Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/de190b-7335-4816-a711-dccad0211327/1/ZxR2lP0X6y0W_tf3NdehHd1FGWM.mft
File: ZxR2lP0X6y0W_tf3NdehHd1FGWM.mft (raw, json)
Hash identifier: gu03NAz8J1GEepQfYRi8bqJmnmMG1zZquVLIXDqvK3E=
Subject key identifier: 00:24:F4:FE:14:03:CA:AA:87:F0:20:CD:D1:73:E1:9A:A4:CD:D9:AD
Authority key identifier: 67:14:76:94:FD:17:EB:2D:16:FE:D7:F7:35:D7:A1:1D:DD:45:19:63
Certificate issuer: /CN=67147694fd17eb2d16fed7f735d7a11ddd451963
Certificate serial: 0199FC214890411359388501993D377F05A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZxR2lP0X6y0W_tf3NdehHd1FGWM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/de190b-7335-4816-a711-dccad0211327/1/ZxR2lP0X6y0W_tf3NdehHd1FGWM.mft
Manifest number: 1225
Signing time: Sun 19 Oct 2025 11:01:03 +0000
Manifest this update: Sun 19 Oct 2025 11:01:03 +0000
Manifest next update: Mon 20 Oct 2025 11:01:03 +0000
Files and hashes: 1: W5Hmap82286bMvYRGfhj5P6hiJY.roa (hash: /qhhKBqlDLllBtHRejTtA1t4Bm+9enZEcvJRIbXk7e8=)
2: ZxR2lP0X6y0W_tf3NdehHd1FGWM.crl (hash: N85ziiM7J/BfuHwyapac5/HZEZnKLHGIaNxoIX2t7V8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/de190b-7335-4816-a711-dccad0211327/1/ZxR2lP0X6y0W_tf3NdehHd1FGWM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/de190b-7335-4816-a711-dccad0211327/1/ZxR2lP0X6y0W_tf3NdehHd1FGWM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZxR2lP0X6y0W_tf3NdehHd1FGWM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:48:90:41:13:59:38:85:01:99:3d:37:7f:05:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67147694fd17eb2d16fed7f735d7a11ddd451963
Validity
Not Before: Oct 19 11:01:03 2025 GMT
Not After : Oct 20 11:01:03 2025 GMT
Subject: CN=0024f4fe1403caaa87f020cdd173e19aa4cdd9ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7d:e5:4b:19:b4:6c:45:d6:bc:86:e8:6b:cd:
f0:7f:b5:d0:8c:79:ab:fd:0f:b0:b7:f7:c2:bf:2e:
bb:84:c9:f6:79:1f:0f:0e:4a:19:b6:2c:41:59:10:
b5:d5:25:de:91:16:65:37:5c:58:1f:98:6e:72:40:
e8:a8:90:b3:a8:b8:ae:12:79:8a:8c:d7:dd:eb:33:
9c:17:de:f7:14:f0:b8:74:19:4a:2b:15:4d:88:fc:
89:76:4a:d8:88:e5:db:85:53:fa:42:a8:1d:40:58:
39:c7:90:3b:56:22:2c:4c:ed:ca:1a:53:98:a7:bd:
ad:bf:fc:22:6d:c8:cf:3d:7f:f1:54:d7:b1:f4:13:
d9:f4:1f:70:51:69:6b:1d:03:74:60:73:b1:b2:be:
04:a1:d3:26:68:7b:c0:04:06:ee:f0:e7:ea:12:b1:
6b:82:26:ae:37:34:fb:e4:04:62:6f:8e:6b:9f:94:
c0:6e:4f:19:83:db:23:5e:3e:41:49:99:07:30:db:
38:82:e9:df:86:cc:b8:b8:26:31:b8:2f:fb:45:88:
f1:88:b2:3c:9b:ed:7d:08:b2:92:59:93:52:9b:91:
94:f4:2b:ae:b4:62:df:bb:e4:8e:e7:d2:dd:0a:04:
cc:64:c7:09:ee:86:3b:68:82:c0:fc:6c:50:8f:eb:
9a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:24:F4:FE:14:03:CA:AA:87:F0:20:CD:D1:73:E1:9A:A4:CD:D9:AD
X509v3 Authority Key Identifier:
keyid:67:14:76:94:FD:17:EB:2D:16:FE:D7:F7:35:D7:A1:1D:DD:45:19:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZxR2lP0X6y0W_tf3NdehHd1FGWM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/de190b-7335-4816-a711-dccad0211327/1/ZxR2lP0X6y0W_tf3NdehHd1FGWM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/de190b-7335-4816-a711-dccad0211327/1/ZxR2lP0X6y0W_tf3NdehHd1FGWM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:6f:c2:b9:ac:34:3e:bc:7a:6d:cb:5e:f5:d4:57:a9:e7:79:
e4:f6:de:91:0e:09:bd:d0:af:60:51:c1:b4:d8:5c:2e:4c:5e:
7e:dc:c1:07:7f:f4:fb:d1:8d:05:9e:ba:b9:75:57:67:d8:f3:
10:9e:68:e6:49:f1:dc:3c:30:43:c6:67:c2:b1:a4:37:b9:a6:
b1:89:ce:cc:1d:fc:c3:d3:ac:14:5b:cf:1c:3a:97:72:1e:02:
95:37:c9:b6:3d:3c:6e:a1:db:83:ef:d8:f8:70:fa:b2:2d:a2:
fc:35:ae:09:1c:3f:88:bd:98:c9:d3:0e:61:55:a4:20:c9:65:
47:df:2d:fd:a4:7e:73:f4:66:73:c6:b8:1a:d3:93:9c:26:ac:
b7:b3:c1:eb:70:dd:78:9f:66:3c:ee:03:07:6c:78:35:0d:34:
7d:05:cc:68:92:37:dc:54:30:74:84:14:bc:60:a2:76:4a:10:
18:45:6b:83:e1:95:42:7f:71:38:0b:c0:5e:a2:5c:d8:e0:9a:
b7:99:75:7a:0c:28:1c:8b:94:a9:f4:b6:13:c1:73:e9:ab:db:
31:b5:0c:6d:09:8c:aa:14:e9:94:c5:15:b8:d5:16:8e:61:a2:
a8:34:03:19:f3:c7:6a:c2:ac:dc:8a:c2:0c:5a:ae:59:e8:04:
ed:fb:7e:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:09:43 2025 by rpki-client