Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft
File: zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft (raw, json)
Hash identifier: gM6ERYt1ZHlu75TbhU+HewKECSMnN1C+0TOSQ4hWTro=
Subject key identifier: 6E:12:83:B6:A2:AD:93:F8:0F:18:15:7B:31:38:B3:BA:65:13:FB:CE
Authority key identifier: CE:38:47:66:75:10:F4:F2:E5:9B:B1:B3:94:AE:27:E8:DA:D0:DC:97
Certificate issuer: /CN=ce3847667510f4f2e59bb1b394ae27e8dad0dc97
Certificate serial: 0199FC591046884E2B0166EA5534E0B8CD99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft
Manifest number: 0692
Signing time: Sun 19 Oct 2025 12:01:59 +0000
Manifest this update: Sun 19 Oct 2025 12:01:59 +0000
Manifest next update: Mon 20 Oct 2025 12:01:59 +0000
Files and hashes: 1: _qzv0Dh2xEy9ZuzGpQ3k-hlux2A.roa (hash: b9D9j34bnNP+dbzCYrw3bzH+UNVKXeP8YIrlGzrGPLw=)
2: g3im9InQw-S7o9FDYMfxSwOiyqI.roa (hash: aOFPtdFS5g/b24jgEdPoeVJ2T4W2zzLVdnuL77f+Bz0=)
3: zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.crl (hash: 66MKsfcwxKRbfCXpcYy3/a0Dz6K54QbCl3YOJ8NUacI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:59:10:46:88:4e:2b:01:66:ea:55:34:e0:b8:cd:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce3847667510f4f2e59bb1b394ae27e8dad0dc97
Validity
Not Before: Oct 19 12:01:59 2025 GMT
Not After : Oct 20 12:01:59 2025 GMT
Subject: CN=6e1283b6a2ad93f80f18157b3138b3ba6513fbce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:20:c7:97:46:b2:3a:5f:0e:84:98:9b:2d:b5:
fc:bb:da:a8:1d:00:e0:87:26:01:49:a4:94:e5:28:
1b:42:69:c8:46:2d:08:75:7a:3a:35:91:f2:bb:da:
67:1e:fa:1c:a1:49:38:d1:e3:49:83:63:11:0c:b4:
39:41:94:55:04:d0:f6:06:25:b6:6d:ef:96:74:c6:
da:94:82:5b:34:86:73:3f:98:ef:ff:c6:02:62:1c:
bb:71:75:9b:2e:a8:70:bb:03:0e:19:ff:76:cd:cb:
4a:55:30:76:82:7f:56:31:89:ac:ab:21:f9:3f:41:
da:2e:0e:8d:2e:a6:91:d3:4c:a0:46:66:16:ee:f4:
dd:33:47:37:99:f5:0b:54:b0:4b:8e:73:be:46:0e:
4f:52:ce:14:79:4f:9f:8a:ce:2b:e4:d8:c5:ca:1a:
e3:af:25:9c:2c:45:c4:0f:7d:67:6d:39:c0:e9:6b:
46:22:86:0f:10:ea:47:b1:4c:b6:86:7f:9a:68:fa:
0e:61:43:1e:86:79:0e:4e:08:c0:f5:8f:d8:fe:ce:
1e:47:e4:9f:ab:13:e5:ff:bc:cc:66:96:a4:12:66:
29:a4:96:0d:52:2a:49:5d:0c:2b:81:5a:08:2a:8f:
c9:87:2d:d1:a5:3e:bb:c5:da:fc:1e:bb:4c:7b:64:
bd:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:12:83:B6:A2:AD:93:F8:0F:18:15:7B:31:38:B3:BA:65:13:FB:CE
X509v3 Authority Key Identifier:
keyid:CE:38:47:66:75:10:F4:F2:E5:9B:B1:B3:94:AE:27:E8:DA:D0:DC:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:e6:09:30:35:b2:b7:21:7b:94:b0:8b:4a:ad:5f:a3:57:5e:
87:ef:84:1d:4d:50:46:37:fe:6c:f1:c2:e2:2f:71:ab:b1:ca:
da:21:5c:d0:66:f2:26:a1:f5:40:cb:73:10:be:90:8f:3b:8c:
83:69:ca:3c:76:03:ec:7d:a6:67:d7:18:2d:cd:67:9e:35:82:
97:0c:f5:a3:2c:7c:e1:e0:c9:93:11:90:ea:86:f3:0a:e2:dc:
3f:0a:48:cb:cf:24:15:f3:f4:a0:e4:f4:4f:2f:6b:0c:91:38:
f3:56:76:19:af:6d:e2:2d:3d:1b:4b:f7:ef:5a:2a:6e:57:a8:
34:fe:18:00:20:39:7f:23:dd:58:c5:8c:45:d5:c1:90:e9:29:
86:74:3c:7c:eb:ed:a9:11:ed:19:1c:21:e1:8d:f9:49:ac:f2:
dc:fa:26:a0:11:b9:ba:fe:16:2f:ae:34:4c:41:e4:68:cf:60:
38:c4:2c:0f:cd:a6:17:c1:4e:35:77:ee:7a:9d:dd:25:9a:58:
7b:19:55:f2:0a:5a:f3:54:90:e9:63:2d:e3:2d:11:f0:79:99:
d5:39:17:89:ed:df:b2:a5:eb:cf:69:c1:08:91:4f:5d:6a:2b:
81:b0:b2:cb:84:5f:24:82:cc:45:16:f2:ec:05:9a:d8:f2:11:
db:37:13:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:30:28 2025 by rpki-client