Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.mft
File: ZCeUwtLPoFRji6lQpfZo6HYBQS0.mft (raw, json)
Hash identifier: 4i5m/Kvge13EN1TwDjziRdXBhxIeqyOiMVfBxzQw8fE=
Subject key identifier: BE:B3:27:48:8A:26:9C:47:F3:53:09:0A:17:3B:92:DE:B0:48:E3:C2
Authority key identifier: 64:27:94:C2:D2:CF:A0:54:63:8B:A9:50:A5:F6:68:E8:76:01:41:2D
Certificate issuer: /CN=642794c2d2cfa054638ba950a5f668e87601412d
Certificate serial: 0199FC589684D41D0BB8D90FA7556470C638
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZCeUwtLPoFRji6lQpfZo6HYBQS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 12:01:28 +0000
Manifest this update: Sun 19 Oct 2025 12:01:28 +0000
Manifest next update: Mon 20 Oct 2025 12:01:28 +0000
Files and hashes: 1: 85tLColHz2gs1kcjcHIOLXPmYtQ.roa (hash: 51Me4gSLKgXfTiir1H4AL3W1LXbfR1eI6xG1CchHRO8=)
2: ZCeUwtLPoFRji6lQpfZo6HYBQS0.crl (hash: IiIAEvsSSOC3oq0zMeg6FXDPHIl7IUIdFNmop6uWWig=)
3: b6QMF74wF01wlBWgUywRsmP3cGw.roa (hash: mCNVR2N9fZow4RurrMaom9Uu+qamMdZIjWplYZcfRCk=)
4: gVLVKsEHBgFO0HBzlpPgO1QXFuY.roa (hash: fKAtB5hizqASF48vAvN9nOmMRZOKAzC8UCmGWDZ4vi0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZCeUwtLPoFRji6lQpfZo6HYBQS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:96:84:d4:1d:0b:b8:d9:0f:a7:55:64:70:c6:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=642794c2d2cfa054638ba950a5f668e87601412d
Validity
Not Before: Oct 19 12:01:28 2025 GMT
Not After : Oct 20 12:01:28 2025 GMT
Subject: CN=beb327488a269c47f353090a173b92deb048e3c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6c:ca:d9:ee:92:4b:8e:d2:29:29:47:d6:2e:
40:a0:35:d8:10:63:3d:df:12:ec:8c:eb:5a:1f:3b:
6e:ef:76:38:27:ae:07:c9:55:fd:89:3b:17:8d:8d:
6b:a9:9e:a6:cd:8c:ee:23:04:80:fa:26:9e:03:14:
8a:22:32:0a:5c:36:05:55:6b:1e:31:e2:2b:96:2a:
0c:9a:d0:b6:2a:58:1e:9b:12:97:18:89:c9:3a:41:
d3:68:52:ae:4d:c3:fa:58:30:5e:78:e7:68:98:30:
f9:2b:64:1a:c0:38:5b:05:a5:3b:29:f3:d9:b7:9a:
20:77:1f:a2:7d:0e:fe:54:35:52:8b:76:04:e2:f8:
49:8c:f4:b7:a2:4a:27:36:72:29:e5:09:b2:bc:4f:
29:a9:87:d2:f9:5e:5c:06:21:42:16:f6:2f:c3:da:
bc:2b:81:0c:88:d3:6c:d0:3f:de:e7:f2:ce:b7:d3:
d0:36:56:45:de:a7:08:ee:85:b8:52:81:58:c4:dd:
9f:e1:3a:d5:a8:53:8f:09:e4:d0:a2:06:23:e3:5e:
16:14:35:89:3e:88:ea:41:61:b3:d5:12:9d:cb:30:
57:ca:bd:ca:74:0d:03:46:a0:9f:dc:b4:bc:6b:42:
a4:ca:12:d4:20:7e:b3:d0:ae:64:a1:3c:9c:83:71:
46:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:B3:27:48:8A:26:9C:47:F3:53:09:0A:17:3B:92:DE:B0:48:E3:C2
X509v3 Authority Key Identifier:
keyid:64:27:94:C2:D2:CF:A0:54:63:8B:A9:50:A5:F6:68:E8:76:01:41:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZCeUwtLPoFRji6lQpfZo6HYBQS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:f3:1f:45:3c:f8:c9:dc:fb:53:07:48:9f:2a:9d:c5:6e:ac:
76:58:fb:3d:80:cf:52:4e:58:37:64:8e:4f:fa:bd:10:98:69:
66:ae:1e:f2:65:38:10:a7:df:fc:ba:89:a7:94:66:5a:19:31:
5f:39:0b:c2:22:9f:9e:a7:6e:7a:3f:ae:54:4a:c2:6b:15:67:
42:e0:11:2a:15:5a:7e:17:df:14:d7:22:a6:89:7e:86:43:91:
10:c7:6d:a3:49:0a:40:46:49:40:d3:4a:8d:aa:02:a0:9a:fa:
87:ab:21:70:38:39:c6:ff:f4:df:03:73:41:b0:4e:6b:99:bd:
03:85:30:d1:b8:60:db:cc:70:4c:28:4f:b2:f7:fd:00:8f:a4:
5e:8d:3b:45:e9:6c:e4:91:2a:09:af:ad:2f:f8:8c:a4:85:c6:
51:52:c5:49:ba:f3:bb:b9:1d:f1:3d:b5:70:60:2f:56:28:db:
d9:0e:70:44:89:aa:bf:c3:ea:f4:9d:77:b1:47:cc:86:15:dc:
cf:3b:7a:95:9c:86:64:f3:5e:ad:dd:38:2d:b8:12:90:ce:60:
dd:7b:56:8c:23:5f:cd:98:cf:38:b7:e5:75:ce:67:d2:a0:95:
19:88:b8:08:63:ba:ea:ea:8f:10:11:f5:e2:07:5d:e2:a2:9e:
94:37:ba:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:26:14 2025 by rpki-client