Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.mft
File: Zu8xraxmOFWz3dGTHETPgGTWpus.mft (raw, json)
Hash identifier: WyUruHoD1c2fQurexN+UdVzDQ9IswFIrrzcEukgGOIo=
Subject key identifier: E8:9C:8D:BC:AB:30:50:B4:8C:DB:EE:70:63:7F:30:C1:B5:1B:BB:D4
Authority key identifier: 66:EF:31:AD:AC:66:38:55:B3:DD:D1:93:1C:44:CF:80:64:D6:A6:EB
Certificate issuer: /CN=66ef31adac663855b3ddd1931c44cf8064d6a6eb
Certificate serial: 0199C5D81E5BB5CC98FE229E390B7FD2CC37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zu8xraxmOFWz3dGTHETPgGTWpus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.mft
Manifest number: 16C6
Signing time: Wed 08 Oct 2025 22:01:39 +0000
Manifest this update: Wed 08 Oct 2025 22:01:39 +0000
Manifest next update: Thu 09 Oct 2025 22:01:39 +0000
Files and hashes: 1: XmInGKZQVpi4yiOnRct1YYYqWiE.roa (hash: R86EgdaEJJTkg9AcxCYcJUrFnlotYJxO2Dz2JbHzD6o=)
2: Zu8xraxmOFWz3dGTHETPgGTWpus.crl (hash: /iFZuIIi1QfoiDLZBylexmDxTgP9SzGhPeyE+oUmdIE=)
3: quUKUBb4zZe6-7AC8l87cCVH0H0.roa (hash: GrPFGNPKw3mudZK+q8bDj+RCkl+C4u9ag/IOaEBEaJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zu8xraxmOFWz3dGTHETPgGTWpus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 16:33:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c5:d8:1e:5b:b5:cc:98:fe:22:9e:39:0b:7f:d2:cc:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66ef31adac663855b3ddd1931c44cf8064d6a6eb
Validity
Not Before: Oct 8 22:01:39 2025 GMT
Not After : Oct 9 22:01:39 2025 GMT
Subject: CN=e89c8dbcab3050b48cdbee70637f30c1b51bbbd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f7:6e:53:86:3a:eb:c4:da:fc:0a:42:9e:47:
ef:02:d7:b9:7a:69:8b:c9:2e:45:21:c2:ca:a2:0a:
99:d2:54:2f:cf:43:da:c1:8b:85:0c:ae:90:2c:f4:
b3:8d:b1:34:5c:8d:6f:0b:7a:d0:d6:6a:83:fb:59:
3e:b3:0b:c5:68:3d:99:d3:8e:43:21:8b:38:d1:6b:
29:bb:d4:21:5b:5b:8e:2f:0d:ad:37:48:3c:21:d1:
e1:fb:dd:45:82:46:82:78:e6:fa:46:40:6a:a9:18:
9a:37:c1:0b:59:37:d2:15:8c:29:0b:9b:83:5a:d9:
c1:bf:60:4c:3b:bb:6e:d0:04:e8:d0:d2:e2:a4:ff:
87:22:cc:40:24:1b:08:42:93:b1:fc:a8:3e:51:dc:
66:ec:48:09:1a:8b:0e:6d:90:01:a4:71:74:16:b3:
55:32:d7:77:41:70:5f:0f:19:4a:4f:73:19:53:0c:
34:33:cb:10:15:62:27:f2:df:fb:58:bb:57:14:6b:
8b:db:97:8b:a0:d0:90:dd:7e:0a:d4:bc:84:43:d5:
1a:b3:74:03:d6:0c:21:80:13:8e:7a:bb:10:96:37:
e0:3b:e1:2f:ea:2d:cd:d8:03:35:94:d3:51:3a:b8:
17:db:76:63:50:eb:d2:4f:ed:e6:85:97:11:c8:a6:
ba:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:9C:8D:BC:AB:30:50:B4:8C:DB:EE:70:63:7F:30:C1:B5:1B:BB:D4
X509v3 Authority Key Identifier:
keyid:66:EF:31:AD:AC:66:38:55:B3:DD:D1:93:1C:44:CF:80:64:D6:A6:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zu8xraxmOFWz3dGTHETPgGTWpus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:83:65:38:ed:da:22:cc:22:1e:a9:ad:bb:40:ef:e6:45:e2:
6d:06:71:2f:81:83:15:da:c5:9f:c7:df:2a:73:be:8c:7a:87:
22:8a:7a:b8:6e:12:1c:72:c4:07:87:8f:7a:28:15:d5:e5:6a:
19:6c:4e:5c:b0:0d:0a:ee:a5:b3:b3:14:4c:24:a3:2e:c6:f6:
ba:ad:88:97:fd:01:85:6a:23:52:5c:71:0d:97:af:24:7d:37:
8b:c7:83:8b:5c:0d:4b:bc:d1:be:3f:44:b1:6d:7c:62:50:4e:
17:9a:8f:e1:88:27:96:10:97:fd:65:38:20:c1:18:b7:56:9a:
9e:46:e4:55:3f:c9:fc:65:a7:bb:d9:9a:69:d6:4d:00:d3:cc:
a1:99:3b:0b:4f:1d:a0:51:de:78:d2:f5:ff:65:c0:22:d6:71:
9f:a6:07:08:f0:b3:a5:80:9f:8b:78:75:19:37:1d:49:f8:7d:
a5:90:20:16:c4:15:63:07:bb:18:5e:53:a6:88:70:ff:b2:88:
e5:79:33:e5:1d:40:08:5e:b0:af:52:be:7e:ad:a4:30:19:0c:
0d:12:e3:47:86:66:b4:20:3c:f2:9c:7e:2f:2d:45:c5:d0:c1:
6f:7f:65:04:57:c4:44:fc:c1:2b:ca:5d:63:fc:b0:0a:3c:eb:
1f:d0:4f:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 23:39:09 2025 by rpki-client