Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.mft
File: zHLmM99WNan5jS9optKty0QVXNw.mft (raw, json)
Hash identifier: uCOcXOqB0Ca9TOn7/o9+j8U13YShne7dcgHrNT5VfzA=
Subject key identifier: EC:2A:5D:4C:B9:C5:EA:A4:5F:79:C9:2A:CD:91:DF:9E:2F:27:C6:37
Authority key identifier: CC:72:E6:33:DF:56:35:A9:F9:8D:2F:68:A6:D2:AD:CB:44:15:5C:DC
Certificate issuer: /CN=cc72e633df5635a9f98d2f68a6d2adcb44155cdc
Certificate serial: 019A09DC8614D946EC2E80AA3D5458253ED0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zHLmM99WNan5jS9optKty0QVXNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.mft
Manifest number: 16EC
Signing time: Wed 22 Oct 2025 03:00:38 +0000
Manifest this update: Wed 22 Oct 2025 03:00:38 +0000
Manifest next update: Thu 23 Oct 2025 03:00:38 +0000
Files and hashes: 1: L92Oz155yhI01cgTqDPydWK98ns.roa (hash: e3pz5+PnlP9tg7wzv2dM4Vb+by/3YBKQxYyFlmqUG3k=)
2: rFLbnP63niNMPmNTHqvODCWAmf4.roa (hash: QWuHWUDfpexkyRSRrY8RzHPTAmEW2/XktJBH/kF+mCg=)
3: zHLmM99WNan5jS9optKty0QVXNw.crl (hash: y5G/5ATD1TAzyEplP/I57hRJhjdXndak1X3dyqqNC60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/zHLmM99WNan5jS9optKty0QVXNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 03:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:09:dc:86:14:d9:46:ec:2e:80:aa:3d:54:58:25:3e:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc72e633df5635a9f98d2f68a6d2adcb44155cdc
Validity
Not Before: Oct 22 03:00:38 2025 GMT
Not After : Oct 23 03:00:38 2025 GMT
Subject: CN=ec2a5d4cb9c5eaa45f79c92acd91df9e2f27c637
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:e4:aa:08:f0:34:0e:ca:b1:c7:f7:74:b1:53:
5a:7a:a7:2c:c9:95:75:6d:4b:46:6a:20:20:8a:54:
e8:19:21:79:a6:82:44:e3:08:8a:6c:35:e2:b7:e2:
7b:54:d6:ec:8c:60:cd:51:af:3c:66:76:4f:c3:54:
ef:17:6c:1f:43:bc:f6:83:6e:62:9e:bb:24:f5:3d:
e8:76:52:bc:0f:c3:ce:9c:d1:23:0e:eb:41:ab:5e:
d4:2e:20:cd:31:92:0e:4b:a5:5f:97:14:e6:30:3f:
03:b3:06:53:68:f6:95:57:44:c1:03:7f:84:3f:66:
f7:79:70:d2:7e:a5:89:1f:d8:bf:61:79:52:83:a6:
4a:03:8a:ed:28:81:f9:91:1b:2c:77:90:29:27:47:
67:ca:86:2b:cf:50:66:66:c7:01:78:88:ea:77:ea:
39:90:29:7e:80:93:32:c3:8b:8a:c9:ea:1d:30:14:
ba:92:fa:26:67:3b:43:d5:70:0e:fa:f4:ed:93:77:
ef:c1:6f:2a:91:e5:ff:b0:f2:56:63:bd:30:07:fb:
88:d4:3a:c9:87:5a:17:58:12:40:eb:35:e8:f4:9d:
d1:a7:eb:5f:27:60:f2:1f:a5:51:7d:39:d9:a8:6a:
fb:93:be:d7:37:1e:7f:2e:41:a9:6d:cf:f6:8a:f1:
62:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:2A:5D:4C:B9:C5:EA:A4:5F:79:C9:2A:CD:91:DF:9E:2F:27:C6:37
X509v3 Authority Key Identifier:
keyid:CC:72:E6:33:DF:56:35:A9:F9:8D:2F:68:A6:D2:AD:CB:44:15:5C:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zHLmM99WNan5jS9optKty0QVXNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:db:cc:ad:44:02:8f:b1:89:68:ee:91:a0:e5:ca:35:00:25:
50:a2:99:71:0f:4b:86:33:44:ff:7f:6d:7d:ac:e1:1a:11:06:
0a:f9:e7:e8:71:34:75:3c:c5:50:bf:6c:f8:69:08:33:73:a0:
96:db:50:c5:a3:21:b3:dd:d1:07:8d:92:f9:9f:40:d1:ab:10:
98:fc:95:01:fa:ac:6b:98:ce:d2:8e:b8:92:a1:bc:10:98:03:
f8:a7:27:bc:69:da:19:25:b1:4b:9f:39:04:59:8a:f7:c1:c8:
d7:e6:97:8d:cc:bf:0e:47:7a:8e:a8:d1:4f:d4:d4:53:1a:7a:
13:5f:d1:9a:37:66:8f:d9:48:72:fb:53:98:48:9f:6d:21:b1:
f0:db:3f:63:2e:c7:9f:0d:c3:7c:87:a8:a4:6b:e2:30:67:c8:
b7:75:fa:3b:3a:6c:60:49:1b:d1:8f:62:21:a9:5c:bb:46:b2:
03:f8:34:fd:69:dc:0b:f0:0a:e6:72:93:b5:12:13:b8:80:af:
4b:71:a5:c0:f6:c0:35:e1:df:f8:3d:2a:22:78:0d:55:94:d5:
19:d2:95:3b:4d:fb:a3:10:20:28:f4:4d:80:21:2e:f6:43:dd:
49:e6:a5:bb:a5:fd:03:0b:e8:97:ab:ad:92:e7:5a:f1:05:b8:
4d:5f:d0:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 12:36:19 2025 by rpki-client