Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/763921-3cd7-466b-864b-188c4a78cd62/1/ZmJmIwhObPEWZ0o_0KmVHKwN7cA.mft
File: ZmJmIwhObPEWZ0o_0KmVHKwN7cA.mft (raw, json)
Hash identifier: kdDqEkglolf0sTHSKc/TeQbb5yQBQeMwLYirBFK7yXw=
Subject key identifier: B9:2A:4A:57:39:29:19:41:87:E2:FC:2F:96:23:CC:DD:C0:F9:AF:2D
Authority key identifier: 66:62:66:23:08:4E:6C:F1:16:67:4A:3F:D0:A9:95:1C:AC:0D:ED:C0
Certificate issuer: /CN=66626623084e6cf116674a3fd0a9951cac0dedc0
Certificate serial: 0199FCC657ABA3A4F0860657D9566E191F68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZmJmIwhObPEWZ0o_0KmVHKwN7cA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/763921-3cd7-466b-864b-188c4a78cd62/1/ZmJmIwhObPEWZ0o_0KmVHKwN7cA.mft
Manifest number: 14C2
Signing time: Sun 19 Oct 2025 14:01:20 +0000
Manifest this update: Sun 19 Oct 2025 14:01:20 +0000
Manifest next update: Mon 20 Oct 2025 14:01:20 +0000
Files and hashes: 1: CvkJme1LUR6Yylremh6T0ANylCI.roa (hash: 5zy6xol1m9FQbb/9TEgVPc4ZpyQ53XwKiYadQ98VX1U=)
2: ZmJmIwhObPEWZ0o_0KmVHKwN7cA.crl (hash: gMe8+wqMvuQHxgqg8DqLSonSlooIm3duA2WtnBFSJ14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/763921-3cd7-466b-864b-188c4a78cd62/1/ZmJmIwhObPEWZ0o_0KmVHKwN7cA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/763921-3cd7-466b-864b-188c4a78cd62/1/ZmJmIwhObPEWZ0o_0KmVHKwN7cA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZmJmIwhObPEWZ0o_0KmVHKwN7cA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:57:ab:a3:a4:f0:86:06:57:d9:56:6e:19:1f:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66626623084e6cf116674a3fd0a9951cac0dedc0
Validity
Not Before: Oct 19 14:01:20 2025 GMT
Not After : Oct 20 14:01:20 2025 GMT
Subject: CN=b92a4a573929194187e2fc2f9623ccddc0f9af2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c3:0a:fd:7c:03:3a:52:1a:a6:01:51:9b:0a:
e4:b5:8c:b5:ab:8b:29:4f:77:ee:2d:99:24:e0:82:
26:fd:99:66:5b:57:74:be:3f:f4:98:69:a5:29:b7:
00:47:54:08:7a:85:dc:2c:14:6b:95:22:26:ad:77:
51:90:09:8c:fb:ed:70:1f:db:7f:34:6b:6d:48:53:
4a:26:07:08:dd:69:ef:91:8a:34:24:15:5b:ff:81:
fd:41:2d:15:e7:ee:8c:3a:be:55:bb:fd:09:c7:34:
ac:51:9c:39:16:cf:14:66:69:10:67:8f:e9:47:9f:
32:5b:fe:52:e8:ce:e1:00:c4:dc:d0:3e:d4:bc:94:
93:1d:81:89:55:5f:2b:1f:ba:09:d5:f7:b8:6c:15:
bc:17:12:77:47:48:87:ac:04:91:a8:e5:e7:ea:64:
d5:23:e6:ed:54:28:7f:bd:22:28:51:84:49:dc:5e:
a3:31:c2:b3:56:93:e6:ca:c0:d7:42:6b:1d:56:50:
88:b5:13:58:f8:11:0f:1b:b2:5d:8b:a9:2d:e2:9b:
c6:22:25:3f:e1:a5:67:32:e7:32:1d:9b:46:3b:9f:
5e:28:90:6e:fb:22:5a:96:2b:1b:ca:e2:98:f6:32:
c9:1d:14:21:5b:30:06:55:e6:f1:8e:fe:71:75:d5:
81:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:2A:4A:57:39:29:19:41:87:E2:FC:2F:96:23:CC:DD:C0:F9:AF:2D
X509v3 Authority Key Identifier:
keyid:66:62:66:23:08:4E:6C:F1:16:67:4A:3F:D0:A9:95:1C:AC:0D:ED:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmJmIwhObPEWZ0o_0KmVHKwN7cA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/763921-3cd7-466b-864b-188c4a78cd62/1/ZmJmIwhObPEWZ0o_0KmVHKwN7cA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/763921-3cd7-466b-864b-188c4a78cd62/1/ZmJmIwhObPEWZ0o_0KmVHKwN7cA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:82:35:96:5b:e7:f5:0f:a1:1f:11:e8:8f:bb:d5:41:a0:22:
22:44:e3:71:15:c4:65:9c:d9:33:02:e4:e5:ca:a1:48:bc:d7:
cf:c9:05:31:7f:54:32:45:f1:a0:60:66:85:60:22:be:9e:6d:
9c:50:33:be:36:7d:5c:6c:3f:a9:b2:47:b0:d6:73:b7:c0:a2:
c7:0a:3e:60:2c:fd:f7:cd:9e:68:10:ac:d5:d3:0c:2c:ff:e1:
6a:f4:86:72:09:24:d4:e1:6e:59:62:16:ad:9d:07:33:a6:d3:
3c:6b:51:3b:18:d6:8e:89:61:70:06:62:19:27:b3:e2:d9:cf:
de:55:0c:ab:b2:85:42:fd:81:b0:ba:fc:c2:27:8d:18:c6:db:
41:7e:cf:4d:14:d3:86:37:ad:6a:88:e0:3b:a2:e0:fe:48:d6:
4d:2c:fa:6e:3a:b8:49:d5:0b:df:6e:05:49:12:ef:f5:0c:e9:
63:a8:14:a6:13:1e:6a:e4:be:07:85:b9:6b:a5:4d:3c:08:40:
5a:92:51:1a:9a:35:b5:7f:39:e9:49:22:7e:83:90:ec:f9:b3:
6f:5d:09:37:80:e3:ac:69:40:7e:9d:75:8e:59:a8:6d:41:45:
41:40:8a:7f:c9:ee:3d:0c:ee:1d:59:f7:f2:fc:c8:c2:ca:87:
ae:44:c9:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:12:39 2025 by rpki-client