Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/zepK3ugLBlGc5A3T0T8oup9XWVc.mft
File: zepK3ugLBlGc5A3T0T8oup9XWVc.mft (raw, json)
Hash identifier: Aw+wtwZIhb3Hd6O73bWcnZBNoWeIRQfjhBbvRKZ6usE=
Subject key identifier: 16:4D:23:52:50:C8:77:78:F9:69:74:C3:A8:60:96:0D:43:BC:5B:72
Authority key identifier: CD:EA:4A:DE:E8:0B:06:51:9C:E4:0D:D3:D1:3F:28:BA:9F:57:59:57
Certificate issuer: /CN=cdea4adee80b06519ce40dd3d13f28ba9f575957
Certificate serial: 0199C456BB9794534AD7253734EF88066707
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zepK3ugLBlGc5A3T0T8oup9XWVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/zepK3ugLBlGc5A3T0T8oup9XWVc.mft
Manifest number: 13D5
Signing time: Wed 08 Oct 2025 15:00:42 +0000
Manifest this update: Wed 08 Oct 2025 15:00:42 +0000
Manifest next update: Thu 09 Oct 2025 15:00:42 +0000
Files and hashes: 1: O0pEQEzhWfGPoGN9_GYQs2aEBkA.roa (hash: SE3IDQJtlW1HyYxGFEmw6qC9BXcob4+h3FZns0TYNu4=)
2: sVJ8yb4YMNZC8SR4z31lotsJRHA.roa (hash: +zzqZHb3MjdSyZ19xzKBnWrbrHGVz+kt5/OJZPLUdEA=)
3: zepK3ugLBlGc5A3T0T8oup9XWVc.crl (hash: DVkGHnV0Ww21EWOy5qcAzyimm2nrvaMk+lply+IfdS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/zepK3ugLBlGc5A3T0T8oup9XWVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/zepK3ugLBlGc5A3T0T8oup9XWVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zepK3ugLBlGc5A3T0T8oup9XWVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c4:56:bb:97:94:53:4a:d7:25:37:34:ef:88:06:67:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdea4adee80b06519ce40dd3d13f28ba9f575957
Validity
Not Before: Oct 8 15:00:42 2025 GMT
Not After : Oct 9 15:00:42 2025 GMT
Subject: CN=164d235250c87778f96974c3a860960d43bc5b72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:8c:2a:22:75:a6:72:1d:9b:2e:ce:0a:88:0e:
e1:f4:dc:2d:1d:c8:98:ee:da:ea:a9:c0:ec:64:c3:
92:07:dd:16:e6:12:bc:b9:cf:1b:7c:ad:39:be:10:
1a:7b:2d:28:fd:a9:6f:6e:8b:b1:6e:a0:80:be:ee:
47:19:02:f8:71:3e:ed:47:d9:6c:1e:e9:11:fb:19:
78:c7:b3:4b:ea:6e:c0:29:0e:65:75:3f:bc:ac:89:
d1:59:56:4a:d9:02:f4:4b:dc:20:db:48:9b:12:a7:
aa:da:94:56:b2:42:ab:78:8a:58:42:b6:5c:3d:34:
8d:77:14:39:a7:bf:94:3f:1e:13:97:ff:19:84:59:
aa:70:32:c2:ff:be:4d:d7:95:86:a3:d4:95:4a:c5:
ef:2b:d6:9b:e4:0e:fb:27:9b:d7:22:27:0c:d2:0e:
2e:8b:80:3d:69:b1:b8:62:dc:28:9e:44:2e:24:27:
1b:b4:74:46:41:9d:ca:c8:52:da:3b:bf:74:00:59:
09:97:bc:89:a0:92:bd:16:6a:ac:68:cd:83:48:66:
b9:9f:22:e0:cc:e2:8f:67:60:03:cd:a4:c6:57:8f:
0c:5c:4b:38:3a:ed:75:97:8c:c1:72:82:12:3d:20:
c7:af:a7:03:18:78:9c:4e:f9:3a:cd:18:d8:c3:28:
63:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:4D:23:52:50:C8:77:78:F9:69:74:C3:A8:60:96:0D:43:BC:5B:72
X509v3 Authority Key Identifier:
keyid:CD:EA:4A:DE:E8:0B:06:51:9C:E4:0D:D3:D1:3F:28:BA:9F:57:59:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zepK3ugLBlGc5A3T0T8oup9XWVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/zepK3ugLBlGc5A3T0T8oup9XWVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/zepK3ugLBlGc5A3T0T8oup9XWVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:72:11:a1:3b:3c:d8:16:e8:03:2b:8f:f0:24:c8:45:a4:34:
65:29:fe:c4:3c:e6:19:86:4a:ab:1e:03:7a:15:0e:9c:2b:73:
4e:3c:c6:77:30:b1:d2:90:e7:be:5c:d8:b5:1d:bc:59:91:ae:
fa:ae:eb:9a:53:f6:fb:c2:d9:50:96:92:1e:3f:54:93:9f:a6:
1f:35:e6:30:44:23:63:20:62:91:b2:39:8f:01:30:00:20:86:
a2:fb:41:69:85:68:d0:a5:22:5d:c7:81:06:ec:9e:ea:8b:33:
60:03:d8:72:6b:d5:8e:cf:01:f5:2f:77:e2:02:48:04:87:e2:
14:04:db:31:51:ec:aa:99:c7:59:f3:e9:51:7f:b7:ab:e5:22:
3e:9f:0e:2a:e7:09:cc:bb:f7:10:62:e0:14:80:50:f1:7b:d7:
05:ff:fd:db:2b:ef:86:58:30:cc:36:4f:eb:c9:60:7b:47:0f:
d1:bc:78:f1:9d:20:7b:54:5c:9d:e7:e8:99:c3:35:76:54:47:
4c:6b:3b:e1:d4:e1:04:1e:e4:03:96:65:dd:cb:9a:90:46:d5:
16:0e:a5:c4:d1:10:91:93:e1:17:14:46:f3:02:8f:fc:45:66:
20:9c:80:22:bc:7c:d4:4e:34:84:70:44:e4:f5:80:2c:3a:b4:
f0:e5:85:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 23:11:41 2025 by rpki-client