Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/5f0e0d-4d90-40c8-a0b8-2a9c56f6328b/1/ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.mft
File: ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.mft (raw, json)
Hash identifier: 8OFFU9D34B4C1wKMQBq7nBVQF6YKqv17cAOmZuqtSfw=
Subject key identifier: 23:BD:0A:23:EA:CE:EE:50:10:86:55:2B:5D:A2:AB:D0:7B:88:81:D0
Authority key identifier: 67:03:CF:CC:88:C2:5D:3E:87:6B:53:2C:F1:13:01:22:5E:CA:1B:0C
Certificate issuer: /CN=6703cfcc88c25d3e876b532cf11301225eca1b0c
Certificate serial: 0199FBEAD7F238A3E8E3669C16C7F9B6E737
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/5f0e0d-4d90-40c8-a0b8-2a9c56f6328b/1/ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.mft
Manifest number: 16DF
Signing time: Sun 19 Oct 2025 10:01:35 +0000
Manifest this update: Sun 19 Oct 2025 10:01:35 +0000
Manifest next update: Mon 20 Oct 2025 10:01:35 +0000
Files and hashes: 1: ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.crl (hash: TRqWP+bVixDtYNXggrF2gSrDXVhCwTpsyUZC5QoMtWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/5f0e0d-4d90-40c8-a0b8-2a9c56f6328b/1/ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/5f0e0d-4d90-40c8-a0b8-2a9c56f6328b/1/ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:d7:f2:38:a3:e8:e3:66:9c:16:c7:f9:b6:e7:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6703cfcc88c25d3e876b532cf11301225eca1b0c
Validity
Not Before: Oct 19 10:01:35 2025 GMT
Not After : Oct 20 10:01:35 2025 GMT
Subject: CN=23bd0a23eaceee501086552b5da2abd07b8881d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ea:7f:68:8f:c3:99:8c:64:1d:29:51:3d:c4:
56:9b:df:51:57:0e:da:5b:52:44:7a:8d:f1:3f:cd:
55:4f:db:91:0c:9d:51:10:f7:16:df:63:eb:c9:15:
6f:69:c6:09:c4:68:4a:b8:0f:a3:ae:d4:b3:ed:59:
a2:a8:45:9d:c7:ce:f9:f2:d0:32:48:43:2a:ac:d0:
f2:86:83:95:67:05:d8:5b:1e:d0:50:cc:8d:0f:b2:
52:05:d3:eb:e5:e6:fd:25:a5:2c:b1:f7:a4:10:58:
81:48:2f:9b:0c:49:3b:fe:59:65:ed:05:2a:f4:ed:
97:83:2e:2d:f1:c1:27:ff:00:18:e5:39:bc:ce:c8:
35:98:7a:28:a3:02:c7:5f:8b:8d:15:12:23:ed:a2:
49:e0:8a:6c:92:e3:c0:c6:a6:af:ba:63:88:ab:65:
50:88:f3:01:30:23:d9:98:e1:b7:e1:45:cb:fa:08:
cb:f7:cd:56:3e:f5:78:42:77:3a:b6:44:8e:5f:40:
28:a2:79:c1:f9:97:a4:fd:6f:a8:f3:2f:db:e2:03:
b0:d9:e8:b8:d4:45:1f:47:10:32:53:93:01:a1:e5:
18:c6:b4:4e:a9:a8:6e:ef:3a:5e:7d:b0:d2:77:1f:
c8:d0:59:4f:6d:ec:b7:f8:45:1d:e8:b3:cb:a2:b5:
1c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:BD:0A:23:EA:CE:EE:50:10:86:55:2B:5D:A2:AB:D0:7B:88:81:D0
X509v3 Authority Key Identifier:
keyid:67:03:CF:CC:88:C2:5D:3E:87:6B:53:2C:F1:13:01:22:5E:CA:1B:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5f0e0d-4d90-40c8-a0b8-2a9c56f6328b/1/ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5f0e0d-4d90-40c8-a0b8-2a9c56f6328b/1/ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:94:05:59:0a:8f:b2:81:b7:66:52:fb:63:57:2f:f4:71:09:
57:55:b4:48:ce:ce:10:c1:91:34:2e:d0:8b:53:b8:09:20:21:
f9:db:73:a2:29:5c:f7:1a:72:93:da:86:eb:12:33:80:e0:8d:
90:38:cf:b3:3c:3f:95:a3:5f:1a:c9:24:8a:2b:34:c1:c9:c2:
7b:df:04:dd:0e:7f:91:58:97:7e:23:4f:9a:98:d6:ed:3f:e5:
e2:87:8b:00:26:77:ff:b5:23:e8:19:79:77:d8:af:67:a5:06:
25:fc:e3:32:d6:37:74:9a:08:1c:af:3b:bb:28:90:e2:92:d1:
ea:dd:82:20:5d:ea:90:f3:0f:80:67:3d:00:57:ef:1f:05:f9:
0b:45:6d:15:71:af:bc:94:cf:a1:2e:d0:58:1d:89:0b:a1:82:
5e:99:1c:4b:a3:a6:92:99:99:57:cd:43:d8:7f:c7:bf:43:d4:
a6:2a:66:16:f1:a7:ff:fc:50:28:9d:27:74:16:e5:fa:1d:ac:
01:bb:7e:61:58:e5:24:8f:be:10:19:f6:53:d8:4e:6d:e3:de:
80:72:70:64:6d:0d:ed:1c:92:3a:24:bc:a5:09:6e:45:ba:03:
78:2e:a7:58:1f:2a:3f:5b:d9:64:e9:f7:c2:13:a8:7d:5d:59:
60:78:a1:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:11:27 2025 by rpki-client