Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.mft
File: ZQYJZpX35mELGbCOHX_ZxNkUpPA.mft (raw, json)
Hash identifier: 4EesIgObpZfXo8nMOJ8A2+SNIY4iAVexwiAB91RxBk0=
Subject key identifier: 87:21:EA:BA:7A:6B:92:81:05:17:5E:8E:8E:4A:13:11:B6:ED:EC:45
Authority key identifier: 65:06:09:66:95:F7:E6:61:0B:19:B0:8E:1D:7F:D9:C4:D9:14:A4:F0
Certificate issuer: /CN=6506096695f7e6610b19b08e1d7fd9c4d914a4f0
Certificate serial: 019A22F7E7CE59A4C815A5EB9471FDB172AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZQYJZpX35mELGbCOHX_ZxNkUpPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.mft
Manifest number: 16F7
Signing time: Mon 27 Oct 2025 00:01:03 +0000
Manifest this update: Mon 27 Oct 2025 00:01:03 +0000
Manifest next update: Tue 28 Oct 2025 00:01:03 +0000
Files and hashes: 1: 4GHtaL2ENr8x0dHCgzjR-2oufsc.roa (hash: SkJfNfL4xk1uCL5vaUVq92gTeEiReavJzDd3NtKKtoQ=)
2: P4Bbz81DKVf659V7Pusw5yxnCg8.roa (hash: 6mtNya9D4eJ+7094qYmfrW/oPVu6b8pgbmkAvNwldHc=)
3: ZQYJZpX35mELGbCOHX_ZxNkUpPA.crl (hash: aHFdKPZSHaPnHRIj2+slrlHplzQz5V9dtshx97NWB9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZQYJZpX35mELGbCOHX_ZxNkUpPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:f7:e7:ce:59:a4:c8:15:a5:eb:94:71:fd:b1:72:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6506096695f7e6610b19b08e1d7fd9c4d914a4f0
Validity
Not Before: Oct 27 00:01:03 2025 GMT
Not After : Oct 28 00:01:03 2025 GMT
Subject: CN=8721eaba7a6b928105175e8e8e4a1311b6edec45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:19:25:3e:c3:51:10:d6:eb:f3:d8:b9:22:0e:
9a:f9:8d:16:30:c1:f3:ee:a5:23:b1:b2:cd:83:ab:
44:34:e8:74:cd:a3:e3:53:b5:d9:db:ef:11:c5:7d:
47:2b:80:a5:f5:a0:fc:28:6f:31:5a:da:ff:9d:9e:
70:c2:1c:86:6d:6a:5e:17:7f:b5:64:4f:8e:01:dd:
93:0c:ea:80:d2:de:69:f9:c7:98:84:eb:cd:66:64:
14:9e:d4:ba:2f:9e:ae:b4:2b:f4:d8:64:6a:1a:11:
ab:5e:99:b2:69:67:04:b1:29:ae:a3:8c:08:b7:1b:
e1:2e:43:5d:fe:07:04:7e:ae:a3:d9:ee:59:14:c7:
a7:dd:d9:3a:b6:f4:57:28:69:d0:33:3f:3b:fc:b7:
db:4f:86:6a:83:a3:a2:2e:b9:56:93:f6:a1:88:0a:
6d:c3:76:03:bc:95:72:2d:5b:2b:8f:95:c2:c4:8a:
1d:ca:d5:19:aa:5a:06:3c:0c:fb:74:82:54:73:b2:
75:50:06:ec:11:3b:84:89:04:05:37:71:91:98:38:
e4:a0:86:a8:61:a4:f2:af:c7:03:11:c9:b0:65:a5:
b4:62:40:f5:1f:99:e3:26:e0:7c:0b:0c:ca:37:51:
f6:26:89:b5:a2:e7:d2:2d:2a:a9:dd:67:50:04:e5:
b6:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:21:EA:BA:7A:6B:92:81:05:17:5E:8E:8E:4A:13:11:B6:ED:EC:45
X509v3 Authority Key Identifier:
keyid:65:06:09:66:95:F7:E6:61:0B:19:B0:8E:1D:7F:D9:C4:D9:14:A4:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZQYJZpX35mELGbCOHX_ZxNkUpPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:6b:70:91:ed:3c:40:17:7c:ed:10:96:d5:2d:e4:97:6c:3b:
ef:5d:88:3c:88:29:82:34:cb:1c:31:fe:46:5b:dd:00:45:a2:
8d:2a:9d:b5:8e:6f:57:36:f5:50:f1:5f:54:2f:a4:ba:a3:81:
3f:b3:26:07:49:1b:3f:9b:dc:dc:fe:29:0c:a5:e7:95:42:d4:
0f:00:f2:c0:d8:54:75:5c:6e:e7:a4:5e:58:be:73:de:2a:2a:
bd:3b:53:ff:a6:d2:b5:b9:52:70:16:69:15:1a:f9:6a:d8:01:
0d:89:f7:6c:79:78:5a:c4:2c:46:c3:e0:3c:08:aa:da:ff:f6:
be:77:13:3e:7a:84:a3:68:9d:c1:2d:ac:fd:c5:98:28:a4:bb:
a7:04:29:f4:b4:4b:88:52:2f:cc:03:91:db:93:f0:dc:88:20:
62:c3:65:4c:40:00:27:03:7c:18:9f:67:fe:ef:80:2a:ce:ab:
fc:bf:42:e8:d9:9e:5d:e7:e4:39:c6:d5:fc:7f:6c:9f:88:e4:
55:1a:ab:af:5e:96:a4:0c:e4:db:bb:1d:e5:39:b6:50:af:c6:
71:53:d4:d8:aa:77:a5:32:92:da:b2:73:8e:a1:04:8d:76:84:
d4:e7:28:7c:41:19:9b:7f:78:cc:15:ef:4d:e9:ab:41:02:14:
cc:25:40:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 03:59:52 2025 by rpki-client