
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/9904b3-8ca0-4946-8766-2d13cf9b45c0/1/ZZbw3BZbfNIJAispZINMRedNISw.mft
File: ZZbw3BZbfNIJAispZINMRedNISw.mft (raw, json)
Hash identifier: wb4Yxbl5Bd074TKHD9yz3xxjS4hUU7I7wFlwJp9KsgI=
Subject key identifier: E9:D4:18:79:8C:6A:23:E1:FC:F7:A0:AF:B5:1A:4C:3F:3E:BF:FD:D7
Authority key identifier: 65:96:F0:DC:16:5B:7C:D2:09:02:2B:29:64:83:4C:45:E7:4D:21:2C
Certificate issuer: /CN=6596f0dc165b7cd209022b2964834c45e74d212c
Certificate serial: 0199FC217011319C0EA69AA363E3453D158A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZZbw3BZbfNIJAispZINMRedNISw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/9904b3-8ca0-4946-8766-2d13cf9b45c0/1/ZZbw3BZbfNIJAispZINMRedNISw.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 11:01:13 +0000
Manifest this update: Sun 19 Oct 2025 11:01:13 +0000
Manifest next update: Mon 20 Oct 2025 11:01:13 +0000
Files and hashes: 1: 2iga0nlk79hsiXYssBRVEJUMzCk.roa (hash: zNjDqRkr/NBAAcHU26E2dhZjP52AAgoYr8bc94c0dmE=)
2: ZZbw3BZbfNIJAispZINMRedNISw.crl (hash: /IszTvFtCAI312dxOu65+Q2GNjxDboWGXAZnUYJc1SU=)
3: fkt0k7xGZr7xPzs_ROD74bwXerU.roa (hash: ULOdEt3VdfcvW7gsCxZ+iNOypPoRvVALloBYfPcdh1o=)
4: v1YTSmOUHdktFqFZ-hI7t6WN2fU.roa (hash: tWh0zo1fGBbY4LR0IeI+HXzSMUKkzsrBwh77hMlS6LM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/9904b3-8ca0-4946-8766-2d13cf9b45c0/1/ZZbw3BZbfNIJAispZINMRedNISw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/9904b3-8ca0-4946-8766-2d13cf9b45c0/1/ZZbw3BZbfNIJAispZINMRedNISw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZZbw3BZbfNIJAispZINMRedNISw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:70:11:31:9c:0e:a6:9a:a3:63:e3:45:3d:15:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6596f0dc165b7cd209022b2964834c45e74d212c
Validity
Not Before: Oct 19 11:01:13 2025 GMT
Not After : Oct 20 11:01:13 2025 GMT
Subject: CN=e9d418798c6a23e1fcf7a0afb51a4c3f3ebffdd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:69:e9:7a:6c:1d:1e:8c:e8:f1:9b:be:32:28:
05:6c:c4:9d:6d:5c:ad:cf:a5:78:c2:99:7c:c6:ab:
c1:e1:8a:1d:f5:ea:0a:9a:82:e7:e8:60:95:62:16:
35:4e:af:4f:de:35:14:1f:0c:52:e7:ce:1b:dd:1c:
9e:d3:7d:a3:3b:05:df:38:1a:da:1f:90:b8:7a:8e:
67:9e:5b:6f:ff:68:bb:bf:d9:ae:33:7e:98:00:81:
ae:9d:9b:29:f5:3a:e0:bf:d5:02:7c:50:ff:c1:c8:
54:a2:b9:bf:87:d5:95:ab:36:51:99:29:b7:8c:47:
12:2c:68:58:99:72:fa:51:6b:ec:60:5c:22:55:77:
20:e1:ad:2d:26:b7:16:e3:72:28:58:88:1e:0e:e3:
19:b1:a2:aa:b7:40:4f:50:3e:26:f4:b3:35:88:fa:
88:c2:7e:bc:d9:96:ce:3c:8a:0e:a9:b2:e2:a5:ef:
86:fa:75:84:c1:4a:4e:87:43:bb:30:14:79:cf:52:
1a:47:b3:eb:ef:8d:dc:05:45:61:d1:43:2e:52:92:
9e:f1:b3:3c:cf:9f:ba:f3:e5:d5:78:60:1f:ea:13:
af:bd:6c:e7:fa:3f:7e:bc:5d:c6:74:77:f3:60:a2:
ea:ac:ad:15:11:cc:a2:8f:e5:50:5d:3e:be:dd:cd:
cc:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:D4:18:79:8C:6A:23:E1:FC:F7:A0:AF:B5:1A:4C:3F:3E:BF:FD:D7
X509v3 Authority Key Identifier:
keyid:65:96:F0:DC:16:5B:7C:D2:09:02:2B:29:64:83:4C:45:E7:4D:21:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZbw3BZbfNIJAispZINMRedNISw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9904b3-8ca0-4946-8766-2d13cf9b45c0/1/ZZbw3BZbfNIJAispZINMRedNISw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9904b3-8ca0-4946-8766-2d13cf9b45c0/1/ZZbw3BZbfNIJAispZINMRedNISw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:6a:99:c7:68:14:75:ec:6e:3b:5e:cc:45:af:d7:01:6f:e5:
2f:42:55:97:90:b0:a6:6e:39:aa:48:83:b3:81:60:1a:a9:1c:
7e:65:e5:f6:10:0f:31:2c:32:bf:f9:9c:ff:99:0d:1a:96:d8:
23:5a:58:5a:7f:8b:44:b0:18:65:ab:e9:72:9b:01:f4:1d:2c:
e1:af:dd:b8:93:50:a0:c5:f4:d1:4f:30:ea:35:69:f1:68:bc:
47:23:0e:0d:ca:c4:00:f5:22:48:4e:94:0e:7b:20:5b:e5:2a:
b1:20:f6:3e:00:cc:95:c6:cf:cd:ba:16:bd:94:d3:bb:fa:98:
92:ed:ff:87:7c:67:bb:ce:c2:ea:ee:7a:e6:d6:96:0a:aa:2e:
a7:9c:5e:c5:55:e5:1a:c9:ba:28:76:a6:87:9e:dc:06:07:59:
75:f6:50:5e:93:42:47:71:d7:8d:65:00:ae:cc:e2:98:4e:02:
a1:2b:e7:95:ce:ec:be:a2:b5:a6:72:e8:78:72:91:3c:8a:e0:
3d:17:a6:5c:8e:5d:19:23:8b:72:8b:72:cc:71:19:39:e4:e2:
03:d1:6d:5b:19:8b:4d:61:7b:6a:d1:f6:ea:d6:d3:72:26:b0:
57:96:2d:de:df:9f:94:c7:9d:f5:9a:90:58:10:35:2f:2b:6e:
f7:d1:38:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:06:28 2025 by rpki-client