Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/07bf5b-0340-434e-a444-f0761e29e6c4/1/Zux4mXbTtYQBbKwZ80u-3pZs0jA.mft
File: Zux4mXbTtYQBbKwZ80u-3pZs0jA.mft (raw, json)
Hash identifier: cMh+Mw3N91/vxdjnp6IcHvjGPXaeiL/gLdpBar1s0CA=
Subject key identifier: C5:27:8C:8B:A2:18:03:6B:52:45:D0:96:71:72:DB:60:C0:DD:67:86
Authority key identifier: 66:EC:78:99:76:D3:B5:84:01:6C:AC:19:F3:4B:BE:DE:96:6C:D2:30
Certificate issuer: /CN=66ec789976d3b584016cac19f34bbede966cd230
Certificate serial: 019A21089CBA1643AAA770D99BFE699A669C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zux4mXbTtYQBbKwZ80u-3pZs0jA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/07bf5b-0340-434e-a444-f0761e29e6c4/1/Zux4mXbTtYQBbKwZ80u-3pZs0jA.mft
Manifest number: 16F6
Signing time: Sun 26 Oct 2025 15:00:03 +0000
Manifest this update: Sun 26 Oct 2025 15:00:03 +0000
Manifest next update: Mon 27 Oct 2025 15:00:03 +0000
Files and hashes: 1: 1KzANFt0aPj0q7oH7exbtu-amXU.roa (hash: mW2duFDxzUlFHO8La7Ej6q1lO3QaO9KQzC0XOixRqPM=)
2: Zux4mXbTtYQBbKwZ80u-3pZs0jA.crl (hash: WnJDXlKT2oC3/s/E7BOorcN3Yl3rrRPhHo+vR2rMqmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/07bf5b-0340-434e-a444-f0761e29e6c4/1/Zux4mXbTtYQBbKwZ80u-3pZs0jA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/07bf5b-0340-434e-a444-f0761e29e6c4/1/Zux4mXbTtYQBbKwZ80u-3pZs0jA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zux4mXbTtYQBbKwZ80u-3pZs0jA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 15:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:08:9c:ba:16:43:aa:a7:70:d9:9b:fe:69:9a:66:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66ec789976d3b584016cac19f34bbede966cd230
Validity
Not Before: Oct 26 15:00:03 2025 GMT
Not After : Oct 27 15:00:03 2025 GMT
Subject: CN=c5278c8ba218036b5245d0967172db60c0dd6786
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:9e:2e:f5:92:3d:13:ed:cc:e6:50:f5:8b:16:
dd:f0:50:2e:d2:88:ae:c6:d5:c5:51:96:14:2b:7d:
60:61:4d:ae:7a:62:dc:94:16:08:24:0f:bc:bc:76:
c6:d1:c9:ef:82:13:18:c4:2c:1b:51:02:c5:ae:b3:
76:3e:a7:8b:ac:d6:9c:8a:77:61:05:59:b8:20:a0:
91:00:e1:df:52:c1:1b:8b:e8:99:08:96:b5:fa:b5:
f4:4f:2e:d2:c9:6d:db:59:23:b9:df:45:f7:7f:19:
57:66:48:2f:92:fd:4c:6d:e0:eb:99:55:7b:89:ac:
b7:ab:fd:b8:85:4f:b5:3b:74:58:9b:44:b8:0e:23:
ef:60:2b:2f:83:50:8f:40:53:e0:e4:c4:41:ef:9e:
89:ca:2a:99:fd:c4:17:0e:47:6a:eb:cd:90:58:47:
e1:7f:87:29:7b:44:48:69:90:08:30:b4:0d:11:23:
38:2b:74:40:87:cb:b3:f7:d1:2d:db:2c:40:ca:66:
32:6b:a6:bb:ef:ea:61:82:df:14:c6:73:1d:dc:08:
4d:70:8b:06:b4:17:42:c5:32:48:77:5b:c9:7b:40:
99:7c:58:97:15:3f:00:65:3c:4e:99:0f:6b:8a:99:
40:89:e7:3d:87:4c:7e:28:74:7d:49:c6:3a:e4:81:
f6:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:27:8C:8B:A2:18:03:6B:52:45:D0:96:71:72:DB:60:C0:DD:67:86
X509v3 Authority Key Identifier:
keyid:66:EC:78:99:76:D3:B5:84:01:6C:AC:19:F3:4B:BE:DE:96:6C:D2:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zux4mXbTtYQBbKwZ80u-3pZs0jA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/07bf5b-0340-434e-a444-f0761e29e6c4/1/Zux4mXbTtYQBbKwZ80u-3pZs0jA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/07bf5b-0340-434e-a444-f0761e29e6c4/1/Zux4mXbTtYQBbKwZ80u-3pZs0jA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:49:33:b9:12:a5:29:cb:dd:46:d8:ba:f3:e4:ac:a9:e0:2a:
d2:8f:1f:d5:56:7e:63:7e:63:24:fe:e9:14:49:aa:68:3b:7b:
3f:60:c9:c8:87:39:fa:8a:de:03:c7:a6:90:01:3f:1f:e2:a3:
a0:6a:df:2a:92:09:2e:6a:33:d4:d5:b5:6c:05:54:9c:12:71:
c4:87:10:22:01:91:a8:e0:15:06:de:f2:b2:f7:d2:77:de:2e:
83:c2:a8:2c:b0:0b:69:ed:aa:3f:2a:a1:f7:bb:ce:28:7a:8e:
b6:44:bb:8f:93:3b:32:3f:03:5f:b8:41:40:34:66:1a:0d:9d:
f2:c0:1a:ba:32:d5:d4:b6:85:09:03:6a:db:ab:08:68:8c:19:
93:ab:f5:ce:fc:9d:f0:4b:35:81:0f:38:61:d3:1b:f5:ae:43:
ac:6f:c6:72:22:89:b7:f1:6f:1f:56:77:c5:12:11:65:46:a8:
d4:e4:34:aa:d3:8c:37:7c:1e:41:4b:55:b3:b9:06:61:e7:f4:
b5:ee:8f:b1:4c:d6:d6:1c:95:a3:15:0d:b7:73:82:6a:c3:8e:
c3:ad:19:91:07:c4:40:5d:dc:30:eb:a4:cb:19:cd:21:14:54:
d9:95:b6:28:8f:4f:f8:2a:f8:51:02:a6:4c:0a:37:2e:81:71:
10:77:bf:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 01:37:40 2025 by rpki-client