Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.mft
File: zpWPGB-1B6CiqCGFa4vg1UsRi4U.mft (raw, json)
Hash identifier: +cRoT/HbMp2VMvRkO6BGmVJ7N9lfNLuK4LJm5Z9W8lA=
Subject key identifier: A3:43:A0:5B:48:5B:E9:AE:F2:96:9A:1B:EE:9F:F7:2D:60:CB:82:88
Authority key identifier: CE:95:8F:18:1F:B5:07:A0:A2:A8:21:85:6B:8B:E0:D5:4B:11:8B:85
Certificate issuer: /CN=ce958f181fb507a0a2a821856b8be0d54b118b85
Certificate serial: 0199FB0F4AE3967C742E42A65F0C43FD16DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zpWPGB-1B6CiqCGFa4vg1UsRi4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.mft
Manifest number: 122E
Signing time: Sun 19 Oct 2025 06:01:47 +0000
Manifest this update: Sun 19 Oct 2025 06:01:47 +0000
Manifest next update: Mon 20 Oct 2025 06:01:47 +0000
Files and hashes: 1: DSsF2EpdJres9UlSYZ8ho9OJx-0.roa (hash: kpJLPq3xhLOXcci/pP8gkCb0kvLBcDaZioz977+8mg0=)
2: G9TzS_JKF-xrHisLyJoTKAn4mdM.roa (hash: MxwBJUCTUR/t3ggoItSIruyTquvVzIW04TVN5/t6tE4=)
3: kAtcjeL4q23GFCUbpg4QtXInyEI.roa (hash: 5K8wPb3jbiUlLft+liX8W5eEXe9eE+pHlH9nNwzDSk4=)
4: zpWPGB-1B6CiqCGFa4vg1UsRi4U.crl (hash: aKSIWJBIiX65WNJsBXo1HA3s0whWJPoptZS1Qgnswqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/zpWPGB-1B6CiqCGFa4vg1UsRi4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0f:4a:e3:96:7c:74:2e:42:a6:5f:0c:43:fd:16:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce958f181fb507a0a2a821856b8be0d54b118b85
Validity
Not Before: Oct 19 06:01:47 2025 GMT
Not After : Oct 20 06:01:47 2025 GMT
Subject: CN=a343a05b485be9aef2969a1bee9ff72d60cb8288
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:72:fd:37:aa:cf:f3:b8:9c:81:0b:11:d0:e6:
28:9b:f0:61:3a:ce:3f:64:d4:e3:4d:85:7d:d8:76:
34:35:02:ef:94:ad:57:db:07:f5:59:7a:d2:0b:5e:
3a:59:31:c6:77:89:bd:0a:43:c1:74:5a:56:d2:e7:
6a:a1:1c:3c:95:7d:f3:47:f1:03:4c:d5:40:b3:b2:
bc:a8:1e:91:94:c3:4e:7c:bc:8a:b8:1f:cc:ea:4c:
51:04:08:ad:27:e0:ed:5e:c0:cd:bd:68:64:30:e3:
ce:1e:ca:ef:3d:2d:4c:5d:e5:a4:f5:ee:dc:9e:ca:
83:0e:23:4b:47:f5:27:24:66:6b:38:34:17:56:8a:
54:d0:04:3e:62:16:8a:3e:ed:99:d7:e2:f0:51:e9:
f7:e6:63:bd:ba:bb:34:37:c1:f5:07:73:22:2a:7a:
74:32:00:ab:7f:a2:da:21:d8:2d:0a:57:db:71:62:
a6:b6:9a:18:89:37:39:75:d5:c3:f9:d9:e5:c5:c7:
7d:99:22:0b:da:f4:dd:25:6d:f9:56:19:01:d1:4f:
15:56:da:9c:23:0d:bd:d8:d0:51:72:82:b2:5d:88:
a4:3f:ac:37:c4:fe:a0:75:e4:0a:d1:5b:82:97:90:
39:47:03:97:94:d9:57:19:74:7b:a9:7e:ed:df:65:
83:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:43:A0:5B:48:5B:E9:AE:F2:96:9A:1B:EE:9F:F7:2D:60:CB:82:88
X509v3 Authority Key Identifier:
keyid:CE:95:8F:18:1F:B5:07:A0:A2:A8:21:85:6B:8B:E0:D5:4B:11:8B:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zpWPGB-1B6CiqCGFa4vg1UsRi4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:b6:98:9c:a8:d1:eb:86:b4:07:e5:b8:50:1e:29:23:b4:b1:
66:c6:2b:fd:cf:0b:d4:e4:fa:00:9e:3f:70:fd:1f:d4:dd:4d:
6d:51:28:34:e2:e5:61:d5:65:1e:6c:03:16:a7:dd:3f:44:cc:
2a:63:ae:65:0f:20:c0:fd:2d:0d:90:e6:40:06:d8:d1:a7:86:
0e:00:b0:46:e6:8d:f3:58:b1:ad:24:c2:08:5e:75:51:1e:92:
15:95:41:f2:75:8f:23:43:8d:cd:9f:f1:fe:b1:45:31:b4:09:
e0:c9:d3:57:b7:8f:02:69:89:66:a3:c4:9b:0c:9a:5e:86:1c:
45:b5:f1:3a:75:73:76:31:b9:fd:9b:87:fe:dd:7d:b2:64:75:
87:b9:f6:57:d3:a7:02:7c:e6:c2:d2:98:25:d7:da:59:6a:dc:
d3:b1:bc:6d:68:64:04:6b:87:61:51:db:37:64:5a:b7:a3:71:
89:cf:b5:14:7d:84:df:a6:aa:33:bb:29:a0:fe:43:21:7a:1b:
28:b6:37:99:44:78:d8:3c:55:4e:57:f4:02:7b:d2:0d:dd:8f:
a4:8f:bb:20:13:56:ce:75:85:07:f2:04:14:a2:1e:9b:59:6d:
92:50:5f:c1:05:11:be:2d:83:ab:4c:8d:1b:3c:d3:b2:74:c7:
09:bd:81:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:11:10 2025 by rpki-client