Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/ba402c-b00e-4a26-bf53-8e747e34e162/1/ZdnpJm7sq8D9SmB36wuo-p873ic.mft
File: ZdnpJm7sq8D9SmB36wuo-p873ic.mft (raw, json)
Hash identifier: ctOTjsaFx/cfLNcpqctyAuhDk917/wIrVAPSRC0DYsg=
Subject key identifier: E5:9C:F3:06:ED:5F:F2:FF:1D:2A:7A:26:77:AF:33:DC:21:A3:06:85
Authority key identifier: 65:D9:E9:26:6E:EC:AB:C0:FD:4A:60:77:EB:0B:A8:FA:9F:3B:DE:27
Certificate issuer: /CN=65d9e9266eecabc0fd4a6077eb0ba8fa9f3bde27
Certificate serial: 0199FC5874BD6C32E75C4554369DA3EA6B33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZdnpJm7sq8D9SmB36wuo-p873ic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/ba402c-b00e-4a26-bf53-8e747e34e162/1/ZdnpJm7sq8D9SmB36wuo-p873ic.mft
Manifest number: 16E6
Signing time: Sun 19 Oct 2025 12:01:19 +0000
Manifest this update: Sun 19 Oct 2025 12:01:19 +0000
Manifest next update: Mon 20 Oct 2025 12:01:19 +0000
Files and hashes: 1: ZdnpJm7sq8D9SmB36wuo-p873ic.crl (hash: X3qCWNbL2OcB5m18QzcbIfNP2Vpvlv3sM5ss2mk0XMo=)
2: jl2QMltgucjm6DsSRtvejzHwgVk.roa (hash: 2ICsrOX/Ng80gGFWmU3eag4CX8TEZwSeNwBpo27725Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/ba402c-b00e-4a26-bf53-8e747e34e162/1/ZdnpJm7sq8D9SmB36wuo-p873ic.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/ba402c-b00e-4a26-bf53-8e747e34e162/1/ZdnpJm7sq8D9SmB36wuo-p873ic.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZdnpJm7sq8D9SmB36wuo-p873ic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:74:bd:6c:32:e7:5c:45:54:36:9d:a3:ea:6b:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65d9e9266eecabc0fd4a6077eb0ba8fa9f3bde27
Validity
Not Before: Oct 19 12:01:19 2025 GMT
Not After : Oct 20 12:01:19 2025 GMT
Subject: CN=e59cf306ed5ff2ff1d2a7a2677af33dc21a30685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4f:13:f0:c8:5b:60:39:55:6a:36:3e:39:60:
e9:00:30:73:5a:2b:7c:61:ef:ce:0e:8b:76:17:a5:
02:b0:5c:08:a8:2b:1e:32:b4:55:b7:21:05:b3:6e:
ec:3a:27:c4:55:93:e7:c0:a0:31:c4:9b:28:ca:07:
13:ef:7a:0d:58:e1:c7:55:91:e6:2a:87:75:bb:5c:
bb:fd:16:d3:e7:61:d5:24:79:b4:38:e2:08:c1:3c:
d5:a6:5a:8f:9f:d6:7a:f4:0e:0c:6d:19:43:1c:0a:
cf:6e:97:f4:2a:aa:e2:a5:0d:c2:35:12:b5:31:b1:
4b:28:8b:a2:ed:6d:bc:79:6f:87:1a:d8:ab:b0:61:
b4:e4:c5:46:e4:3e:e7:3c:4f:ef:5e:11:c6:a7:b2:
46:68:2b:bf:fb:4f:60:b4:47:f3:ad:a9:3e:a0:58:
2f:ef:25:5b:a5:2e:ec:e7:ea:f9:8b:6c:84:d4:56:
96:58:3b:90:a3:bc:20:f9:32:2c:c1:43:77:39:14:
84:7d:27:66:21:9a:16:e4:b3:06:68:1a:ea:ed:cd:
31:3e:95:35:25:7e:10:8e:5d:2c:e4:54:ad:70:c1:
b5:f2:ef:3c:a6:03:8c:6d:30:f0:34:35:9b:ac:5a:
46:23:0c:25:b8:8b:98:8a:03:55:54:c0:f4:c0:eb:
a7:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:9C:F3:06:ED:5F:F2:FF:1D:2A:7A:26:77:AF:33:DC:21:A3:06:85
X509v3 Authority Key Identifier:
keyid:65:D9:E9:26:6E:EC:AB:C0:FD:4A:60:77:EB:0B:A8:FA:9F:3B:DE:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZdnpJm7sq8D9SmB36wuo-p873ic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ba402c-b00e-4a26-bf53-8e747e34e162/1/ZdnpJm7sq8D9SmB36wuo-p873ic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ba402c-b00e-4a26-bf53-8e747e34e162/1/ZdnpJm7sq8D9SmB36wuo-p873ic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:3c:c5:59:65:39:a1:09:bd:7e:f5:82:cc:a7:57:d4:34:23:
f5:b3:cc:1b:5e:6f:06:8c:90:5f:ff:32:b4:34:c7:ac:8d:52:
d0:66:0f:6a:47:a1:63:87:6a:00:df:24:df:26:a7:83:83:23:
ee:f7:e1:1b:5e:e1:10:1e:92:cb:72:6c:25:b6:db:d4:c0:08:
d4:48:34:b0:8e:e9:74:37:5e:02:62:85:9b:dc:06:6f:d8:0d:
6f:10:6e:40:30:ef:e3:2b:47:f6:5b:8a:ac:38:b7:77:dd:78:
21:c5:71:16:66:46:21:1b:d1:0a:4f:fa:7e:8f:43:87:75:7e:
32:72:ac:a2:22:16:a2:f4:82:13:32:1a:0a:71:a6:5c:4e:3c:
ba:91:8f:3b:8a:e2:d2:a0:e6:cf:b4:43:4c:8b:eb:58:b6:a8:
97:2d:d4:b3:c2:e2:17:29:f4:2f:57:e9:60:37:0c:84:2c:d1:
16:a3:f0:97:29:f4:6d:27:c3:80:60:3a:29:c5:2c:9f:83:10:
78:1a:6c:8b:4d:ae:8e:83:4a:24:22:37:4d:a2:0f:e4:c9:22:
ea:5a:6d:c2:46:b3:0c:a9:19:c4:34:07:ca:e0:30:dd:87:92:
0e:25:7d:89:1b:d6:47:f2:e3:b6:46:b4:c0:fc:49:01:fd:8e:
0f:76:44:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:30:23 2025 by rpki-client