Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/663331-31dc-4ddf-84e0-5f90a2f90d03/1/ZsMHCnRbLBZ-EBoWHSZIobyXeZE.mft
File: ZsMHCnRbLBZ-EBoWHSZIobyXeZE.mft (raw, json)
Hash identifier: 1jdDkjdWwBvJQAFbbfLBXVTZ7YYV17jgOlxbG4VpVcE=
Subject key identifier: 22:CE:F1:AC:7E:72:7E:1E:AF:1B:EB:7E:6B:4E:31:34:D4:B2:A3:59
Authority key identifier: 66:C3:07:0A:74:5B:2C:16:7E:10:1A:16:1D:26:48:A1:BC:97:79:91
Certificate issuer: /CN=66c3070a745b2c167e101a161d2648a1bc977991
Certificate serial: 0199FB0F3756365FB2734A3DD1568B1D2E03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZsMHCnRbLBZ-EBoWHSZIobyXeZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/663331-31dc-4ddf-84e0-5f90a2f90d03/1/ZsMHCnRbLBZ-EBoWHSZIobyXeZE.mft
Manifest number: 37
Signing time: Sun 19 Oct 2025 06:01:42 +0000
Manifest this update: Sun 19 Oct 2025 06:01:42 +0000
Manifest next update: Mon 20 Oct 2025 06:01:42 +0000
Files and hashes: 1: ZsMHCnRbLBZ-EBoWHSZIobyXeZE.crl (hash: cceZfvteoFMq/7OheFmyD8YFsFOyTFCxR7lm62UgOn8=)
2: l9bBsFfC3zzSetiD5kEe28rBj1w.roa (hash: afp7psmljpdsoVJb9q1FK7ToTJSaIK0ZgxojY+T/ZMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/663331-31dc-4ddf-84e0-5f90a2f90d03/1/ZsMHCnRbLBZ-EBoWHSZIobyXeZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/663331-31dc-4ddf-84e0-5f90a2f90d03/1/ZsMHCnRbLBZ-EBoWHSZIobyXeZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZsMHCnRbLBZ-EBoWHSZIobyXeZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0f:37:56:36:5f:b2:73:4a:3d:d1:56:8b:1d:2e:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66c3070a745b2c167e101a161d2648a1bc977991
Validity
Not Before: Oct 19 06:01:42 2025 GMT
Not After : Oct 20 06:01:42 2025 GMT
Subject: CN=22cef1ac7e727e1eaf1beb7e6b4e3134d4b2a359
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a4:ab:d3:9d:26:cc:05:a7:86:03:0f:a7:54:
b5:53:3c:f4:7d:48:61:8c:b5:b6:72:5d:a9:dd:48:
c6:10:66:2b:d6:09:23:4c:72:6f:6e:89:6a:44:d3:
21:44:eb:fb:12:21:56:a9:0d:75:09:af:d2:36:3d:
22:9e:f3:d1:2c:6f:e4:44:32:bd:3e:1e:4d:57:82:
95:3b:70:21:0e:dc:50:ac:9d:c9:4f:52:6f:00:52:
ed:cb:22:44:35:33:51:e2:9a:7e:f8:85:76:7e:dc:
ba:05:72:a2:a7:06:01:30:42:95:f0:06:e5:ca:89:
be:5c:9e:96:8f:67:fc:08:b8:4e:2d:67:09:ea:e0:
1b:70:b8:4e:4c:8b:ef:9d:3c:50:7c:0c:5d:f9:3b:
9c:bb:c1:1b:49:a8:5a:13:a1:bd:5c:ba:5c:91:8a:
af:cb:75:79:81:13:ae:55:cc:46:b3:c0:f2:8d:f1:
70:c0:86:3a:e8:70:f3:de:a9:92:71:e2:32:11:7b:
d5:5c:1f:3f:c9:b9:2c:e0:22:29:d2:0a:16:58:2c:
b9:53:d5:df:45:ce:c1:a0:5e:a3:a2:f7:73:b4:47:
65:23:c8:d7:53:57:6d:d8:9f:6f:1c:e8:0c:ec:bf:
54:c4:6b:a3:28:90:20:71:65:2c:0d:91:80:05:dd:
cb:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:CE:F1:AC:7E:72:7E:1E:AF:1B:EB:7E:6B:4E:31:34:D4:B2:A3:59
X509v3 Authority Key Identifier:
keyid:66:C3:07:0A:74:5B:2C:16:7E:10:1A:16:1D:26:48:A1:BC:97:79:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZsMHCnRbLBZ-EBoWHSZIobyXeZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/663331-31dc-4ddf-84e0-5f90a2f90d03/1/ZsMHCnRbLBZ-EBoWHSZIobyXeZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/663331-31dc-4ddf-84e0-5f90a2f90d03/1/ZsMHCnRbLBZ-EBoWHSZIobyXeZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:2d:c6:c1:d0:38:3d:d6:db:e6:7f:8e:10:d1:a9:96:a9:15:
b3:ba:50:2b:63:96:76:ba:ee:b5:fa:2e:30:d2:2d:fa:04:05:
62:07:31:c9:c1:fa:1e:05:cf:84:ed:42:db:e6:71:96:df:75:
3b:56:42:dd:cb:83:dd:4c:5e:f8:80:07:09:e7:3d:8e:b8:35:
f8:67:8c:43:84:32:3f:4a:27:d6:4f:cf:db:3c:c9:1c:fb:ed:
ec:e9:07:c2:08:14:51:bc:a4:a0:e7:5e:6f:a3:3b:8d:99:7c:
64:77:78:6d:47:53:46:35:17:1d:4a:dd:31:9b:18:3e:b3:2e:
8c:74:61:bc:38:cc:1c:2c:f3:5f:c4:4f:71:c5:dd:91:4e:47:
fc:5b:fb:17:40:60:09:22:c4:50:00:34:63:e1:2d:9a:36:f8:
61:c8:cf:87:a0:36:c9:c9:20:b7:96:1d:37:95:63:05:37:0c:
3d:6c:77:2c:8b:6b:27:86:dc:18:a5:c6:c1:4f:45:91:ee:66:
cb:cf:66:35:d1:fd:bd:0c:0b:cb:6c:c7:74:e1:a3:45:d5:cb:
c9:47:63:9f:80:40:6e:cf:96:5e:64:ae:7f:1f:71:96:d9:82:
cd:94:3f:ed:44:4d:0c:db:1d:53:f5:f7:65:20:a5:58:20:59:
67:e1:84:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:50 2025 by rpki-client