Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/ZZprl16v0s5RRocjgUNV9WxVuvs.mft
File: ZZprl16v0s5RRocjgUNV9WxVuvs.mft (raw, json)
Hash identifier: x7SQnOyjMCSySlCcT/jZ8kFZY0J+PsvuK5aw/LL/KwY=
Subject key identifier: 7F:6D:76:8E:8F:74:64:4B:5D:56:C0:51:C2:57:24:3B:A6:B4:34:EC
Authority key identifier: 65:9A:6B:97:5E:AF:D2:CE:51:46:87:23:81:43:55:F5:6C:55:BA:FB
Certificate issuer: /CN=659a6b975eafd2ce51468723814355f56c55bafb
Certificate serial: 019A1B3DE9E366936D65F29196278D321FCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZZprl16v0s5RRocjgUNV9WxVuvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/ZZprl16v0s5RRocjgUNV9WxVuvs.mft
Manifest number: 16F4
Signing time: Sat 25 Oct 2025 12:00:33 +0000
Manifest this update: Sat 25 Oct 2025 12:00:33 +0000
Manifest next update: Sun 26 Oct 2025 12:00:33 +0000
Files and hashes: 1: ZZprl16v0s5RRocjgUNV9WxVuvs.crl (hash: +oPy3BjDPVBVxAVumx391vLwbB6+uxjUeFcdsjf8Pps=)
2: hN0z1_4mmxKbkIk8CqnnvzNahto.roa (hash: AI7qbHiXXWxj2c6Gw1e/W0ArXAzLidVM4yaZJ83W98E=)
3: loQfbpMkrF-8FHm8l3OiW-eTM6E.roa (hash: u9sgxZASXDE+M+FEbB4vnXmXUh6Lo2WySjfXfmuOY70=)
4: vyP9hbS_76ZrupwSMef0B1pOVPk.roa (hash: f7AZEySBA5XegD3mdK9pluMntAOS8jT+L60Mq8N3IVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/ZZprl16v0s5RRocjgUNV9WxVuvs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/ZZprl16v0s5RRocjgUNV9WxVuvs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZZprl16v0s5RRocjgUNV9WxVuvs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 08:33:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1b:3d:e9:e3:66:93:6d:65:f2:91:96:27:8d:32:1f:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=659a6b975eafd2ce51468723814355f56c55bafb
Validity
Not Before: Oct 25 12:00:33 2025 GMT
Not After : Oct 26 12:00:33 2025 GMT
Subject: CN=7f6d768e8f74644b5d56c051c257243ba6b434ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:11:84:f7:31:0b:00:fa:da:c0:61:96:fa:0f:
7c:e9:d3:52:ab:75:80:32:fc:a8:0f:9f:96:1b:9c:
49:e1:ae:ff:34:ed:14:6a:d0:9a:f3:e3:01:33:77:
5c:b1:58:96:b9:8b:bc:ae:10:0a:9e:84:75:f1:64:
6a:ed:8d:70:74:86:1d:a8:c5:a9:1c:40:f2:f6:56:
fe:49:5b:88:fb:c7:63:71:bc:97:9a:e5:f6:fd:b9:
d3:68:77:d1:bc:bd:6f:4a:85:0c:7b:7c:5c:a3:29:
85:8f:30:a3:b3:fe:7f:ae:6e:f9:2b:37:f2:56:21:
63:0b:eb:2d:99:95:fb:af:0d:d9:c4:6f:bf:4d:ca:
94:1d:9b:ad:86:ec:30:e3:8e:1d:0b:38:ca:6f:e1:
1e:7d:04:3e:88:b6:46:5b:fb:60:c5:e4:51:49:e5:
f6:d1:33:75:9e:57:11:45:b9:03:9e:a6:57:db:4f:
21:00:ff:4e:40:d7:8c:26:ca:e0:61:99:27:10:c9:
79:9c:a8:84:00:a8:1f:2e:2d:95:31:dc:5f:03:2c:
37:ea:6e:0b:54:3e:0a:6b:f9:9c:dd:ac:0e:f3:38:
91:1c:f2:91:f3:c2:ff:29:e5:11:6c:9a:a3:dd:62:
a7:5a:f6:fa:4f:41:b3:7d:4a:b6:cc:2b:c5:65:25:
19:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:6D:76:8E:8F:74:64:4B:5D:56:C0:51:C2:57:24:3B:A6:B4:34:EC
X509v3 Authority Key Identifier:
keyid:65:9A:6B:97:5E:AF:D2:CE:51:46:87:23:81:43:55:F5:6C:55:BA:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZprl16v0s5RRocjgUNV9WxVuvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/ZZprl16v0s5RRocjgUNV9WxVuvs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/ZZprl16v0s5RRocjgUNV9WxVuvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:31:5d:dd:17:12:16:7c:c1:20:e2:30:2e:03:2b:ca:bf:1b:
66:31:96:2c:98:2c:63:a5:e2:ae:60:80:8d:56:1d:48:de:fc:
4c:13:7f:f1:71:16:5c:52:a5:8a:b8:7f:64:e2:41:04:0d:f0:
a9:ca:95:06:21:07:31:29:26:f0:89:fd:9c:d8:b1:60:8b:f4:
86:23:b5:13:f4:9c:69:88:14:e5:11:06:59:bf:77:97:c5:0c:
a8:21:61:84:b4:e7:61:0d:4a:b3:52:7e:5b:cf:d8:8f:58:25:
95:51:d8:ed:e4:1f:d5:c9:0d:b6:d4:40:2b:6b:f6:bf:86:f0:
1e:60:07:c8:a2:fc:d3:3f:8f:28:b7:7e:27:6a:ec:de:d9:6d:
f8:6a:76:d1:9f:ad:b7:c6:28:42:10:ba:d2:20:b3:ff:40:56:
4d:ac:a6:66:e8:18:c5:00:47:03:19:c8:70:e5:6b:1f:65:49:
40:a3:7f:5c:0a:44:4b:62:6b:b3:00:3c:ee:36:ba:f9:f8:a9:
4f:95:f7:27:16:a0:89:13:17:ab:6f:f2:b6:21:48:f3:c6:14:
9e:47:a2:02:9f:93:b0:73:31:60:23:8b:9c:6c:82:fe:84:e1:
6e:7c:12:7e:1b:77:f6:bc:37:26:aa:20:20:ba:c4:3d:1a:03:
24:2e:01:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 16:33:32 2025 by rpki-client