7X0Lfil8.mft (raw, json)
Hash identifier: vMEYQxWvIFYafp//M7P7/WJjTLhpXHCDzDv6eT35k64=
Subject key identifier: 3E:45:F6:C0:15:10:2F:B3:02:E6:1F:1F:1E:AF:83:71:68:D0:EE:DE
Authority key identifier: 64:4C:50:D1:DA:DF:8B:84:B1:74:FD:B0:58:7A:FB:5F:42:DF:8A:5F
Certificate issuer: /CN=644c50d1dadf8b84b174fdb0587afb5f42df8a5f
Certificate serial: 0199FB7C8BF37D357A2E23E3F23AAC58BE84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZExQ0drfi4SxdP2wWHr7X0Lfil8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/28bde3-a4ca-488d-8061-d38d843bfa1d/1/ZExQ0drfi4SxdP2wWHr7X0Lfil8.mft
Manifest number: 096F
Signing time: Sun 19 Oct 2025 08:01:07 +0000
Manifest this update: Sun 19 Oct 2025 08:01:07 +0000
Manifest next update: Mon 20 Oct 2025 08:01:07 +0000
Files and hashes: 1: K5gJRaPdUKn9XKhzO7AibxY9CA0.roa (hash: qUxgMl4Hgu/d5oBnuOvT0GW4I1N7zX5/ljI5wWQ4TLY=)
2: ZExQ0drfi4SxdP2wWHr7X0Lfil8.crl (hash: QFhpldKsAhy3jHzvWYWCjnJhr8QhKU3vx6/s+K78GQw=)
3: _U7TKaQkv0gDvtMnKrNnbIWERmc.roa (hash: FZz1mY5/p4ukf0qO7zFoKrsIjV3lp2u1Lai3o16W3qQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/28bde3-a4ca-488d-8061-d38d843bfa1d/1/ZExQ0drfi4SxdP2wWHr7X0Lfil8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/28bde3-a4ca-488d-8061-d38d843bfa1d/1/ZExQ0drfi4SxdP2wWHr7X0Lfil8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZExQ0drfi4SxdP2wWHr7X0Lfil8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:8b:f3:7d:35:7a:2e:23:e3:f2:3a:ac:58:be:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=644c50d1dadf8b84b174fdb0587afb5f42df8a5f
Validity
Not Before: Oct 19 08:01:07 2025 GMT
Not After : Oct 20 08:01:07 2025 GMT
Subject: CN=3e45f6c015102fb302e61f1f1eaf837168d0eede
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:7f:12:f6:b3:26:6a:2e:10:3a:03:db:e1:91:
ab:c4:e4:ae:1c:d1:ec:aa:e9:c9:c6:eb:db:c9:b5:
23:6f:58:e4:65:78:e6:c7:d1:79:07:e6:db:23:19:
48:4a:ea:eb:71:a7:3f:78:77:19:4a:44:8b:db:e5:
07:53:90:b0:e4:2f:5b:bd:2e:1c:ae:06:2e:8c:5e:
66:48:ca:2c:1f:65:e4:bb:9c:cb:06:46:9a:be:a1:
7a:2b:77:0d:12:64:50:bb:25:20:f6:3e:3f:e3:6e:
d3:81:b8:0f:2a:6a:5a:24:e0:78:99:44:37:11:bc:
e1:00:53:c8:48:03:02:e2:b1:8c:40:e8:79:e9:f2:
e9:a2:fa:e6:04:cf:8c:d0:5b:3f:ae:0f:ed:66:09:
01:4c:d7:dc:d0:2c:dc:1b:82:aa:89:9b:94:b0:45:
7b:a2:ae:75:b9:cd:27:6b:24:33:ab:82:69:ef:87:
c0:21:1f:80:41:79:3f:06:fd:38:66:a6:7a:ca:e0:
15:ed:4c:33:af:2a:66:00:ed:d5:47:86:7d:9a:5b:
18:96:8a:6b:c0:6e:43:7a:e5:14:48:38:b4:a8:bf:
9a:5e:2b:0d:55:33:d1:b5:dd:00:50:cb:e2:a0:71:
e4:e5:75:ff:0e:74:4b:16:0c:fb:8e:1b:4f:63:ec:
73:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:45:F6:C0:15:10:2F:B3:02:E6:1F:1F:1E:AF:83:71:68:D0:EE:DE
X509v3 Authority Key Identifier:
keyid:64:4C:50:D1:DA:DF:8B:84:B1:74:FD:B0:58:7A:FB:5F:42:DF:8A:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZExQ0drfi4SxdP2wWHr7X0Lfil8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/28bde3-a4ca-488d-8061-d38d843bfa1d/1/ZExQ0drfi4SxdP2wWHr7X0Lfil8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/28bde3-a4ca-488d-8061-d38d843bfa1d/1/ZExQ0drfi4SxdP2wWHr7X0Lfil8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:7b:6c:15:ec:e3:30:2d:bf:a4:22:32:b1:40:da:81:7e:c5:
9e:55:16:88:ab:bf:96:0e:e6:45:a2:b8:29:53:ca:06:b9:2b:
d4:09:fd:75:39:de:71:a0:6e:90:ca:17:8c:0d:c3:a1:d8:d9:
ea:33:3a:be:f2:69:3d:4c:f1:12:63:96:34:b7:f9:ee:8f:96:
ed:cf:f3:bd:bb:b4:0c:33:92:39:d1:e5:33:e1:4b:dd:41:e2:
ca:4e:aa:b3:e4:cf:7c:dc:d7:02:ed:30:ec:c0:62:15:c4:0f:
de:6f:61:f1:17:0e:ee:c8:ff:e9:0c:4a:02:54:7a:ad:3c:58:
0a:cb:ad:4a:f1:1b:f2:ff:70:58:cc:0f:a7:2d:a2:06:79:24:
ff:a9:5f:f6:df:29:7a:49:d6:75:c8:0a:39:f9:b8:d6:67:a9:
78:c2:02:a6:fb:23:28:ce:ba:4d:0b:01:c3:65:10:e3:12:6c:
f0:14:c3:9c:16:f0:d2:2d:a0:ee:ff:11:b6:c9:84:34:92:1a:
18:90:95:86:a2:a5:f1:13:be:be:36:b9:24:da:d7:ba:f6:8c:
f3:ba:5d:96:dd:65:54:63:ce:e7:30:ee:b5:06:7e:f3:10:14:
f3:8e:e0:9a:4f:e9:8d:2f:63:66:94:8c:ac:b1:f4:99:b7:e0:
5f:6d:1f:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:04 2025 by rpki-client