Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/d3b263-b0f1-4a6b-912e-373dda43f792/1/zisQ2JtVN5E1AxJ-uHImr7idGy0.mft
File: zisQ2JtVN5E1AxJ-uHImr7idGy0.mft (raw, json)
Hash identifier: 8wsY+VtVCXxJ3DbRS6XrNuUSxTkbIWzqfHEnl1GoxNY=
Subject key identifier: CC:B4:1E:9F:8D:6B:A7:A7:40:2E:41:CD:4A:FC:8D:66:7A:05:C4:F6
Authority key identifier: CE:2B:10:D8:9B:55:37:91:35:03:12:7E:B8:72:26:AF:B8:9D:1B:2D
Certificate issuer: /CN=ce2b10d89b5537913503127eb87226afb89d1b2d
Certificate serial: 0199FC8F542C53F40C4E246EFD028B2EE08B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zisQ2JtVN5E1AxJ-uHImr7idGy0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/d3b263-b0f1-4a6b-912e-373dda43f792/1/zisQ2JtVN5E1AxJ-uHImr7idGy0.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 13:01:15 +0000
Manifest this update: Sun 19 Oct 2025 13:01:15 +0000
Manifest next update: Mon 20 Oct 2025 13:01:15 +0000
Files and hashes: 1: puw08h74TtFA6oc3LqSJELivWac.roa (hash: 6izoAc/QEsoM8sPaZbI92YMt+TMYy+EV7r4bwPmo4dA=)
2: zisQ2JtVN5E1AxJ-uHImr7idGy0.crl (hash: 2Qiu9EvOg8LTue+pf/o+G7KvQFaJsusNm1PPchkMqCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/d3b263-b0f1-4a6b-912e-373dda43f792/1/zisQ2JtVN5E1AxJ-uHImr7idGy0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/d3b263-b0f1-4a6b-912e-373dda43f792/1/zisQ2JtVN5E1AxJ-uHImr7idGy0.mft
rsync://rpki.ripe.net/repository/DEFAULT/zisQ2JtVN5E1AxJ-uHImr7idGy0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 13:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:54:2c:53:f4:0c:4e:24:6e:fd:02:8b:2e:e0:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce2b10d89b5537913503127eb87226afb89d1b2d
Validity
Not Before: Oct 19 13:01:15 2025 GMT
Not After : Oct 20 13:01:15 2025 GMT
Subject: CN=ccb41e9f8d6ba7a7402e41cd4afc8d667a05c4f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4c:a3:f4:90:9c:78:bb:02:dc:ac:8f:d4:75:
22:16:1d:f8:09:0d:54:c4:af:3f:53:27:b8:6f:a2:
39:60:2d:1d:29:3c:10:46:06:b6:ea:c7:cf:f2:5d:
07:a8:43:db:7e:ef:c7:22:80:44:e4:a5:ec:3f:3d:
db:84:6f:f0:ed:96:16:7b:83:dd:4b:d3:fa:82:8a:
d0:95:77:e6:ab:98:c5:be:20:95:cc:07:9e:ff:f5:
e7:80:7f:46:08:be:41:aa:6f:8e:2e:e7:e1:9a:19:
85:03:13:5f:ab:37:98:6a:78:e9:3a:db:9d:25:60:
4c:0f:c7:81:6c:d6:f8:c1:10:ba:c9:cb:64:53:68:
57:b8:8e:cd:aa:3d:2e:33:33:1f:78:e9:55:2f:6e:
62:63:50:92:d9:51:04:cf:0a:1c:43:7a:d0:c0:e6:
2d:f7:f5:85:1b:07:e5:9a:97:bb:a7:a0:f1:89:fe:
1c:ae:86:33:f4:8d:4b:d3:f8:1f:ad:7a:e6:49:c9:
a2:c6:e1:e0:f3:7b:56:df:fb:30:07:f8:b3:8b:cd:
52:11:7a:79:94:06:ce:e7:8d:90:9b:1c:78:6d:d4:
56:da:96:4e:1e:9b:30:97:9e:79:48:52:19:f0:ef:
3c:6b:2b:26:3f:13:b6:09:41:d8:ba:68:3e:65:66:
fc:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:B4:1E:9F:8D:6B:A7:A7:40:2E:41:CD:4A:FC:8D:66:7A:05:C4:F6
X509v3 Authority Key Identifier:
keyid:CE:2B:10:D8:9B:55:37:91:35:03:12:7E:B8:72:26:AF:B8:9D:1B:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zisQ2JtVN5E1AxJ-uHImr7idGy0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d3b263-b0f1-4a6b-912e-373dda43f792/1/zisQ2JtVN5E1AxJ-uHImr7idGy0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d3b263-b0f1-4a6b-912e-373dda43f792/1/zisQ2JtVN5E1AxJ-uHImr7idGy0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:d5:1c:73:d0:ce:f8:01:ea:40:b1:00:5f:a1:33:bd:07:ed:
28:96:c6:e4:b6:5b:ef:75:8e:75:81:58:74:8b:54:3f:02:ef:
72:f3:25:f9:ed:50:bd:10:a2:f9:e7:93:6f:89:13:a7:f9:41:
1a:f9:2b:91:4a:a5:d9:29:e7:d7:5d:6a:03:19:c3:70:a1:6d:
f7:e9:6b:16:9e:56:be:6e:f6:a4:75:58:ba:8e:df:cb:eb:85:
19:94:ff:7d:a0:1c:5a:61:e4:17:6f:8d:fa:4d:b3:77:7b:d0:
21:3b:e9:31:da:45:ab:c5:60:ea:d4:35:2e:9a:35:a3:a1:f9:
d1:8f:ac:f8:35:f4:6e:d7:ce:11:50:b2:90:8d:a5:f0:21:ea:
5d:cf:f6:53:d4:59:c4:62:45:56:c7:22:98:2c:77:ed:4c:41:
ac:4d:f3:02:bc:f4:82:e7:cd:10:77:c1:65:f2:e3:cf:81:c6:
57:60:f5:6e:79:dd:cd:7b:11:6a:c9:36:6a:e3:f1:54:43:82:
de:75:cc:1c:e4:ed:7c:c7:8b:a3:38:e4:07:1c:a9:88:69:06:
2e:b9:d2:00:c2:c5:ea:4c:96:2f:19:9a:72:2e:83:22:ac:93:
1b:f5:f4:da:13:9f:c8:e9:0a:04:ad:56:aa:1e:79:1d:d5:e3:
b1:68:75:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:08:21 2025 by rpki-client