Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.mft
File: ZjhRXzKUSWmuADG94C0fTL0NK5g.mft (raw, json)
Hash identifier: UTlE59BZxur1A7vX33IpSykk+ltYGvIVp6zlzGCKoLs=
Subject key identifier: AF:AE:E8:6F:C5:00:03:5D:64:F8:46:B6:6F:29:E3:ED:12:50:55:3F
Authority key identifier: 66:38:51:5F:32:94:49:69:AE:00:31:BD:E0:2D:1F:4C:BD:0D:2B:98
Certificate issuer: /CN=6638515f32944969ae0031bde02d1f4cbd0d2b98
Certificate serial: 019A296742C089E78E7D5B4F17AC3F29FED5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZjhRXzKUSWmuADG94C0fTL0NK5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.mft
Manifest number: 0259
Signing time: Tue 28 Oct 2025 06:00:24 +0000
Manifest this update: Tue 28 Oct 2025 06:00:24 +0000
Manifest next update: Wed 29 Oct 2025 06:00:24 +0000
Files and hashes: 1: 3AM1kiBUlkIMgJlgAVSsRhHcsVE.roa (hash: JRZBzZPP/Qgtum5bkbDwOE4ahKynlQtqROTLxUhU7PU=)
2: 9s50Q9-1ULqilThpHU79jiFEiIA.roa (hash: 5aJJUqP+R3fj8M4AoRNns1YealoNvLa9oSKi6PcBG8E=)
3: ZjhRXzKUSWmuADG94C0fTL0NK5g.crl (hash: /0i1bQLfbCkuXWRb0tDX+9iYdxlH1i6g36xY/B6v4jA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZjhRXzKUSWmuADG94C0fTL0NK5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 06:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:29:67:42:c0:89:e7:8e:7d:5b:4f:17:ac:3f:29:fe:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6638515f32944969ae0031bde02d1f4cbd0d2b98
Validity
Not Before: Oct 28 06:00:24 2025 GMT
Not After : Oct 29 06:00:24 2025 GMT
Subject: CN=afaee86fc500035d64f846b66f29e3ed1250553f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d6:ca:a8:d6:72:ae:9d:32:68:8f:c3:83:d4:
f5:92:a1:c9:c8:4b:4d:36:83:ef:5e:32:9a:18:cb:
83:d9:f8:d9:42:4b:5f:97:4e:61:75:6f:fc:61:ed:
bc:09:cf:16:76:9f:e4:62:ea:81:c4:ac:fb:fb:08:
06:79:07:dc:47:37:8f:63:c0:5d:2a:a4:64:9a:4d:
05:c1:6f:46:8d:fd:c6:26:e4:d1:d0:c0:3d:04:d1:
ac:d8:fa:fc:5e:8b:27:2f:97:1f:6d:dc:7e:cf:76:
93:a6:54:81:65:e9:ee:1b:35:f8:5c:a9:74:a0:51:
9f:a7:c0:50:e6:19:12:2c:6c:56:46:b7:10:44:54:
e4:ed:62:84:68:47:71:46:7f:89:d4:8d:95:a7:42:
c8:9a:cd:3e:e9:63:23:10:af:64:a8:64:72:fc:6a:
47:01:1e:a5:a5:fc:b4:6c:16:91:80:95:6c:2b:5f:
bf:c6:3e:6b:b5:36:5b:c1:ce:a3:13:56:78:d6:ad:
34:6e:e7:c5:d9:8e:57:23:b5:7b:7b:97:f3:60:3d:
f6:af:00:35:e9:e5:03:13:e3:01:cb:4a:73:b2:62:
8e:c5:aa:c8:ed:b3:b7:95:0a:b1:09:04:da:94:d0:
fb:58:60:4d:47:ae:d2:0d:75:18:60:6c:39:76:b0:
27:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:AE:E8:6F:C5:00:03:5D:64:F8:46:B6:6F:29:E3:ED:12:50:55:3F
X509v3 Authority Key Identifier:
keyid:66:38:51:5F:32:94:49:69:AE:00:31:BD:E0:2D:1F:4C:BD:0D:2B:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZjhRXzKUSWmuADG94C0fTL0NK5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:b3:2c:9e:81:50:77:68:a7:b4:bb:85:ae:6f:45:c9:5d:13:
35:9e:98:00:9d:49:1d:7c:75:03:6f:25:80:d7:76:32:db:a1:
63:02:ba:a8:d9:3a:d7:ba:e7:16:e7:c6:aa:87:b6:bc:e0:d9:
c9:2c:91:7e:9e:df:c9:9c:60:bd:ac:52:14:07:12:57:b6:88:
e1:4a:19:8f:6c:de:0d:25:88:c7:4f:36:98:db:22:dd:5f:e9:
a9:18:ae:d6:7a:76:a4:ee:ac:9b:0b:3f:b6:53:15:1d:56:d8:
d5:93:44:46:f8:04:9d:c9:a1:a8:a7:e0:a0:2c:29:4f:4c:d8:
25:f1:93:5e:81:8d:05:15:1d:fb:87:49:45:b5:7b:1f:13:fe:
e4:47:af:d8:71:0c:3a:42:7d:21:08:f0:03:4d:25:14:d9:f9:
13:5b:47:87:e1:e4:c5:94:ba:60:fd:03:df:c0:e9:f2:9b:ee:
20:a7:7f:d3:01:3f:04:47:b8:c4:a8:26:ce:13:98:b0:2a:c3:
f3:54:b2:25:89:b3:8e:21:16:09:d3:20:19:f4:ac:c5:ae:e4:
94:4e:23:a7:c8:62:1d:3a:97:d2:0f:f3:1c:ec:4e:c4:22:ec:
7b:2d:b8:a4:12:ea:90:37:5e:e1:07:40:bf:03:90:32:1d:ca:
22:de:88:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 16:39:40 2025 by rpki-client