Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/d796e4-d654-4e7b-84d4-f01a62400821/1/ZP9Bok_EgnG5kjJ6La5aQzve0FA.mft
File: ZP9Bok_EgnG5kjJ6La5aQzve0FA.mft (raw, json)
Hash identifier: omkmfbOTs/ZyadSvRucznlKOuYnR47s0/OYGcJckDRw=
Subject key identifier: FE:45:4A:4E:79:92:2A:13:5A:BC:3B:55:39:1E:ED:51:FE:70:36:DE
Authority key identifier: 64:FF:41:A2:4F:C4:82:71:B9:92:32:7A:2D:AE:5A:43:3B:DE:D0:50
Certificate issuer: /CN=64ff41a24fc48271b992327a2dae5a433bded050
Certificate serial: 0199FC21AA2B8E2324B8E029615106882C8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZP9Bok_EgnG5kjJ6La5aQzve0FA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/d796e4-d654-4e7b-84d4-f01a62400821/1/ZP9Bok_EgnG5kjJ6La5aQzve0FA.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 11:01:28 +0000
Manifest this update: Sun 19 Oct 2025 11:01:28 +0000
Manifest next update: Mon 20 Oct 2025 11:01:28 +0000
Files and hashes: 1: ZP9Bok_EgnG5kjJ6La5aQzve0FA.crl (hash: rbY6dZ/LLL1gc6svNWU10Bv/jONM44B91unvRniEk9Q=)
2: hQBjTq5KMkIiJgnQG8IwJwMqWkc.roa (hash: 2H6xUWWibA2OIWVz4dbFvNnKSleGcdT636P9g8q1NEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/d796e4-d654-4e7b-84d4-f01a62400821/1/ZP9Bok_EgnG5kjJ6La5aQzve0FA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/d796e4-d654-4e7b-84d4-f01a62400821/1/ZP9Bok_EgnG5kjJ6La5aQzve0FA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZP9Bok_EgnG5kjJ6La5aQzve0FA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:aa:2b:8e:23:24:b8:e0:29:61:51:06:88:2c:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64ff41a24fc48271b992327a2dae5a433bded050
Validity
Not Before: Oct 19 11:01:28 2025 GMT
Not After : Oct 20 11:01:28 2025 GMT
Subject: CN=fe454a4e79922a135abc3b55391eed51fe7036de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4f:fe:de:d1:1f:c3:7a:c0:f3:07:37:7f:82:
5c:45:8f:ea:7d:95:9c:5b:e8:16:84:89:4c:34:e8:
4c:41:a9:d1:c4:d3:a7:b6:02:a0:08:38:28:0b:a2:
d2:ad:6d:a6:e5:f8:55:34:42:78:38:39:30:06:95:
4c:17:6b:0b:58:83:6c:5b:8d:ba:8b:92:ef:48:8a:
2e:77:1e:4a:b6:07:25:22:da:0d:15:c9:f2:12:3c:
82:e1:d7:86:f5:d5:e5:39:7a:6d:46:19:e1:f8:7e:
ae:3f:26:07:2b:09:e6:73:af:a2:dd:8b:6c:eb:46:
1e:06:75:7b:93:4f:f5:6f:df:59:7d:34:3d:5b:c8:
0e:cb:5f:79:36:06:6c:be:d6:77:0c:2d:35:43:83:
c0:bb:23:24:1d:5c:97:8b:2e:98:59:94:43:b2:72:
9f:22:42:fd:1b:c3:58:1a:9f:e6:2f:7d:b6:0a:92:
a7:3e:b2:f8:77:eb:51:d0:97:51:d2:b8:d6:03:6c:
59:7a:fe:02:76:8d:ac:85:29:ca:62:db:70:08:5b:
85:cf:b6:33:ff:b2:24:6a:c3:37:83:b4:c0:ea:68:
cb:26:8d:c2:ff:ac:29:a0:de:6e:e0:56:ee:d1:f4:
ae:4a:e8:fb:cc:e2:ec:dd:2e:f0:09:a0:92:7c:45:
cf:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:45:4A:4E:79:92:2A:13:5A:BC:3B:55:39:1E:ED:51:FE:70:36:DE
X509v3 Authority Key Identifier:
keyid:64:FF:41:A2:4F:C4:82:71:B9:92:32:7A:2D:AE:5A:43:3B:DE:D0:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZP9Bok_EgnG5kjJ6La5aQzve0FA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/d796e4-d654-4e7b-84d4-f01a62400821/1/ZP9Bok_EgnG5kjJ6La5aQzve0FA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/d796e4-d654-4e7b-84d4-f01a62400821/1/ZP9Bok_EgnG5kjJ6La5aQzve0FA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:1b:71:81:1a:9d:92:63:8d:1d:87:ed:f2:d1:55:15:ce:89:
8f:cd:e5:73:a8:97:b9:3d:21:af:53:03:2a:99:25:58:97:89:
7a:a5:3e:d5:56:d0:11:9d:9d:b3:9e:4e:66:3c:8b:f1:f2:9e:
18:40:82:6a:14:4c:19:67:49:0e:3f:3e:79:81:f8:52:25:68:
2f:75:af:e0:65:95:54:d2:4c:8d:71:45:28:d2:ea:b7:c8:46:
fb:be:8c:72:d4:d0:e2:d8:c7:72:73:8c:b3:61:a1:d5:aa:d2:
73:24:16:75:13:65:12:1d:09:4e:91:ef:d2:1e:1f:7f:e8:7d:
cb:11:eb:30:c9:61:d7:e3:25:67:08:e3:5c:25:e0:9b:39:a8:
f0:0a:ba:4d:fc:1c:f4:0e:53:ee:86:78:fe:97:8b:3a:15:d5:
70:35:c5:e9:3d:48:e9:e5:1b:7d:d0:26:45:36:67:e4:8b:52:
0f:f8:17:55:92:3c:83:9c:50:9e:97:dc:ab:82:46:31:e3:3b:
dd:63:e7:e9:a6:cc:22:1b:22:8e:2c:8b:9b:b4:2a:c1:e8:27:
1d:e7:73:19:6b:2b:75:30:c2:e0:5d:db:8d:11:00:cc:a7:85:
0a:17:e9:3e:ca:29:5c:67:a0:99:4f:31:e7:25:89:48:7d:fe:
a6:c8:fe:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:00:00 2025 by rpki-client