
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.mft
File: zHrEehn2b0GDl-6l_vFaB_8sACM.mft (raw, json)
Hash identifier: Z4zuwXXeCbSVTd2yN1uy+aYSnxgQUT/MLz3ftdY06Kk=
Subject key identifier: 99:38:C1:AB:C9:2A:1A:20:80:89:3E:FC:AD:9E:28:2C:55:50:CC:BE
Authority key identifier: CC:7A:C4:7A:19:F6:6F:41:83:97:EE:A5:FE:F1:5A:07:FF:2C:00:23
Certificate issuer: /CN=cc7ac47a19f66f418397eea5fef15a07ff2c0023
Certificate serial: 0199FBEB62F5051AC690CFD8D222CE54D483
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zHrEehn2b0GDl-6l_vFaB_8sACM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 10:02:11 +0000
Manifest this update: Sun 19 Oct 2025 10:02:11 +0000
Manifest next update: Mon 20 Oct 2025 10:02:11 +0000
Files and hashes: 1: 67RitCBEehLxJhsm7693l29x0Rs.roa (hash: EB1M/ZAO+oOFucZBilmgdoi7GfXpFnwu8Kuu/wM/CCw=)
2: r2RlHTThmtNG4nl2-ZXIiVZ51nQ.roa (hash: GKWFo62wVPaicbH3wRKatj9Dg7f4fzo4X4faRV/0xFc=)
3: zHrEehn2b0GDl-6l_vFaB_8sACM.crl (hash: ao5I+onrVQBXHDGXuVnwUkc8w7IyOHarb2oLIf+52aQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.mft
rsync://rpki.ripe.net/repository/DEFAULT/zHrEehn2b0GDl-6l_vFaB_8sACM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:62:f5:05:1a:c6:90:cf:d8:d2:22:ce:54:d4:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc7ac47a19f66f418397eea5fef15a07ff2c0023
Validity
Not Before: Oct 19 10:02:11 2025 GMT
Not After : Oct 20 10:02:11 2025 GMT
Subject: CN=9938c1abc92a1a2080893efcad9e282c5550ccbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:f6:41:4d:bd:22:c7:a8:21:48:27:db:a3:f8:
05:32:8e:eb:e0:73:0f:ff:4d:13:cf:0d:16:d1:64:
a1:b7:cf:61:6a:4f:57:bf:a6:d0:de:f0:cb:54:49:
64:63:d7:bb:b9:aa:a1:b4:b8:e4:f5:f6:fa:53:eb:
1e:ea:16:e2:85:7b:7e:fa:bb:36:f8:a6:84:9d:1f:
c8:a6:e0:9b:52:2d:6b:13:8a:55:c2:0a:9e:cc:97:
ec:8b:04:15:a5:d0:6d:d3:cc:ba:35:01:a8:45:e5:
df:1e:c9:aa:cc:81:d4:10:5b:34:2a:6f:28:2d:9b:
5a:7b:05:db:57:6d:22:6a:3a:bd:81:c5:1c:45:c3:
31:ab:9b:68:d6:70:34:8c:fb:d1:09:42:f1:56:b1:
98:42:9e:cf:40:95:a8:f0:f3:8b:16:37:d1:d9:3b:
0e:e4:97:0a:df:ca:f7:18:33:22:c8:a6:e1:9d:8b:
a1:5d:4a:d2:5a:cf:76:57:e6:1e:84:ed:5a:7d:43:
fa:00:36:55:16:43:8f:52:ea:75:94:ef:5e:8c:37:
e7:49:aa:6e:da:e0:1a:7a:ec:fa:5e:25:14:35:93:
a0:cd:bd:15:85:bf:66:0f:9e:19:14:d8:01:b5:85:
9f:e0:ad:fd:2c:0a:fa:96:26:fd:04:4f:55:5c:72:
c9:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:38:C1:AB:C9:2A:1A:20:80:89:3E:FC:AD:9E:28:2C:55:50:CC:BE
X509v3 Authority Key Identifier:
keyid:CC:7A:C4:7A:19:F6:6F:41:83:97:EE:A5:FE:F1:5A:07:FF:2C:00:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zHrEehn2b0GDl-6l_vFaB_8sACM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:49:7a:40:db:7a:3e:6e:86:02:70:dd:95:d6:74:51:3b:39:
d2:4d:11:db:ed:f8:b3:f2:46:c8:e6:b2:da:c5:64:86:6f:ac:
fe:7b:25:3f:ce:b5:ee:22:f0:65:29:1f:e2:92:cd:cd:46:0d:
0f:e2:06:7e:17:c7:67:02:c6:73:9c:22:c7:06:94:98:59:92:
35:d2:a9:1f:c1:a1:ca:7b:54:0e:be:cb:02:d1:57:8b:41:13:
a1:e6:1c:06:6e:71:02:ab:92:e8:23:19:32:46:b9:e7:6c:3a:
b8:9c:bb:f4:9e:bd:61:0f:95:27:3b:1a:0e:ae:b1:0e:bf:12:
f5:83:c7:b5:03:bf:08:91:21:09:d5:33:03:98:9b:c2:04:2f:
2e:ed:9d:c8:30:d1:bb:c7:70:95:7c:10:34:5d:cf:cd:e1:3a:
5b:54:a4:c8:d5:97:cb:26:89:f7:96:7c:ec:8d:85:dc:e0:30:
cc:11:44:7e:49:b7:33:8f:15:4a:da:21:19:99:9d:02:7a:16:
28:5b:bc:55:05:dd:6e:85:5a:ea:17:87:7c:9e:f3:94:1a:27:
13:5e:63:45:aa:6c:28:4b:b1:e9:43:d0:a1:a0:28:73:fb:41:
da:16:85:13:45:9b:57:07:c2:2a:68:55:2f:38:f5:23:ff:b9:
08:02:03:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:07:19 2025 by rpki-client